fidelityworkplaceev[.]click

This report details the technical threat posed by the domain fidelityworkplaceev.click. The site presented itself as a login portal for Fidelity NetBenefits, a legitimate financial services platform. As a banking scam, its primary threat was credential theft, attempting to capture users' login information for unauthorized access to their financial accounts.

Technical analysis reveals a high-risk profile. The domain was registered on 2026-02-21 and hosted on IP address 43.162.112.221 (United States), belonging to AS132203 Tencent Building, Kejizhongyi Avenue. VirusTotal analysis shows 17 out of 95 security vendors flagged the domain as malicious, including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. The site utilized an SSL certificate (type E7) to appear legitimate. It was present on 2 blocklists, and GridinSoft assigned a trust score of 0 out of 100.

The domain is currently offline. The DOM risk score of 98 out of 100 indicates an extremely high threat level. Due to the impersonation of a major financial brand and the high number of security vendor detections, this domain represents a critical risk for credential harvesting.