fidelityworkplacevx[.]click

This domain is flagged as a banking phishing threat targeting Fidelity NetBenefits users. The domain fidelityworkplacevx.click was registered on February 21, 2026, and as of the report date of July 23, 2026, it is offline. Analysis of available evidence confirms malicious intent. The domain resolves to IP address 43.165.68.110, which is hosted in the United States by AS132203 Tencent Building, Kejizhongyi Avenue. The page title is 'Log In to Fidelity NetBenefits', indicating an attempt to impersonate the legitimate Fidelity Benefits login portal.

The SSL certificate type is E7. Security vendor detection is strong: VirusTotal flags this domain as malicious by 15 out of 95 security vendors, and it appears on one security blocklist, including PhishDestroy. The GridinSoft trust score is 0 out of 100. AlienVault OTX includes this domain in one threat intelligence pulse.

The exact phishing kit or page content has not been analyzed beyond the page title, but the scam type is classified as banking phishing. Defenders should ensure that this domain remains blocked on all network security appliances and email gateways. Any users who may have accessed this domain should be advised to reset their Fidelity NetBenefits credentials immediately and monitor for unauthorized account access. Given the domain is offline, further investigation into the hosting provider and SSL certificate issuance may provide attribution leads for law enforcement or takedown coordination.