fidelityworkplaceir[.]click

This domain, fidelityworkplaceir.click, was registered on 21 February 2026 and is currently hosted at IP 43.162.112.221. The IP is assigned to AS132203, a Tencent‑operated network located in the United States (Kejizhongyi Avenue). The site served an HTTPS certificate identified as grade E8. When accessed, the page returned the title “Log In to Fidelity NetBenefits,” indicating a banking‑phishing lure aimed at Fidelity NetBenefits users.

VirusTotal records show that 10 of 93 scanning engines flagged the domain as malicious, and the site is listed on one public blocklist. PhishDestroy has already taken the domain offline, and AlienVault OTX contains 14 pulses referencing the same indicator. The domain appears in 14 OTX threat‑intel feeds and has been associated with a generic banking phishing campaign. Defensive teams should immediately add fidelityworkplaceir.click and its resolved IP address 43.162.112.221 to deny‑list rules on perimeter firewalls, DNS resolvers, and endpoint protection suites.

Continuous monitoring of the ASN and any future DNS changes is advised, as threat actors often shift hosting after takedown. Correlation of internal logs for attempts to contact the domain or resolve the IP should be performed, and any credential submissions captured should be treated as compromised. Although the site is presently offline, the indicator set suggests an active phishing infrastructure that may be repurposed; therefore, maintain vigilance and update blocklists as new observations emerge.