fideltyportfolloknowiedge[.]lat

The domain fideltyportfolloknowiedge.lat poses a specific brand impersonation threat targeting Fidelity customers. Its page title, "Log In to Fidelity NetBenefits," is designed to trick users into entering their login credentials on a fraudulent site. This typo-squatted domain exploits a common misspelling of "Fidelity Portfolio Knowledge" to appear legitimate, aiming to harvest sensitive financial information.

Evidence of malicious activity is substantial. VirusTotal reports that 15 out of 95 security vendors flag this domain as malicious. It was created on November 29, 2025, through registrar Gname.com Pte. Ltd., a registrar often associated with phishing campaigns. The domain appears on 2 security blocklists and has been found in 16 threat intelligence pulses on AlienVault OTX. It resolves to IP address 43.162.112.221, which has no associated SSL certificate, further indicating its illegitimate nature. The domain is currently offline, having been taken down.

Users who visited this domain should immediately change their Fidelity account passwords and enable two-factor authentication. They should also monitor their accounts for unauthorized activity and consider placing a fraud alert with credit bureaus. PhishDestroy recommends that all users verify URLs carefully and avoid clicking on links in unsolicited messages. If credentials were entered, contact Fidelity support directly through official channels.