fidelityworkplacejg[.]click

The domain fidelityworkplacejg.click was registered on February 21, 2026 and is currently listed as taken offline. DNS resolution points to the address 43.162.112.221, which is hosted in the United States and belongs to ASN 132203 associated with a Tencent‑owned facility on Kejizhongyi Avenue. The site presented a page title of "Log In to Fidelity NetBenefits," indicating a targeted attempt to harvest credentials for the Fidelity NetBenefits service. Automated scanning on VirusTotal recorded 14 positive detections out of 93 security vendors, confirming that a notable portion of the security community recognizes the domain as malicious.

The domain appears on a single external blocklist and is explicitly blocked by the PhishDestroy service, evidencing active mitigation by at least one anti‑phishing provider. AlienVault OTX references include 14 distinct threat‑intel pulses that reference the same indicator, reinforcing its association with broader phishing campaigns. The SSL certificate was rated E8, suggesting a low trust score for the TLS implementation.

The overall risk assessment is elevated, consistent with a banking‑phishing classification. While the page title confirms the intended victim brand, no additional content details have been disclosed, leaving the full scope of the credential‑harvesting infrastructure uncertain. Defenders should continue to block the domain and its hosting IP, incorporate the indicator into internal threat‑intel feeds, monitor for reuse of the IP range or similar TLS certificate patterns, and remain vigilant for any re‑appearance of the domain in future phishing attempts.