fidelityworkplacehs[.]click

This report analyzes the domain fidelityworkplacehs.click, which was observed impersonating the Fidelity NetBenefits login portal. The site’s page title, “Log In to Fidelity NetBenefits,” and its classification as a banking scam indicate it was designed to harvest user credentials and financial account access data. The primary threat is credential theft, potentially leading to unauthorized access to retirement and investment accounts.

Technical analysis confirms the domain is malicious. VirusTotal recorded detections from 10 out of 95 scanning engines. It was flagged by ADMINUSLabs, alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, and Fortinet. The domain is listed on 1 blocklist. It was created on 2026-02-21 and is hosted at IP 43.162.112.221, located in the United States, under AS132203 (Tencent Building, Kejizhongyi Avenue). The SSL certificate is type E8. GridinSoft trust rating is 0 out of 100, and the DOM risk score is 73.

The domain is currently offline. The combined evidence—high detection rate, low trust score, recent creation, and impersonation of a major financial brand—indicates a high risk. Any user who interacted with this site while it was active should consider their credentials compromised and take immediate corrective action.