fldeiltytextservice[.]world

Analysis of the domain fldeiltytextservice.world confirms its classification as a banking phishing site targeting Fidelity NetBenefits users. The domain, created on February 21, 2026, was flagged by 17 of 93 security vendors on VirusTotal and appears on one security blocklist, including PhishDestroy. Infrastructure analysis reveals the domain resolved to IP address 43.162.126.210, hosted on AS132203 (Tencent Building, Kejizhongyi Avenue) in the United States. The SSL certificate was graded E7, indicating potential misconfiguration or malicious intent.

The page title, 'Log In to Fidelity NetBenefits,' explicitly identifies the targeted brand, aligning with the reported scam type of banking phishing. AlienVault OTX records the domain in 14 threat intelligence pulses, further corroborating its malicious use. Gridinsoft assigned a trust score of 0/100, reflecting high confidence in its classification as a phishing site. As of the report date, the domain is offline, though historical resolution and detection data remain relevant for retrospective analysis.

Defenders should treat this domain as confirmed malicious infrastructure. Network-level blocks at the IP and domain level are recommended, alongside monitoring for related domains or IPs associated with the same ASN or hosting provider. Given the explicit targeting of Fidelity NetBenefits, user awareness campaigns should emphasize the risks of credential harvesting via phishing sites. No evidence suggests the use of a phishing kit or additional payload delivery, though this remains unconfirmed due to the domain's current offline status.