1insh[.]co[.]com

This domain is flagged as a brand impersonation targeting 1inch, a decentralized finance protocol. The domain 1insh.co.com was created on February 21, 2026, and as of the report date of July 23, 2026, it is offline. The page title observed was '1inch Fitness Studio | Efficient Workouts for Busy Lives', which appears to be a decoy or unrelated content designed to evade initial detection. The domain resolves to IPv6 address 2606:4700:20::681a:f66, hosted in the United States on AS13335 (Cloudflare, Inc.), indicating the use of a content delivery network that can obscure hosting details. VirusTotal scanned the domain with 93 vendors and currently shows zero detections; however, absence of detections does not confirm safety, as the domain may have been inactive or unclassified at the time of scanning.

The domain is listed on one security blocklist and has been blocked by PhishDestroy. SSL certificate type is WE1, which is a standard encryption certificate. Defenders should note that while the domain is currently offline, it may be reactivated or used in future campaigns. The lack of vendor detections and the unusual page title suggest the domain was designed to avoid automated analysis. Investigators should monitor for domain re-registration or changes in IP resolution.

No Safe Browsing or OTX data is available in the current intelligence. The scam type is classified as Crypto Scam, consistent with the impersonation of a crypto brand. The domain has not been observed with a phishing kit or specific vendor attribution. Given the limited evidence, the risk remains under investigation, but the domain should be blocked at the network level and added to threat intelligence feeds.