fidelityworkplacejw[.]click

The domain fidelityworkplacejw.click was registered on February 21, 2026 and is currently taken offline. DNS resolution points to the IP address 43.162.124.172, which is hosted in the United States and associated with ASN 132203, a Tencent‑owned network located on Kejizhongyi Avenue. The site presented the page title "Log In to Fidelity NetBenefits," indicating a banking phishing campaign targeting Fidelity NetBenefits users. Security scanners have identified the domain as malicious: 13 of 93 VirusTotal vendors flagged it, and it appears on a single public blocklist.

PhishDestroy has actively blocked the domain, and Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation. The SSL certificate was rated E8, suggesting weak or improperly configured encryption. AlienVault OTX references the domain in five separate threat pulses, reinforcing its association with fraudulent activity.

The overall risk assessment is elevated, and the infrastructure exhibits typical characteristics of short‑lived phishing operations, such as rapid domain creation and immediate takedown. Defenders should continue to block the domain at network perimeter controls, monitor for any resurgence of the same IP or ASN in future campaigns, and advise affected users to verify legitimate Fidelity NetBenefits login URLs. Ongoing threat‑intel collection is recommended to capture any new artifacts or related command‑and‑control endpoints that may emerge from this campaign.