TLD Threat Intelligence

Flagged .lat Domains

500 domains using the .lat extension have been flagged by threat-intelligence feeds. The .lat extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.

500
Flagged Domains
28
Avg Risk Score
Jul 3
Last Flagged

Flagged .lat Domains

60 shown
DomainLast Seen
suporte-netempresa.lat Jul 3 esl-org-claims2.lat Jun 8 professionaldata.lat May 29 fatkow.file-online.lat May 17 sir8uu.yandex-file.lat May 17 5pt4yq.file-online.lat May 17 0gtutd.yandex-file.lat May 17 1sj4u9.file-online.lat May 17 milan-hasbik.file-online.lat May 17 svosoldati.file-online.lat May 17 dpde.lat May 17 ujkj.didoprotecauth.lat May 10 sermesh7um.didoprotecauth.lat May 10 hz1v.didoprotecauth.lat May 10 gey5-reach.didoprotecauth.lat May 10 sens-ring.didoprotecauth.lat May 10 vel-fluxix.didoprotecauth.lat May 10 honestshape.wetshardauth.lat May 10 banb3.wetshardauth.lat May 10 5pr0-span.wetshardauth.lat May 10 channe-grid.wetshardauth.lat May 10 quormark2et.wetshardauth.lat May 10 gr1m-mark.userssawtone.lat May 10 mervaleet.userssawtone.lat May 10 cry5t4-stream.wetshardauth.lat May 10 tide6-well.mixzipcore64.lat May 10 gxyuad.userssawtone.lat May 10 granitebroad.mixzipcore64.lat May 10 talnex5on.userssawtone.lat May 10 skyvpns.modeall.lat May 8 tcpcons.lorex7in.lat May 8 dbinsts.modeall.lat May 8 netmans.lorex7in.lat May 8 apidocs.modeall.lat May 8 syskeys.1navorex.lat May 8 metalts.modeall.lat May 8 webdocs.1navorex.lat May 8 osbases.modeall.lat May 8 appsrch.1navorex.lat May 8 logbins.1navorex.lat May 8 ziparks.addport.lat May 8 rawdats.addport.lat May 8 apiopss.1navorex.lat May 8 jobadms.addport.lat May 8 gitlabh.1navorex.lat May 8 libsyss.addport.lat May 8 optwebs.ipfspie.lat May 8 ftpsrvs.addport.lat May 8 usrgrps.ipfspie.lat May 8 uidmaps.addport.lat May 8 vmlists.ipfspie.lat May 8 srcgets.gzipsea.lat May 8 sshpros.ipfspie.lat May 8 modbuss.gzipsea.lat May 8 tcpcons.ipfspie.lat May 8 pkgruns.gzipsea.lat May 8 netmans.ipfspie.lat May 8 extnets.gzipsea.lat May 8 syskeys.vbytetap.lat May 8 pwrlogs.gzipsea.lat May 8

Frequently Asked Questions

Are all .lat websites scams?

No. The .lat extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .lat. This page lists only the specific .lat domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .lat domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .lat site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →