app[.]web-1inch[.]to
“1inch: Revolutionizing DEX Aggregation and DeFi Trading”
Riepilogo delle prove
On July 23, 2026, the domain app.web-1inch.to was confirmed as a brand impersonation targeting 1inch, a well-known decentralized finance (DeFi) platform. The domain was registered through the Government of the Kingdom of Tonga on August 19, 2025. Analysis indicates that the site was specifically designed to deceive users into believing they were interacting with legitimate 1inch services, potentially to steal sensitive information or facilitate a crypto scam. The page title '1inch: Revolutionizing DEX Aggregation and DeFi Trading' mirrors the branding and messaging of the genuine 1inch website, furthering the deception.
The domain is currently offline, which may indicate that it has been taken down by security measures or the operators. It is listed on one security blocklist and has been flagged by 15 out of 95 security vendors on VirusTotal, highlighting its malicious nature. The domain resolves to an IP address (95.129.233.242) located in Russia, specifically within the AS57724 DDOS-GUARD LTD network. The use of DDOS-GUARD nameservers (ns1.ddos-guard.net and ns2.ddos-guard.net) suggests an attempt to evade detection and maintain operational resilience against takedown efforts.
The site was protected by a Let's Encrypt SSL certificate, which, while legitimate, is a common choice for phishing sites due to its ease of acquisition. Trust scores from Scamadviser (1/100) and Gridinsoft (0/100) further corroborate the domain's high-risk status. Defenders are advised to block this domain in their security systems and educate users to verify the authenticity of 1inch-related URLs, especially those registered through less reputable registrars. Despite the current offline status, monitoring for any reactivation is recommended, as phishing sites often re-emerge under different domains or IP addresses.
Data Coverage
Indicatori di sicurezza
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 11/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
VirusTotal
15 → 14
-
VirusTotal
14 → 15
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of app.web-1inch.to · checked Mar 2, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo