fidelitytextservica[.]world

The domain fidelitytextservica.world was registered through Gname.com Pte. Ltd. on November 26, 2025. DNS resolution points to the IPv4 address 43.162.126.210, which resides in the United States and is announced by AS132203, associated with a Tencent building on Kejizhongyi Avenue. The site delivered the page title “Log In to Fidelity NetBenefits”, indicating an attempt to harvest credentials for the Fidelity NetBenefits service, and is classified as banking phishing. The SSL certificate assigned to the host received an E7 rating, reflecting low trustworthiness.

Infrastructure analysis shows the domain is listed on one security blocklist and is actively blocked by PhishDestroy. AlienVault Open Threat Exchange references the domain in fourteen separate threat‑intel pulses, reinforcing its malicious reputation. VirusTotal scans reported that sixteen of ninety‑five security vendors flagged the domain, providing additional detection confidence.

The domain’s current status is offline, but historical activity suggests it was used for credential‑stealing campaigns. Nameserver records list A.SHARE‑DNS.COM and B.SHARE‑DNS.NET as authoritative. While the exact phishing kit and delivery mechanisms have not been publicly released, defenders should continue to block the domain and its associated IP, monitor related ASN traffic, and update web‑filtering policies to include the observed indicators of compromise.