fidelityworkplacejv[.]click

This domain, fidelityworkplacejv.click, is identified as a phishing site targeting users of Fidelity NetBenefits, as indicated by the page title 'Log In to Fidelity NetBenefits.' The domain was registered on February 21, 2026, and is currently offline. Analysis reveals it was flagged by 12 of 95 security vendors on VirusTotal, though the exact detection signatures are not specified. The domain appears on one security blocklist and has been referenced in 14 AlienVault OTX threat intelligence pulses, suggesting broader awareness within the security community. Infrastructure analysis shows the domain resolved to IP address 43.162.124.172, hosted on AS132203 (Tencent Building, Kejizhongyi Avenue) in the United States.

The SSL certificate is graded E7, indicating potential weaknesses or misconfigurations commonly associated with malicious domains. Gridinsoft assigns this domain a trust score of 0/100, and it has been blocked by PhishDestroy. The scam type is classified as banking phishing, though no specific phishing kit or additional technical artifacts have been confirmed at this time.

Defenders should treat this domain as high-risk and prioritize blocking it at the DNS and proxy levels. Security teams are advised to review logs for connections to 43.162.124.172 and monitor for related domains using similar naming conventions or infrastructure. Further investigation into associated threat actor infrastructure may be warranted given the domain's presence in multiple threat intelligence feeds.