fidelityworkplacep[.]help

On July 23, 2026, the domain fidelityworkplacep.help was evaluated as a confirmed banking phishing site. The domain was registered on February 21, 2026 and currently reports an offline status. DNS resolution points to the IP address 74.48.108.25, which is geolocated to the United States and belongs to Autonomous System AS35916 operated by MULTACOM CORPORATION. The TLS certificate presented is identified only as "E7," offering no further validation of the server’s identity.

The page title returned from the site is "Log In to Fidelity NetBenefits," indicating an attempt to impersonate Fidelity’s employee benefits portal. Security telemetry shows the domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. Reputation scoring from Gridinsoft assigns a score of 0 out of 100, reflecting a lack of trust. VirusTotal analysis records 12 detections out of 93 scanned vendors, reinforcing the malicious classification.

Given the confirmed phishing intent, defenders should immediately add fidelityworkplacep.help to network and endpoint blocklists, enforce DNS sinkholing for the associated IP 74.48.108.25, and monitor for any residual traffic that may still reach the host. Continuous observation of the hosting ASN (AS35916) is advised, as the infrastructure could be reused for further campaigns. Although the site is presently offline, the combination of low trust scores, multiple vendor detections, and active blocklist listings underscores a persistent threat that warrants proactive mitigation.