fldelltytextservlce[.]world

This domain impersonates the Fidelity NetBenefits login portal to harvest user credentials in a banking scam. The page title "Log In to Fidelity NetBenefits" is used to deceive victims into entering sensitive financial account information, posing a direct threat of account takeover and financial fraud.

Technical analysis reveals the domain was created on 2026-02-21 and resolves to IP address 43.162.126.210, hosted in the United States under AS132203 (Tencent Building, Kejizhongyi Avenue). VirusTotal reports 17 out of 95 security vendors flagged the domain as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The site uses an SSL certificate rated E8 and appears on two blocklists. GridinSoft trust rating is 0 out of 100, and the domain risk score is 83.

As of the report date, the site is DOWN/OFFLINE, but the high risk score and widespread security vendor detections indicate it was actively used for credential theft. Given the zero trust rating and impersonation of a major financial brand, this domain represents a severe phishing threat that should remain blocked and monitored for reactivation.