wallstreet30[.]icu

This domain, wallstreet30.icu, poses a high-risk brand impersonation threat targeting users of the 1inch decentralized finance platform. Analysis indicates the site presents a fraudulent interface designed to harvest cryptocurrency wallet credentials or deploy malicious smart contracts under the guise of legitimate 1inch services. The page title, 'Flare is the blockchain for data,' suggests an attempt to mislead users into believing they are interacting with a different blockchain project, potentially increasing the likelihood of successful credential capture or fund theft through social engineering tactics. Infrastructure analysis reveals the domain was registered on February 22, 2025, through Dynadot LLC and resolves to the IP address 162.222.225.119, hosted on AS46606 (Unified Layer) in the United States. The domain lacks an SSL certificate, a common red flag for fraudulent sites. Security vendor detections on VirusTotal report 16 out of 95 engines flagging the domain as malicious, while it appears on three distinct security blocklists. Additional scrutiny shows the domain was proactively blocked by multiple threat intelligence platforms, further corroborating its malicious nature. Users who visited wallstreet30.icu should immediately revoke any wallet permissions granted to the site and cease all interactions. It is recommended to conduct a full security audit of any connected wallets, including checking for unauthorized transactions or token approvals. If credentials were entered, users should assume compromise and migrate funds to a new wallet address. Monitoring for phishing attempts via associated email addresses or communication channels is advised, as attackers may attempt follow-up campaigns. Organizations should update internal blocklists to include this domain and its associated IP to prevent future exposure.