fidelitydiglital[.]qpon

This domain, fidelitydiglital.qpon, presents a direct threat as a brand impersonation phishing site designed to harvest login credentials for Fidelity NetBenefits accounts. The page title, 'Log In to Fidelity NetBenefits,' mimics the legitimate Fidelity platform, targeting users who may inadvertently enter sensitive financial or personal information. The domain is structured to exploit trust in the Fidelity brand, potentially leading to unauthorized account access, financial theft, or further targeted attacks using stolen credentials.

Analysis indicates the domain was registered on February 21, 2026, a future date suggesting potential typosquatting or domain spoofing tactics. It resolves to the IP address 43.162.109.164, hosted within AS132203 (Tencent Building, Kejizhongyi Avenue), an infrastructure frequently associated with malicious activity. The domain is flagged by 17 out of 95 security vendors on VirusTotal and appears on two distinct security blocklists. The SSL certificate, identified as 'E7,' provides no additional trust indicators, further confirming its illegitimate nature.

Users who visited fidelitydiglital.qpon or entered credentials on the site should immediately take corrective action. Reset passwords for any accounts accessed or linked to the phishing page, particularly Fidelity or other financial services. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial statements and account activity for signs of unauthorized transactions. If personal or financial data was submitted, consider reporting the incident to relevant financial institutions and credit monitoring services to prevent potential identity theft or fraud.