fidelityworkplaceci[.]one

This domain, fidelityworkplaceci.one, poses a significant threat as a brand impersonation phishing site. Analysis indicates that it impersonates Fidelity's NetBenefits login page, aiming to steal user credentials and sensitive information. The page title 'Log In to Fidelity NetBenefits' is designed to mislead users into believing they are accessing a legitimate Fidelity service.

Technical indicators include a VirusTotal detection count of 20 out of 95 security vendors, which suggests that while some security solutions recognize the domain as malicious, others may not, potentially leaving users vulnerable. The domain was registered on February 02, 2026, through Gname.com Pte. Ltd., a registrar known for facilitating the creation of suspicious domains. The SSL certificate has an E8 rating, indicating a lower level of trust. The domain resolves to an IP address 43.162.115.222, located in the United States (AS132203 Tencent Building, Kejizhongyi Avenue). Currently, the domain is offline and appears on one security blocklist, further confirming its malicious nature.

If users have visited fidelityworkplaceci.one, they are advised to immediately change their Fidelity account passwords and any other accounts using the same or similar credentials. Additionally, users should monitor their financial statements for any unauthorized transactions and consider enabling multi-factor authentication (MFA) on their accounts. Reporting the incident to Fidelity's customer support and their respective IT security teams is also recommended to mitigate potential damage and prevent further misuse.