ioqf[.]com

The domain ioqf.com has been identified as a high‑risk brand‑impersonation site targeting users of the 1inch service. Active monitoring on July 12, 2026 shows the domain continues to resolve and host malicious content. The threat classification is brand_impersonation, and the risk level is assigned as high due to the combination of credential‑stealing intent and cryptocurrency‑related lures. Infrastructure analysis reveals that ioqf.com is registered through GoDaddy.com, LLC and uses the nameservers ns63.domaincontrol.com and ns64.domaincontrol.com. The domain resolves to the IP address 18.163.88.16, which belongs to the Amazon.com, Inc. network (AS16509) and is hosted on a Windows Server running Microsoft ASP.NET under IIS. An SSL certificate issued by Let’s Encrypt (R13) is present, and the HTTP response is a 301 redirect. The site presents a page titled “比特幣價格-比特幣美金|比特幣美元|比特幣港幣價格”, indicating a focus on cryptocurrency pricing, which aligns with the recorded scam type of cryptocurrency. VirusTotal scans have flagged the domain in 12 out of 95 security vendor checks, and the Gridinsoft trust score is 0 out of 100. The domain appears on one security blocklist and has been blocked by PhishDestroy, confirming its malicious reputation. Defenders should add ioqf.com to network‑level deny lists and ensure that any outbound connections to its IP address are blocked. Email gateways should be configured to flag messages containing references to 1inch that resolve to this domain. Continuous monitoring of the associated IP range and the Amazon AS16509 block is recommended to catch potential pivot activity. Incident response teams should treat any credential or cryptocurrency transaction attempts involving this domain as compromised and advise affected users to reset credentials and verify transaction histories.