# 1drop.lat — MALICIOUS

> 1drop.lat is a crypto drainer site blocked by SEAL and MetaMask. 9 of 95 VirusTotal security vendors flag this crypto drainer domain.

## Summary
PhishDestroy identifies 1drop.lat as an active crypto drainer site posing as a legitimate cryptocurrency service. The domain impersonates credible platforms to trick users into connecting their wallets, enabling unauthorized fund transfers. Security tooling such as SEAL and MetaMask has already flagged this domain, indicating a clear threat to cryptocurrency users seeking legitimate services.  

This domain was flagged by PhishDestroy with the following technical indicators: rated 9/95 by VirusTotal security vendors, registered through Global Domain Group LLC, resolving to IP 188.114.96.3, created on March 20, 2026, secured with a Let's Encrypt SSL certificate, listed on 2 security blocklists including Google Safe Browsing (GSB), and associated with a crypto drainer kit used for wallet compromise.  

As of this assessment, 1drop.lat remains active and exhibits elevated risk due to its crypto drainer nature and confirmed malicious behavior. Immediate actions include blocking the domain at the network level, avoiding wallet connections, and reporting the domain to relevant security vendors. Users are strongly advised to refrain from interacting with this site. Remaining risk is high due to active hosting and recent domain registration.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-20 17:20:54
- Registrar: Global Domain Group LLC
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 9 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["SEAL", "MetaMask"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/34996042-9083-4d17-82cd-ce8ba2c36641
- PhishDestroy: https://phishdestroy.io/domain/1drop.lat/
- LLM endpoint: https://phishdestroy.io/domain/1drop.lat/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/1drop.lat/
Last updated: 2026-03-24