TLD Threat Intelligence

Flagged .lat Domains

498 domains using the .lat extension have been flagged by threat-intelligence feeds. The .lat extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure.

498
Flagged Domains
27
Avg Risk Score
May 29
Last Flagged

Flagged .lat Domains

60 shown
DomainLast Seen
professionaldata.lat May 29 fatkow.file-online.lat May 17 sir8uu.yandex-file.lat May 17 5pt4yq.file-online.lat May 17 0gtutd.yandex-file.lat May 17 1sj4u9.file-online.lat May 17 milan-hasbik.file-online.lat May 17 svosoldati.file-online.lat May 17 dpde.lat May 17 ujkj.didoprotecauth.lat May 10 sermesh7um.didoprotecauth.lat May 10 hz1v.didoprotecauth.lat May 10 gey5-reach.didoprotecauth.lat May 10 sens-ring.didoprotecauth.lat May 10 vel-fluxix.didoprotecauth.lat May 10 honestshape.wetshardauth.lat May 10 banb3.wetshardauth.lat May 10 5pr0-span.wetshardauth.lat May 10 channe-grid.wetshardauth.lat May 10 quormark2et.wetshardauth.lat May 10 gr1m-mark.userssawtone.lat May 10 mervaleet.userssawtone.lat May 10 cry5t4-stream.wetshardauth.lat May 10 tide6-well.mixzipcore64.lat May 10 gxyuad.userssawtone.lat May 10 granitebroad.mixzipcore64.lat May 10 talnex5on.userssawtone.lat May 10 skyvpns.modeall.lat May 8 tcpcons.lorex7in.lat May 8 dbinsts.modeall.lat May 8 netmans.lorex7in.lat May 8 apidocs.modeall.lat May 8 syskeys.1navorex.lat May 8 metalts.modeall.lat May 8 webdocs.1navorex.lat May 8 osbases.modeall.lat May 8 appsrch.1navorex.lat May 8 logbins.1navorex.lat May 8 ziparks.addport.lat May 8 rawdats.addport.lat May 8 apiopss.1navorex.lat May 8 jobadms.addport.lat May 8 gitlabh.1navorex.lat May 8 libsyss.addport.lat May 8 optwebs.ipfspie.lat May 8 ftpsrvs.addport.lat May 8 usrgrps.ipfspie.lat May 8 uidmaps.addport.lat May 8 vmlists.ipfspie.lat May 8 srcgets.gzipsea.lat May 8 sshpros.ipfspie.lat May 8 modbuss.gzipsea.lat May 8 tcpcons.ipfspie.lat May 8 pkgruns.gzipsea.lat May 8 netmans.ipfspie.lat May 8 extnets.gzipsea.lat May 8 syskeys.vbytetap.lat May 8 pwrlogs.gzipsea.lat May 8 webdocs.vbytetap.lat May 8 appsrch.vbytetap.lat May 8

Frequently Asked Questions

Are all .lat websites scams?

No. The .lat extension is among the most-abused top-level domains in published phishing-landscape data, which is why it appears frequently in scam infrastructure. Many legitimate sites use .lat. This page lists only the specific .lat domains flagged by threat-intelligence feeds — not the extension as a whole.

Why do scammers use .lat domains?

Scammers favour cheap, fast-to-register extensions with slower abuse enforcement, because they expect the domain to be taken down within days. Registration cost and enforcement speed — not the extension's purpose — drive the choice.

How do I check if a specific .lat site is safe?

Look it up here or on Google Safe Browsing and VirusTotal, and check its registration date with a WHOIS lookup. Very new domains imitating an established brand are a strong warning sign.

🔐Security Partner

Stop the next phishing attack before you click.

NordPass autofill only triggers on real domains. Fake login pages cannot trick it into entering your credentials.

Try NordPass →