fidelityworkplaceit[.]one

PhishDestroy first observed fidelityworkplaceit.one on Mar 4, 2026. The captured page title is “Log In to Fidelity NetBenefits”. Stored page analysis classifies the content as banking phishing. Current evidence score: 83/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Google Safe Browsing, and Spamhaus DBL. VirusTotal recorded 11 detections among 94 engines: ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, CyRadar, ESET, Fortinet, Google Safebrowsing, Lionic, PhishLabs, SOCRadar on Mar 5, 2026 at 05:07 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 4, 2026 at 22:45 UTC. Spamhaus DBL: DBL_SPAM on Jul 14, 2026 at 02:33 UTC. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLScan completed without a malicious verdict on Jul 29, 2026 at 03:15 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 01:15 UTC; content was unavailable. The recorded creation date for the domain is Mar 4, 2026. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 45.150.34.247 on AS205775 (neoncorenetworks NEON CORE NETWORK LLC, US). The recorded endpoint location is Amsterdam, NL. DOM analysis on Jul 29, 2026 at 04:07 UTC returned 83/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists E8 as the certificate issuer.

The content indicators and 3 positive source findings support the current banking phishing classification.