qwuqwei[.]top

The domain qwuqwei.top has been assessed with an elevated risk level due to its specific threat type of brand impersonation. This domain is designed to deceive users by mimicking the appearance and functionality of the 1inch brand, potentially leading to financial losses and data breaches.

This domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among security experts. It is registered through NiceNIC International Group Co., Limited, and resolves to the IP address 172.67.203.208. The domain was created on November 22, 2025, and appears on one security blocklist. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trust. The page title found on this domain, 'Aave - Open Source Liquidity Protocol,' further adds to the confusion and potential for user deception, as it impersonates a different brand. The domain is currently blocked by PhishDestroy, a security service known for identifying and mitigating phishing threats.

To mitigate the risks associated with brand impersonation, users are advised to verify the URL of any website they visit, especially those related to financial services or cryptocurrency platforms. Organizations should implement domain monitoring tools to detect and respond to similar impersonation attempts. Additionally, security awareness training for employees and customers can help in recognizing and reporting such threats, preventing unauthorized access and data breaches.