fldeltymxuujehgsgfies[.]com

Analysis date: July 25 2026. The domain fldeltymxuujehgsgfies.com was registered through Gname.com Pte. Ltd. on November 10 2025. DNS resolution points to IP 74.48.84.30, which belongs to AS35916 MULTACOM CORPORATION in the United States. The site presented the page title “Log In to Fidelity NetBenefits”, indicating a targeted banking credential harvest against Fidelity NetBenefits users. SSL/TLS analysis shows the certificate is issued by the E7 certificate authority, but no further validation details are available. The domain is currently taken offline, as confirmed by the PhishDestroy takedown service, and its risk posture is reflected by a Gridinsoft trust score of 0 out of 100.

Threat intelligence feeds have recorded the domain in fourteen AlienVault OTX pulses and it appears on one additional security blocklist. VirusTotal scanned the host and six of ninety‑three security vendors reported a detection, reinforcing the malicious classification. The overall risk level is elevated, and the scam type is identified as banking phishing. Uncertainty remains regarding the full phishing kit or any additional infrastructure that may have been used, as no further page content or HTTP response details have been released. The presence on a single public blocklist indicates limited exposure, but the inclusion in multiple OTX pulses suggests active distribution among threat actors.

The low trust score and multiple vendor detections confirm the domain's malicious intent. Because the site is offline, any ongoing campaigns must rely on cached copies or redirected traffic, so threat hunters should search for remnants in web archives and examine email samples that reference the same page title. Defenders should add the domain and its associated IP address to blocklists, monitor for any resurgence, and enforce strict email filtering for messages purporting to originate from Fidelity NetBenefits.