app-1inch[.]hjjd[.]pro

This domain, app-1inch.hjjd.pro, was registered on 21 February 2026 and is currently taken offline. DNS resolution points to 172.67.219.88, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The site presented a TLS certificate identified as WE1, indicating a valid SSL handshake but offering no evidence of legitimate ownership. VirusTotal analysis recorded nine detections out of ninety‑three scanning engines, reflecting a moderate level of malicious labeling.

Independent reputation services assign a Gridinsoft trust score of zero out of one hundred, and the domain is listed on two public blocklists, including PhishDestroy and ScamSniffer. The infrastructure aligns with a crypto‑focused scam that impersonates the decentralized exchange aggregator 1inch, as indicated by the brand target field. The combination of a newly created domain, low trust score, multiple vendor detections, and inclusion on dedicated anti‑phishing blocklists suggests intentional abuse rather than an accidental misconfiguration. At present, no public page title or content snapshot is available, and the HTTP response status has not been captured because the site is offline.

Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host IP, and update detection signatures to include the observed SSL fingerprint and the specific IP address. Ongoing observation of Cloudflare‑hosted assets linked to the same ASN is recommended, as threat actors often rotate sub‑domains under the same infrastructure. The evidence currently available does not indicate additional infrastructure beyond the listed IP and certificate, but future investigations should verify whether the certificate WE1 is reused across other malicious sites.