fidelityvvitkubnn[.]click

This domain, fidelityvvitkubnn.click, operates as a credential theft site designed to harvest login details for Fidelity NetBenefits accounts. Analysis of the page title, 'Log In to Fidelity NetBenefits,' confirms the site mimics a legitimate financial platform to deceive users into entering sensitive credentials. Such campaigns typically lead to unauthorized account access, financial fraud, or identity theft if successful. Infrastructure analysis reveals multiple indicators of malicious activity. The domain was registered on November 19, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with high-risk registrations. It resolves to the IP address 43.162.112.41, hosted under AS132203 in the United States, despite the provider’s non-US origin. Detection metrics further substantiate the threat: 17 out of 95 security vendors flagged the domain on VirusTotal, while two blocklists, PhishDestroy and PhishingDB, have actively listed it. The SSL certificate, graded E7, suggests poor security practices, reinforcing the domain’s suspicious nature. Users who visited fidelityvvitkubnn.click should take immediate action to mitigate potential risks. First, revoke any credentials entered on the site and enable multi-factor authentication on the legitimate Fidelity platform. Monitor associated financial accounts for unauthorized transactions and report suspicious activity to the institution. Additionally, consider running a full security scan on devices used to access the domain, as credential theft sites may deploy secondary payloads. If personal or financial data was exposed, notify relevant authorities or credit monitoring services to prevent further exploitation.