fidelityworkplaceix[.]click

The domain fidelityworkplaceix.click is flagged as a generic phishing threat, designed to mimic the login page of Fidelity NetBenefits. The primary risk associated with this domain is the potential for stealing user credentials and personal information, leading to financial loss and identity theft.

Analysis indicates that fidelityworkplaceix.click has been detected by 15 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain was registered through Gname.com Pte. Ltd. on November 30, 2025, and resolves to the IP address 43.162.112.221, which is located in the United States under the AS132203 Tencent Building, Kejizhongyi Avenue. The domain currently appears on 2 security blocklists, specifically PhishDestroy and PhishingDB, further corroborating its malicious intent.

If users have visited this domain, they are advised to immediately change their Fidelity NetBenefits passwords and enable two-factor authentication. Additionally, users should monitor their financial accounts for any unauthorized activity and consider contacting their financial institution for further guidance. It is also recommended to run a comprehensive security scan on any devices that may have been exposed to this domain to detect and remove potential malware.