dazdex[.]com

Analysis of dazdex.com, observed on 24 July 2026, shows a newly registered domain created 21 July 2025 that is being used to impersonate the decentralized exchange aggregator 1inch. The site presented the page title “Buy & Sell Bitcoin, Ethereum | Cryptocurrency Exchange | Exchange”, a generic cryptocurrency‑exchange headline that does not reference the 1inch brand, indicating a classic brand‑impersonation tactic aimed at luring users seeking 1inch services. The domain resolves to 172.67.165.250, an address owned by AS13335 Cloudflare, Inc., located in the United States. No SSL certificate is deployed, and the HTTP service is currently offline, suggesting the operator has taken the site down after detection. The registrar listed is MAT BAO CORPORATION, and the domain uses a single nameserver, a configuration often seen in fast‑flux or throwaway phishing infrastructure.

VirusTotal scans reported two detections out of ninety‑five antivirus engines, confirming malicious classification by multiple vendors. The domain is listed on at least one security blocklist and has been blocked by PhishDestroy, reinforcing the view that it is a recognized crypto‑scam vector. Reputation services assign extremely low trust scores, with Scamadviser and Gridinsoft both rating the site at 1 out of 100. The evidence collectively points to a crypto‑scam campaign that leverages brand impersonation of 1inch to harvest credentials or funds.

Uncertainty remains regarding the exact phishing kit or whether the site ever served a functional login page before being taken offline. Defenders should immediately add 172.67.165.250 to network deny lists, monitor for any re‑hosting of the same payload on other Cloudflare‑hosted IPs, and enforce strict email and web filtering for URLs containing “dazdex.com”. Continuous brand monitoring for 1inch‑related domains is advised, as the attacker may register additional look‑alike names.