1lavds[.]biz

The domain 1lavds.biz is a confirmed phishing site engaged in brand impersonation targeting users of the cryptocurrency exchange Kraken. It poses an elevated risk by attempting to deceive victims into entering login credentials or sensitive information under the false pretense of being the legitimate Kraken platform. No crypto drainer kit was identified in this campaign. As of the latest verification, 1lavds.biz has been taken offline.

Technical indicators confirm the malicious nature of 1lavds.biz. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and ESET. It appears on 1 security blocklist, specifically PhishDestroy. Registered through NameCheap, Inc. on September 01, 2024, the domain resolves to the IP address 185.208.156.66, hosted in Switzerland under AS42624 Global-Data System IT Corporation. No SSL certificate was issued, and the observed HTTP status was 530. The domain uses nameservers ns1.safe-networks.net and ns2.safe-networks.net. Trust scores from Gridinsoft and Scamadviser are 0/100 and 1/100, respectively.

Individuals who interacted with 1lavds.biz should immediately change their Kraken account passwords and enable two-factor authentication if not already active. Monitor the account for unauthorized transactions or suspicious activity. Victims are advised to report the phishing domain to Kraken’s official security team and to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in broader mitigation efforts.