fidelityworkplacelp[.]click

The domain fidelityworkplacelp.click has been identified as a generic phishing site targeting users of Fidelity NetBenefits. This domain does not appear to be associated with any specific drainer kit but is designed to mimic the login page of Fidelity NetBenefits to steal user credentials.

Technical analysis reveals that fidelityworkplacelp.click has been flagged by 18 out of 95 security vendors on VirusTotal, indicating a significant level of suspicion. The domain is registered under AS132203, located in the Tencent Building on Kejizhongyi Avenue in the United States. It was created on February 21, 2026, and resolves to the IP address 43.162.124.172. The domain has an SSL certificate with the serial number E7 and is currently listed on 2 security blocklists, including PhishDestroy and PhishingDB.

As of the latest assessment, the domain is offline, which reduces the immediate risk to potential victims. However, the domain remains flagged and should be monitored for any attempts to reactivate or redirect to other phishing sites. Organizations and individuals are advised to update security configurations to block this domain and educate users about the dangers of phishing attacks targeting financial institutions.