dqctvuqfidelity[.]qpon

Analysis of dqctvuqfidelity.qpon shows an elevated‑risk generic phishing infrastructure targeting Fidelity NetBenefits users. The site presented the page title "Log In to Fidelity NetBenefits," indicating an attempt to lure victims into credential harvest. The domain was registered on February 21, 2026 and is currently taken offline, but historical data remain relevant for detection. DNS lookup resolved the domain to IP address 43.162.126.210, which is geolocated in the United States and assigned to ASN 132203, a Tencent‑owned network on Kejizhongyi Avenue.

The SSL certificate received an E7 grade, suggesting weak encryption or misconfiguration. Reputation filters flag the domain: it appears on one security blocklist, has been cited in fourteen AlienVault OTX pulses, and was blocked by PhishDestroy. Gridinsoft assigned a trust score of 0 out of 100, reinforcing its malicious nature. VirusTotal scans recorded sixteen positive detections out of ninety‑three consulted security vendors.

The combination of a low trust score, multiple vendor detections, and inclusion in threat‑intel pulses indicates a high probability that the domain was used for credential phishing. Defenders should immediately add dqctvuqfidelity.qpon and its resolved IP 43.162.126.210 to network blocklists, monitor for any HTTP requests to the domain, and apply URL filtering rules that target the observed page title. Continuous threat‑intel feeds should be consulted for new aliases or related infrastructure, and security teams should educate users about unsolicited Fidelity NetBenefits login prompts to reduce successful phishing attempts.