qucoin[.]ai

Analysis of qucoin.ai, registered through NameCheap, Inc. on July 24, 2025, indicates that the domain is currently taken offline but retains a set of infrastructure artifacts consistent with a wallet/seed phishing operation targeting the 1inch brand. The domain resolves to IP address 92.113.16.237, which is assigned to AS47583 Hostinger International Limited and geolocated to Germany. No TLS certificate is presented, meaning the site would have been served over plain HTTP, a common characteristic of low‑cost phishing kits that do not invest in SSL provisioning. Nameserver records point to ns1.dns-parking.com and ns2.dns-parking.com, both typical of domain parking services, suggesting the domain may have been quickly registered for malicious use and later parked after detection.

The page title retrieved during scanning reads "Qucoin - AI-Driven Decentralized Exchange," a phrasing that attempts to lend legitimacy while the underlying content is not publicly available for verification. The site impersonates the 1inch decentralized exchange platform, aligning with the classified scam type of wallet/seed phishing. Threat intelligence feeds show the domain appears on one security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis reports a single detection out of ninety‑five scanners, indicating at least one security vendor flagged the domain as malicious.

Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low reputation. While the exact phishing payload, landing page structure, and credential‑capture mechanisms remain unverified due to the offline status, the combination of registrar choice, rapid domain creation, low‑cost hosting, absence of SSL, and brand impersonation provides a clear risk profile.