# 1.inch.it.com — SUSPICIOUS

> Warning: 1.inch.it.com is a medium-risk phishing domain, currently offline. Avoid interaction to protect your data and devices.

## Summary
PhishDestroy identifies 1.inch.it.com as a medium-risk generic phishing threat targeting unsuspecting users. The domain is suspected of facilitating fraudulent activities aimed at stealing sensitive information.

The domain was registered on February 21, 2026, through a dead domain registrar and is listed on three security blocklists. VirusTotal analysis shows 3 of 95 security vendors flag this domain, indicating moderate detection rates. This infrastructure suggests an attempt to evade detection while maintaining malicious intent.

Currently, 1.inch.it.com has been taken offline, reducing immediate risk. Users and organizations are advised to maintain vigilance, avoid engaging with suspicious emails or links referencing this domain, and ensure updated security tools to mitigate potential phishing attacks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 530)
- Page title: 1inch dApp

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Dead domain
- IP: 104.21.48.1
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- SSL Issuer: WE1

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["ChainPatrol", "CRDF", "URLQuery"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198932c-8023-767e-bf76-a7ac95b94884.png
- PhishDestroy: https://phishdestroy.io/domain/1.inch.it.com/
- LLM endpoint: https://phishdestroy.io/domain/1.inch.it.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/1.inch.it.com/
Last updated: 2026-03-17