fidelityworkplacert[.]cyou

The domain fidelityworkplacert.cyou was registered on February 21, 2026 and is presently taken offline. DNS resolution points to the IP address 74.48.108.25, which belongs to AS35916 MULTACOM CORPORATION located in the United States. The site hosted a page with the title "Log In to Fidelity NetBenefits," a clear indication of an attempt to impersonate Fidelity’s employee benefits portal. Infrastructure analysis shows the domain appears on a single security blocklist, where it is actively blocked by PhishDestroy.

The SSL certificate associated with the site is rated E8, suggesting weak or misconfigured encryption. Threat‑intelligence sources classify the activity as banking phishing, and the domain has been referenced in fourteen AlienVault OTX pulses, confirming its presence in multiple community‑reported indicators. VirusTotal scans report that fourteen of ninety‑three security vendors flagged the domain as malicious, reinforcing the suspicion of phishing intent.

While the domain’s content has not been publicly captured beyond the page title, the convergence of blocklist presence, low‑grade SSL, targeted page title, and multiple vendor detections provides strong evidence of a credential‑harvesting operation aimed at Fidelity NetBenefits users. Defenders should add fidelityworkplacert.cyou to URL filtering and sink‑hole lists, block the associated IP address 74.48.108.25, and monitor for any resurgence of the domain or related subdomains. Continuous review of OTX and VirusTotal feeds is recommended to capture any new indicators that may emerge if the site is re‑hosted or re‑activated.