fideltyportfoiloknowiedge[.]lat

This domain, fideltyportfoiloknowiedge.lat, presents an elevated-risk brand impersonation threat targeting Fidelity customers. The fraudulent portal mimics the legitimate Fidelity NetBenefits login interface, as evidenced by the page title 'Log In to Fidelity NetBenefits,' with the intent to harvest user credentials. Such attacks typically lead to unauthorized account access, financial fraud, or further exploitation through social engineering tactics. The domain lacks an SSL certificate, increasing the likelihood of plaintext credential transmission, which compounds the risk to affected users. Analysis indicates the domain was registered on November 29, 2025, through Gname.com Pte. Ltd., a registrar frequently associated with malicious infrastructure. As of the latest assessment, the domain appears on two security blocklists, including PhishDestroy and PhishingDB. VirusTotal detection metrics reveal that 17 out of 95 security vendors flag this domain as malicious, with resolutions pointing to the IP address 43.162.112.221, hosted within AS132203 (Tencent Building, Kejizhongyi Avenue, United States). The absence of SSL encryption and the domain's recent creation further corroborate its fraudulent nature. Users who visited fideltyportfoiloknowiedge.lat or entered credentials on the site should immediately revoke access to any linked accounts and enable multi-factor authentication where available. Monitor financial statements for unauthorized transactions and report suspicious activity to the targeted institution. Security teams are advised to block the domain and associated IP (43.162.112.221) at the network perimeter to prevent further exposure. Individuals should also scan their devices for malware, as credential theft portals may deploy additional payloads to maintain persistence or exfiltrate data.