fidelityworkplacecx[.]click

Analysis of the domain fidelityworkplacecx.click shows multiple indicators of compromise consistent with a banking‑phishing campaign. The site was registered on 21 February 2026 and presently resolves to the IP address 43.162.112.221, which is hosted in the United States and assigned to ASN 132203, a Tencent‑operated facility on Kejizhongyi Avenue. The SSL certificate presented for the domain is rated E7, a low trust level that further undermines confidence in the site’s legitimacy. VirusTotal records indicate that 14 of 95 scanned security vendors flag the domain as malicious, reinforcing the suspicion of malicious intent.

Independent reputation services corroborate this view: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on one known security blocklist. PhishDestroy has already taken the domain offline, confirming that active mitigation steps have been applied. The page title returned by the web server, "Log In to Fidelity NetBenefits," aligns with the declared scam type of banking phishing, targeting users of Fidelity’s employee benefit portal.

While the page content has not been publicly examined, the convergence of a recent registration date, low SSL rating, multiple vendor detections, and a targeted login title provides a strong evidentiary basis for classifying the domain as a phishing vector. Defenders should continue to block the domain at network perimeters, monitor for any resurgence of the underlying IP address, and update endpoint detection signatures to include the observed vendor detection patterns. Additional investigative steps, such as retrieving historic HTTP responses or conducting sandbox analysis of any associated payloads, would clarify the full scope of the campaign but are not required for immediate mitigation.