fidelityportfolioknowiedge[.]lat

The domain fidelityportfolioknowiedge.lat has been identified as a brand impersonation threat targeting Fidelity, a financial services organization. Analysis confirms the domain was designed to mimic legitimate Fidelity login portals, specifically replicating the page title 'Log In to Fidelity NetBenefits.' The domain is currently offline, but prior activity indicates malicious intent to harvest credentials or sensitive financial information. Infrastructure analysis reveals the domain was registered through Gname.com Pte. Ltd. on November 29, 2025, and resolved to the IP address 43.162.112.221, hosted under AS132203 (Tencent Building, Kejizhongyi Avenue, US). Security vendor assessments flagged the domain as malicious, with 19 of 95 VirusTotal vendors detecting it as a threat. Additionally, the domain appears on two security blocklists and is absent of a valid SSL certificate, further indicating its illegitimate nature. No legitimate association with Fidelity or its subsidiaries was found. Current status confirms the domain has been taken offline, reducing immediate risk to users. However, organizations and individuals are advised to block the domain and associated IP (43.162.112.221) at the network perimeter. Security teams should monitor for related indicators, including the registrar (Gname.com Pte. Ltd.) and hosting provider (AS132203), as these may be reused for future campaigns. End-users should be educated on recognizing brand impersonation tactics, particularly those involving financial services, and encouraged to verify domain authenticity before entering credentials.