fideityportfoiioknowiedge[.]lat

The domain fideityportfoiioknowiedge.lat is identified as a generic phishing site specifically targeting users of Fidelity NetBenefits. Analysis confirms this domain was actively impersonating the legitimate Fidelity financial platform to harvest credentials. As of the latest verification, the domain has been taken offline, though prior activity remains documented in threat intelligence repositories. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was flagged by 15 of 95 security vendors on VirusTotal, while AlienVault OTX recorded its presence in 14 distinct threat intelligence pulses. It resolved to the IP address 43.162.112.221 and was listed on two security blocklists. The domain was registered on February 21, 2026, with an SSL certificate identifier of E8, further confirming its suspicious nature. The page title, 'Log In to Fidelity NetBenefits,' directly mirrors the legitimate platform, a common tactic in phishing campaigns to deceive users. Given its current offline status, the immediate threat posed by fideityportfoiioknowiedge.lat has been mitigated. However, organizations and individuals should remain vigilant, as infrastructure associated with phishing campaigns may resurface under different domains. It is recommended to monitor network logs for connections to 43.162.112.221 and review any prior interactions with this domain. Users who may have entered credentials on the site should reset their passwords immediately and enable multi-factor authentication on all financial accounts. Security teams are advised to update blocklists to include this domain and its associated indicators.