# chonky.lat — SUSPICIOUS

> Discover the low-risk phishing domain chonky.lat, currently offline. Learn about its technical details and potential risks on PhishDestroy.

## Summary
PhishDestroy identifies chonky.lat as a generic phishing domain exhibiting suspicious behavior but with a low overall risk level. The domain was registered recently and appears to have been used to deceive users through a misleading landing page titled "Just a moment...", though the exact impersonation target remains unclear. This suggests it may have been intended for credential theft or other generic phishing activities.

Technically, chonky.lat was registered on March 7, 2026, via PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolved to IP address 104.21.26.90 and was flagged by 2 out of 95 security vendors on VirusTotal. It also appeared on three security blocklists, indicating some degree of malicious activity or suspicion from security communities. Despite these indicators, the domain's infrastructure does not currently reflect a high threat level.

At present, chonky.lat has been taken offline, mitigating immediate risk to potential victims. PhishDestroy recommends continued monitoring of related domains and associated infrastructure, as well as user awareness to avoid interacting with suspicious domains. Organizations should maintain updated blocklists and educate users on recognizing generic phishing tactics to reduce exposure to similar threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 403)
- Page title: Just a moment...

## Domain Intelligence
- Registered: 2026-03-07 17:07:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- Country: IN
- IP: 104.21.26.90
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["audrey.ns.cloudflare.com", "rohin.ns.cloudflare.com"]
- SSL Issuer: Let's Encrypt / E7

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/Gf1KLmQQ/0365e6933504.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/89e943c7-c2d1-476e-85ea-2ca1038fc1ce
- Wayback Machine: https://web.archive.org/web/https://chonky.lat
- PhishDestroy: https://phishdestroy.io/domain/chonky.lat/
- LLM endpoint: https://phishdestroy.io/domain/chonky.lat/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/chonky.lat/
Last updated: 2026-03-19