potfltefidelity[.]qpon

The domain potfltefidelity.qpon was registered on November 24, 2025 through Gname.com Pte. Ltd. and is currently taken offline. The site presented the page title "Log In to Fidelity NetBenefits", indicating a banking‑credential harvesting attempt targeting Fidelity NetBenefits users. The domain is listed on a single security blocklist and has been blocked by the PhishDestroy service. Its SSL certificate is identified as type E7, which is consistent with certificates often observed on malicious phishing infrastructure.

DNS resolution points to IP address 43.162.126.210, which is hosted in the United States and belongs to ASN 132203, a Tencent‑owned network located on Kejizhongyi Avenue. The IP has been associated with other malicious activity, reinforcing the likelihood that the hosting environment is compromised or deliberately used for phishing. VirusTotal analysis shows that 15 out of 93 scanned security vendors flagged the domain as malicious, providing independent confirmation of its abusive nature. AlienVault OTX contains the domain in 13 distinct threat intelligence pulses, further evidencing its recognition across the community.

Gridinsoft assigned a trust score of 0 out of 100, indicating a complete lack of confidence in the domain’s legitimacy. The overall risk assessment is elevated, and the classification is Banking Phishing. Defenders should ensure that potfltefidelity.qpon is added to local and network‑level blocklists, monitor traffic to the associated IP 43.162.126.210 for any residual connections, and consider sharing the observed indicators—creation date, registrar, SSL type, page title, and detection counts—with threat‑sharing platforms to aid broader mitigation. Continuous re‑evaluation is recommended in case the domain is re‑hosted or the infrastructure is repurposed for future campaigns.