web3-protocol[.]lat

web3-protocol.lat is a phishing domain that impersonates the Sei brand. Although it has 0 detections on VirusTotal, it is already listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. This indicates early detection within the pre-propagation window, as the domain was registered on May 1, 2026, and detected by PhishDestroy just two days later.

The domain was registered through Global Domain Group LLC and hosted on an IP address managed by Cloudflare, Inc., located in Canada. The site used a Let's Encrypt SSL certificate, which is common among phishing sites due to its free availability. The platform risk score for this domain is 55 out of 100, suggesting a moderate level of threat.

Currently, the domain is offline, reducing its immediate threat. However, the early detection and blocklisting highlight the effectiveness of proactive threat intelligence measures. Phishing domains like web3-protocol.lat exploit the lag between domain registration and antivirus database updates, which can take 24 to 72 hours. PhishDestroy's upstream pipeline captures these threats during this critical window, ensuring timely intervention to protect users from potential scams.