pfp[.]lat

PhishDestroy identifies pfp.lat as an active fake profile scam domain created December 03, 2025. This domain is being misused to harvest user login credentials under the guise of legitimate profile management or verification processes. pfp.lat resolved to IP 104.21.95.60 and currently shows 0/95 VirusTotal detections despite SSL certification by Google Trust Services. Registered through PDR Ltd. d/b/a PublicDomainRegistry.com, this recently created domain has not yet been widely flagged by security tools, making it particularly dangerous for unsuspecting users. The domain’s generic naming convention (“pfp” suggesting “profile picture”) combined with the absence of detection flags creates a high-risk trap for identity thieves. Users who visited pfp.lat should assume their credentials may have been compromised. Immediately change passwords used on the site and enable two-factor authentication on all important accounts. Scan devices for malware and monitor financial accounts for unusual activity. Report this domain to your email provider and avoid any future communications referencing pfp.lat. Organizations should consider blocking this domain at network level to prevent additional compromises.