calendllyreserve[.]com

Analysis as of July 23 2026 indicates that calendllyreserve.com is an inactive domain that was used for a wallet/seed phishing campaign impersonating the 1inch brand. The site was registered on October 17 2025 through Hostinger operations, UAB and delegated to the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. No TLS certificate was observed, and the HTTP service is currently taken offline. The domain resolves to IP 91.234.199.5, which belongs to AS43641 SOLLUTIUM EU Sp z.o.o. located in the Netherlands.

The page title retrieved during the brief live period read “Crypto Wallet Issues? You're Covered!”, matching the reported scam type of wallet/seed phishing. Reputation services assign extremely low confidence scores, with Scamadviser reporting 1/100 and Gridinsoft 0/100. Google Safe Browsing categorises the URL as social engineering, and the domain appears on four security blocklists, specifically PhishDestroy, Polkadot, Enkrypt and Codeesura.

VirusTotal analysis shows that 13 of 93 security scanners flagged the domain, reinforcing the malicious assessment. The evidence collectively points to a high‑risk impersonation operation targeting users of the 1inch decentralized exchange platform. Defenders should continue to block the domain at perimeter filters, update intrusion detection signatures with the associated IP and host‑name, and monitor for any resurgence of the infrastructure. Additional remediation steps include confirming that no internal credentials were submitted to the site, reviewing logs for outbound connections to 91.234.199.5, and ensuring that user education messages reference the specific page title and brand misuse to reduce successful social‑engineering attempts.