metachaindapps[.]live

Analysis as of July 23 2026 indicates that the domain metachaindapps.live is currently offline but was actively used to impersonate the decentralized‑exchange aggregator 1inch. The site was registered on March 11 2026 through NiceNIC International Group Co., Limited and resolves to the Cloudflare‑hosted address 104.21.73.228, AS13335, located in the United States. DNS resolution uses the Cloudflare nameservers amanda.ns.cloudflare.com and gabriel.ns.cloudflare.com. The web server presented an SSL certificate graded E7 and employed technologies such as Bootstrap, HTTP/3, HSTS, and Cloudflare’s edge services.

The sole visible page title reads “Metachaindapps Ecosystems || Standard Blockchain‑Based Protocol,” which does not reference the 1inch brand, confirming the intent to mislead users through domain similarity rather than page content. VirusTotal recorded 16 of 94 scanning engines flagging the domain, and the Gridinsoft trust score is 0 / 100, indicating a high likelihood of malicious activity. Independent blocklists and security products—including PhishDestroy, MetaMask, ScamSniffer, and SEAL—have added the domain to their denial lists, and it appears on four external blocklists.

The campaign is classified as wallet/seed phishing, targeting cryptocurrency users who may be prompted to disclose private keys or recovery phrases under the guise of a legitimate 1inch interface. Defenders should ensure the domain is blocked at network perimeter and DNS filtering layers, monitor for any additional sub‑domains that resolve to the same Cloudflare IP range, and advise users to verify the authenticity of any 1inch‑related URLs before entering wallet credentials. Ongoing threat‑intel feeds should be consulted for new indicators of compromise associated with the same registrar or hosting infrastructure, and any compromised credentials should be rotated immediately.