fideiltyportfoiioknowiedge[.]lat

The domain fideiltyportfoiioknowiedge.lat poses as a legitimate Fidelity NetBenefits login page, aiming to deceive users into providing sensitive banking information. Despite being taken down, it was identified by 15 out of 93 vendors on VirusTotal as malicious, and is listed on two public blocklists, including PhishDestroy and PhishingDB.

This phishing domain was hosted on IP 43.162.112.221, located in the US and associated with ASN AS132203, Tencent Building. The SSL certificate was issued by E7, which may not be a recognized authority, further indicating fraudulent intent. The domain was created on February 21, 2026, and detected by PhishDestroy five days later, on February 26, 2026. Its platform risk score of 83 out of 100 underscores the significant threat it posed during its active period.

The swift detection and subsequent takedown of fideiltyportfoiioknowiedge.lat highlight the effectiveness of early threat identification and response. While the domain is currently offline, its initial success in evading detection by a majority of vendors illustrates the challenges in combating phishing attacks. The use of a slightly altered spelling of 'Fidelity' reflects a common tactic in phishing schemes, aiming to exploit user trust in well-known financial brands.