fideliltyasdcvice[.]click

The domain fideliltyasdcvice.click was registered on February 21, 2026 and is currently offline. It resolves to the IPv4 address 43.162.112.232, which is hosted in the United States and is associated with AS132203 Tencent Building, Kejizhongyi Avenue. The site presented the page title “Log In to Fidelity NetBenefits,” indicating an attempt to impersonate Fidelity’s employee benefits portal and classifying the activity as banking phishing. VirusTotal analysis recorded 15 detections out of 93 scanning engines, demonstrating that a notable subset of commercial malware and phishing scanners identified malicious behavior.

AlienVault OTX references show the domain appearing in 14 distinct threat‑intel pulses, and it is listed on one public blocklist, confirming that multiple independent sources have flagged the domain. The SSL certificate was rated E8, suggesting a low‑grade or potentially self‑signed certificate that does not provide strong encryption assurance. PhishDestroy has already blocked the domain, reinforcing the consensus that it is a malicious phishing host.

Defenders should immediately add fideliltyasdcvice.click to URL filtering and DNS blocklists, and consider extending blocks to the resolved IP 43.162.112.232 to capture any residual infrastructure reuse. Network monitoring should include outbound connections to the IP range of AS132203, and any authentication attempts to Fidelity NetBenefits originating from internal users should be logged and investigated. Although the site is offline, the persistence of the underlying IP and the prevalence of the domain in threat feeds suggest that adversaries may repurpose the same hosting resources for future campaigns; continuous watchlist updates and periodic re‑scanning of the IP are advisable.