fidelitysings[.]cyou

This domain was registered on 21 February 2026 and resolves to 43.162.109.70, an address owned by ASN 132203 located in the United States (Tencent Building, Kejizhongyi Avenue). The site presented the title “Log In to Fidelity NetBenefits”, indicating a credential‑harvesting attempt against Fidelity NetBenefits users. VirusTotal records show that 18 of 93 scanning engines flagged the domain, confirming a malicious classification by multiple vendors. It is listed on one public blocklist and has been actively blocked by the PhishDestroy service.

The SSL certificate presented is identified only as “E7”, providing no additional trust signals. As of the report date the domain is marked offline, but the underlying infrastructure remains reachable and could be re‑activated. Defenders should add fidelitysings.cyou to internal URL blocklists, enforce DNS sink‑hole rules for 43.162.109.70, and monitor outbound traffic for attempts to resolve or contact the domain.

Correlation with authentication failures on Fidelity NetBenefits services may indicate successful credential capture. Continuous watch‑listing of similar‑pattern registrants and rapid re‑evaluation if the domain resurfaces are recommended. Until a full content capture is available, the precise theft mechanism remains unknown, but the available indicators collectively confirm a high‑confidence banking phishing threat.