# fidelity-investments-login.at — MALICIOUS

> fidelity-investments-login.at is a credential theft site mimicking Fidelity Investments. VirusTotal flags 23/95 vendors.

## Summary
PhishDestroy identifies fidelity-investments-login.at as an active credential phishing domain masquerading as the legitimate Fidelity Investments login portal. This fraudulent site is engineered to steal user credentials through brand impersonation, targeting victims with a spoofed interface that closely replicates the official Fidelity Investments website. The page is likely hosted with a malicious login form designed to harvest usernames, passwords, and potentially multi-factor authentication codes for unauthorized account access and financial theft.

Technical indicators for this domain reveal heightened risk: VirusTotal reports a detection ratio of 23 out of 95 security vendors, indicating partial but not universal recognition of the threat. The domain resolves to IP address 95.129.234.38 and utilizes a Let's Encrypt SSL certificate, which does not guarantee legitimacy. Public WHOIS data shows this domain was recently registered, though the exact creation date is not specified in the available intelligence. It has been flagged by multiple blocklists including PhishingArmy and OISD, and is currently blocked by enterprise and consumer security platforms operating these lists.

As of the latest assessment, fidelity-investments-login.at remains active and accessible via its IP and domain. Immediate defensive actions include blocking the domain and IP at the network and endpoint levels. Users should avoid interacting with this site entirely. The residual risk remains elevated due to active hosting, partial detection coverage, and the use of a trusted SSL issuer to lend false credibility. Continuous monitoring and proactive blocking are strongly advised to prevent credential compromise and financial fraud.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 95.129.234.38

## Detection Status
- VirusTotal: 23 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishingArmy", "OISD"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/fidelity-investments-login.at
- PhishDestroy: https://phishdestroy.io/domain/fidelity-investments-login.at/
- LLM endpoint: https://phishdestroy.io/domain/fidelity-investments-login.at/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/fidelity-investments-login.at/
Last updated: 2026-04-10