Security Scan Report: fsa.netbenefits.com

Redirected to:
https://fsa.netbenefits.com/Login.aspx?ReturnUrl=%2f
Submitted: Aug 29, 2026, 10:21:27 PMCompleted: Aug 29, 2026, 10:22:47 PMpubliccompleted

This website contacted 3 IPs in 1 country across 3 domains to perform 33 HTTP transactions. The main domain is fsa.netbenefits.com and was registered 20 years ago.

Submitted URL: https://fsa.netbenefits.com

Effective URL:

https://fsa.netbenefits.com/Login.aspx?ReturnUrl=%2f
Redirected

The Cisco Umbrella rank of the primary domain is #148,038 of the top 1 million websites

AI Security Verdict

Low Risk

Confidence: 95%

3
Risk Score

This is an ordinary sign-in page on a long-established, well-ranked domain, with credentials submitted to a host the operator controls.

Risk Factors (1)
Low Umbrella ranking (#148,038) for a site claiming a major brand
Safety Factors (4)
No malicious IoC matches
No JavaScript malware detections
No network IDS alerts
Top-ranked domain (Cisco Umbrella #148,038, 10267 days old) with no strong malicious indicators — a login form on a household-name site is normal; risk clamped from 10 to 3
Domain age information unavailable

Details

Page Title

Login - Fidelity Investments

Scan Type

public

Domain Name Analysis

The domain 'fsa.netbenefits.com' uses the commercial generic top-level domain (.com) with subdomain 'fsa'. The registrable portion 'netbenefits' spans 11 characters with 4 vowels and 7 consonants. Tokenizing the label suggests 2 words: net, benefits. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fsa.netbenefits.com

Page Load Overview

2.36s
Total Load Time
491 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:613 chars
Detector Agreement:67%

Website Classification

Primary Category

healthcare medical36% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
36%
finance/banking
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1145.223.165.93Incapsula · WAFUnited States
AS19551Incapsula Inc
11151.101.128.114Fastly · CDNUnited States
AS54113Fastly, Inc.
11151.101.64.114Fastly · CDNUnited States
AS54113Fastly, Inc.
333--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10801D04AEC08C45C92952EC3B0E0E815C1EC808BDA90488CF6D08233E68DB8B84567CA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hnMEwuiuX4wR5IjYXbbZKyffpDMwEfhdbZoARXsm5oARXshN5oARXsTSNqJmW7+S:hMNmV5wAjpD5EfxXsyXsZXsTHTeNVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:741:AAAgAAAgAAQAAAIAAAAAAAAAAMAAAAAAEAgAAAAAAQBAAAQGAgQAAAAAAAgAAAAAABAAAAAAAAAAQAAAQAAAAAAEAAAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0c4c041c343c3c00
Perceptual Hash:983839ce64676766
Difference Hash:90912d3df5694d02
Wavelet Hash:bc9c84bcb4bc3c30
Color Hash:#53ac62

Other Hashes

Crop Resistant:90912d3df5694d02

Scan History

Scan history not available

Unable to load historical scan data