fidelltyportfolioknowledge[.]lat

The domain fidelltyportfolioknowledge.lat was registered on November 29, 2025 through Gname.com Pte. Ltd. and is currently taken offline. DNS resolution points to IP address 43.162.112.221, which is hosted in the United States under AS132203 and is associated with a Tencent‑owned facility on Kejizhongyi Avenue. The site presented a page titled “Log In to Fidelity NetBenefits,” indicating a banking‑phishing campaign that attempts to harvest credentials for Fidelity’s NetBenefits service. An SSL certificate with an E8 rating was observed, suggesting the use of a low‑grade or self‑signed certificate to lend a veneer of legitimacy.

Threat intelligence from AlienVault OTX shows the domain appearing in fourteen separate pulses, confirming its inclusion in multiple analyst feeds. VirusTotal analysis recorded fourteen of ninety‑three security vendors flagging the domain, reinforcing the malicious classification. Independent reputation scoring from Gridinsoft assigned a trust score of 0 out of 100, and the domain is listed on a single security blocklist, with PhishDestroy explicitly blocking it.

Defenders should immediately add fidelltyportfolioknowledge.lat to URL filtering and DNS blocklists, and consider extending blocks to the associated IP 43.162.112.221, given its reuse in other phishing infrastructure. Monitoring for newly registered domains that share the same registrar or exhibit similar naming patterns may help pre‑empt future impersonation attempts. Since the site is offline, active probing is not possible, but historical evidence suggests the infrastructure is still viable; thus, continued vigilance and threat‑intel correlation are advised.