1inchtest-c7a[.]pages[.]dev

The domain 1inchtest-c7a.pages.dev is a cryptocurrency phishing site engaged in brand impersonation of the decentralized exchange 1inch. It presents itself as the legitimate 1inch platform to deceive users into interacting with fraudulent smart contracts or disclosing wallet credentials, though no active drainer kit was observed. As of the latest verification, 1inchtest-c7a.pages.dev has been taken offline.

Technical indicators confirm the elevated risk. The domain was flagged by 2 of 95 VirusTotal security vendors, including ChainPatrol and Phishing Database, while Google Safe Browsing did not detect it. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. Registered through Cloudflare, Inc. on February 24, 2026, 1inchtest-c7a.pages.dev resolves to the IP address 172.66.47.116, hosted on Cloudflare's US infrastructure (AS13335). The SSL certificate was issued by Google Trust Services (WE1), and the page title observed was '1inch'. Technologies detected include HSTS, Cloudflare, and HTTP/3, with a Gridinsoft trust score of 0/100.

Users who interacted with 1inchtest-c7a.pages.dev should immediately revoke any token approvals granted to unknown contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts accessed while the site was active and enable two-factor authentication (2FA) where available. Report the domain to the impersonated brand (1inch) and submit it to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts.