contractsverify[.]pro

This domain, contractsverify.pro, is identified as a high-risk brand impersonation threat specifically targeting 1inch, a decentralized exchange aggregator. Analysis indicates the site masquerades as a legitimate 1inch platform, using deceptive page titles such as 'Home | Dapps Leading Synthetic Protocol' to lure users into interacting with malicious infrastructure. No crypto drainer kit signatures have been confirmed, but the domain’s structure and content align with known brand impersonation tactics designed to harvest credentials or facilitate unauthorized transactions. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 104.21.93.226, hosted on Cloudflare’s network (AS13335). It was registered on February 21, 2026, through NiceNIC International Group Co., Limited, an uncommon registrar for legitimate crypto services. Google Safe Browsing explicitly flags the domain as phishing, and it appears on six security blocklists. VirusTotal reports 14 out of 95 security vendors detecting the domain as malicious. Notably, the domain lacks an SSL certificate, further reducing its legitimacy and increasing exposure to interception attacks. As of the latest assessment, contractsverify.pro remains active and unmitigated. Multiple wallet providers and browser extensions, including MetaMask and Polkadot, have implemented blocks to prevent user access. The domain’s continued operation despite these countermeasures underscores persistent risk. Users are advised to avoid interaction, verify domain authenticity via official 1inch channels, and report the domain to relevant security platforms for further takedown efforts. The absence of SSL and the use of a non-standard registrar suggest low operational security, but the domain’s Cloudflare hosting complicates direct remediation.