fideiitytextservice[.]world

PhishDestroy identified fideiitytextservice.world as a generic phishing threat targeting Fidelity NetBenefits users. The domain attempted to impersonate the legitimate Fidelity login page to harvest credentials. This campaign likely utilized a standard phishing kit rather than a sophisticated drainer, focusing on credential theft through a deceptive login interface.

Technical analysis reveals that the domain was registered on November 26, 2025 through GNAME.COM PTE. LTD. and resolved to IP address 43.162.126.210. SSL certificate E7 was issued for the site. VirusTotal flagged the domain with 17 out of 95 security vendors, while AlienVault OTX reported 13 threat intelligence pulses. The domain appears on two security blocklists but was not added to Google Safe Browsing. These indicators confirm the domain's malicious nature and its targeting of Fidelity customers.

As of the latest check, fideiitytextservice.world has been taken offline, mitigating immediate risk. PhishDestroy recommends that users who may have interacted with this domain change their Fidelity passwords immediately and enable multi-factor authentication. Remaining risk is low due to the domain's takedown, but users should remain vigilant against similar phishing attempts. Monitoring for any related domains or follow-up attacks is advised.