app-1inch[.]com[.]co

This domain, app-1inch.com.co, is flagged as a high-risk brand impersonation threat targeting 1inch, a decentralized exchange platform. Analysis indicates the site presents itself as a trading interface under the title '1inch - Plataforma de Trading Inteligente 2026,' designed to deceive users into entering sensitive credentials or transferring cryptocurrency assets to attacker-controlled wallets. No explicit drainer kit signatures were identified in available telemetry, but the domain exhibits characteristics consistent with credential harvesting and wallet-draining campaigns observed in prior 1inch impersonation incidents. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to the IP address 104.21.16.8. VirusTotal detection metrics show 11 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The domain is not currently listed in Google Safe Browsing databases but has been actively blocked by MetaMask, SEAL, and PhishDestroy. Gridinsoft trust scoring assigns a 0/100 rating, reinforcing its classification as a confirmed malicious entity. As of the latest assessment, app-1inch.com.co has been taken offline, likely due to registrar enforcement or hosting provider intervention. However, residual risk persists as threat actors may re-establish the domain under alternative infrastructure or deploy similar impersonation sites using slight variations in naming conventions. Users who interacted with the domain prior to its takedown are advised to revoke any connected wallet permissions, rotate credentials for associated accounts, and monitor transaction histories for unauthorized activity. Network defenders should implement DNS-level blocking for the domain and its resolved IP to prevent potential resurgence or lateral movement within compromised environments.