fidelitysing[.]cyou

Analysis indicates that the domain fidelitysing.cyou was registered on 21 February 2026 and is currently taken offline. DNS resolution points to the IPv4 address 43.162.109.70, which is announced by AS132203 and appears to be hosted in the United States within a Tencent data center. The TLS certificate presented by the host is rated E8, suggesting a low‑trust certificate. The only visible page title retrieved during the scan is “Log In to Fidelity NetBenefits”, aligning with the listed scam type of Banking Phishing.

VirusTotal has recorded 15 positive detections out of 93 submitted scanners, confirming that multiple anti‑malware engines consider the domain malicious. The same domain is present on one external blocklist and has been listed in fourteen AlienVault OTX pulses, indicating that the broader threat‑intel community has observed activity related to this indicator. PhishDestroy has also added the domain to its blocklist, reinforcing its classification as a phishing vector. Defenders should immediately deny any outbound or inbound traffic to fidelitysing.cyou and the associated IP address 43.162.109.70 at the network perimeter.

The domain should be added to URL filtering and email security policies, and any existing logs should be queried for prior connections or credential submissions. Because the site is currently offline, continuous monitoring of the IP range and the registrar for re‑registration attempts is advisable. Correlation of the E8 certificate fingerprint with other observed phishing kits may reveal additional infrastructure reuse. Finally, security teams should update threat‑intel feeds with the observed indicators (domain, IP, TLS fingerprint, and detection counts) to improve early warning for future campaigns that may reuse the same hosting environment.