tronguia[.]lat

PhishDestroy identifies tronguia.lat as a credential harvesting phishing domain designed to trick users into submitting sensitive login information. The domain mimics legitimate services, likely targeting unsuspecting victims with deceptive login prompts. Its recent registration and clean VirusTotal score (6/95 detections) make it a stealthy threat, evading immediate detection by traditional antivirus tools. The domain resolves to IP 104.21.21.228 and operates under a Let's Encrypt SSL certificate, lending it a false air of legitimacy. This domain was flagged for credential harvesting tactics, with key indicators including its registration through Dynadot LLC on March 23, 2026, and deployment on IP 104.21.21.228. VirusTotal currently shows 6/95 detections, meaning no antivirus engines have flagged it as malicious—yet. The domain’s recent creation and lack of prior reputation make it a high-risk candidate for future attacks. Users should remain cautious, as such domains often appear in phishing emails or spoofed websites designed to steal credentials. If you visited tronguia.lat, avoid entering any personal or login details. Clear your browser cache and cookies associated with the site, and scan your device for malware. Report the domain to your antivirus provider and avoid interacting with similar links in the future. Stay vigilant for unsolicited communications claiming to be from this domain, as they may be part of a broader phishing campaign.