vectorspacebioswap[.]pages[.]dev

This domain, vectorspacebioswap.pages.dev, operates as a high-risk phishing site targeting users of the 1inch decentralized exchange platform. The site mimics legitimate wallet connection interfaces, specifically displaying a page titled 'Home | WalletConnect,' which is designed to trick visitors into entering sensitive credentials or approving malicious transactions. Such impersonation attacks typically aim to harvest private keys, recovery phrases, or authorize fraudulent smart contracts, leading to immediate asset theft from connected wallets. Analysis indicates the domain was registered on September 2, 2020, through Cloudflare, Inc., and currently resolves to the IP address 172.66.44.90, part of Cloudflare’s network (AS13335). It appears on one security blocklist and is flagged by 13 out of 95 security vendors on VirusTotal, confirming its malicious classification. The SSL certificate, issued by Google Trust Services (WE1), adds a superficial layer of legitimacy, while the page title further reinforces the deception by referencing WalletConnect, a trusted protocol commonly used in crypto transactions. If you have visited vectorspacebioswap.pages.dev or interacted with its content, immediate action is required. Disconnect any wallets linked to the site and revoke all recent smart contract approvals using a blockchain explorer or wallet security tool. Monitor connected accounts for unauthorized transactions and consider migrating funds to a new wallet if compromise is suspected. Report the domain to relevant security teams and avoid re-engaging with any communications or links associated with this infrastructure. Users should verify domain authenticity before connecting wallets to any service, especially those involving cryptocurrency or DeFi platforms.