fidelityworkplaceig[.]click

This report analyzes the domain fidelityworkplaceig.click, which poses a credential harvesting threat. The site's page title, "Log In to Fidelity NetBenefits," and its classification as a banking scam indicate it impersonated the legitimate Fidelity NetBenefits login portal. The primary threat was the theft of user login credentials for financial accounts.

Technical evidence confirms the malicious nature of the site. VirusTotal flagged the domain with 9 detections out of 95 vendors, including ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, and Fortinet, and it appears on 2 blocklists. The domain was registered on 2026-02-21, hosted on IP address 43.162.112.221 in the United States, associated with AS132203 Tencent Building, Kejizhongyi Avenue. The site utilized an SSL certificate with grade E8.

The domain is currently DOWN/OFFLINE, indicating it is no longer accessible. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 73, reflecting a high risk level. Despite its offline status, the domain remains a threat due to potential re-registration or future reactivation.