# franklincoin.lat — SUSPICIOUS

> PhishDestroy is investigating franklincoin.lat for phishing. Registered via PublicDomainRegistry.com, it may steal user data. Avoid this site!

## Summary
PhishDestroy is currently investigating franklincoin.lat as a potential phishing site. The domain exhibits characteristics commonly associated with malicious activity, raising concerns that it could be used to steal sensitive user information or conduct other fraudulent schemes. Users should exercise extreme caution when interacting with this domain.  

Technical indicators for franklincoin.lat include a VirusTotal detection ratio of 0/95, meaning it hasn't been widely flagged as malicious yet. It was registered through PDR Ltd. d/b/a PublicDomainRegistry.com and created relatively recently, on December 03, 2025. Despite the low VirusTotal score, franklincoin.lat appears on 2 security blocklists, and is actively blocked by MetaMask and SEAL, suggesting that security vendors have independently identified it as a threat. The domain resolves to IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services.  

If you have visited franklincoin.lat, it is strongly recommended that you take immediate action to protect your personal information. Change any passwords that you may have entered on the site, and be vigilant for any signs of identity theft or financial fraud. Monitor your bank accounts and credit reports for any unauthorized activity. Consider running a full scan of your computer with a reputable antivirus program to detect and remove any malware that may have been installed. Report the incident to the appropriate authorities, such as the Federal Trade Commission (FTC), and consider filing a complaint with the domain registrar, PublicDomainRegistry.com.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-12-03 08:26:01
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["MetaMask", "SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/85caf892-55c9-480b-83f9-e086307fab93
- PhishDestroy: https://phishdestroy.io/domain/franklincoin.lat/
- LLM endpoint: https://phishdestroy.io/domain/franklincoin.lat/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/franklincoin.lat/
Last updated: 2026-03-31