1inch[.]airsdropsalert[.]lol

Analysis of the domain 1inch.airsdropsalert.lol, observed on July 23, 2026, shows multiple indicators consistent with a brand‑impersonation crypto scam targeting the 1inch platform. The domain was registered on November 5, 2025 through Dynadot LLC and is currently resolved to IP address 142.250.65.228, which belongs to AS15169 Google LLC and is geolocated in the United States. The hosting arrangement utilizes Cloudflare name servers brenna.ns.cloudflare.com and hassan.ns.cloudflare.com, yet no SSL certificate was presented during investigation, leaving the site unencrypted and susceptible to interception. VirusTotal reports that 14 of 95 scanning engines flagged the domain as malicious, and the site appears on one external security blocklist.

Additional detection by PhishDestroy confirms that the domain has been identified as a malicious resource. The page title returned from the live endpoint was "Google," providing no direct evidence of the advertised content. Gridinsoft assigns a trust score of zero out of one hundred, indicating an extremely low reputation.

The site’s status is listed as offline, but historical activity suggests it was used to lure victims into a crypto‑related fraud scheme. Defenders should immediately block the domain and its associated IP address at network perimeters, update intrusion detection signatures to include the observed name servers and registrar information, and monitor for any future re‑registration attempts. Continuous observation of related cloud‑based infrastructure and any resurgence of similar domains is recommended to mitigate repeat abuse.