fidelityworkplacecv[.]cyou

The domain fidelityworkplacecv.cyou is a generic phishing site designed to steal banking credentials. It does not impersonate a specific brand but uses the name 'Fidelity NetBenefits' in its page title to deceive victims into entering login details. As of the latest verification, fidelityworkplacecv.cyou has been taken offline, though it previously posed an elevated risk of financial fraud.

Technical analysis shows fidelityworkplacecv.cyou was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and BitDefender. The domain was registered on November 28, 2025, through Gname.com Pte. Ltd. and resolved to the IP address 43.162.112.221, hosted on AS132203 in the US. It appeared on two security blocklists, PhishDestroy and PhishingDB, and was referenced in 13 AlienVault OTX threat intelligence pulses. The SSL certificate was issued by E8, and the observed page title was 'Log In to Fidelity NetBenefits'. Google Safe Browsing did not flag the domain, but Gridinsoft assigned it a trust score of 0/100.

Victims who entered credentials on fidelityworkplacecv.cyou should immediately change their banking passwords and enable two-factor authentication (2FA) on all financial accounts. Monitor accounts for unauthorized transactions and report any suspicious activity to the affected institution. To report the phishing domain, submit it to Google Safe Browsing, the Anti-Phishing Working Group (APWG), and local cybercrime authorities. If the site was accessed via a corporate network, notify the organization’s IT security team.