1inch[.]airdrpsalerts[.]xyz

This domain, 1inch.airdrpsalerts.xyz, is identified as a phishing site designed to impersonate the legitimate 1inch cryptocurrency platform. The site aims to deceive users into entering sensitive credentials, such as wallet private keys or login details, by mimicking the appearance and branding of 1inch. Given the elevated risk level, interaction with this domain could result in financial loss, unauthorized access to digital assets, or identity theft. The page title, 'Google,' further suggests an attempt to disguise malicious intent under a familiar and trusted name, increasing the likelihood of successful deception. Analysis indicates this domain was registered on November 4, 2025, through Dynadot LLC, a registrar commonly used in phishing campaigns due to its accessibility and privacy features. The domain resolves to the IP address 142.251.111.99, which is associated with legitimate infrastructure but has been repurposed for malicious activity. Detection metrics reveal significant concerns: 12 out of 95 security vendors on VirusTotal flag this domain as malicious, while Gridinsoft assigns it a trust score of 0/100. Additionally, the domain appears on one security blocklist, and its current offline status suggests takedown efforts or evasion tactics by the threat actor. Users who visited 1inch.airdrpsalerts.xyz should take immediate action to mitigate potential risks. First, cease all interaction with the domain and avoid entering any credentials or personal information. If login details or wallet keys were submitted, revoke access to any connected services and transfer assets to a new, secure wallet. Monitor accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant security teams or platforms to aid in broader threat mitigation. Regularly update security software and remain vigilant for similar phishing attempts targeting cryptocurrency users.