1inch[.]io-v2-api-connects-wallet[.]app

This domain presents an elevated risk as a brand impersonation threat specifically targeting 1inch, a decentralized exchange aggregator. The site was designed to mimic the legitimate 1inch platform with a title reading "1inch | Swap Tokens Securely Across Crypto Chains & Markets" but actually operates as a crypto drainer, aiming to steal digital assets from unsuspecting users who connect their wallets. PhishDestroy has confirmed the domain is now offline, but similar threats may emerge.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 2 out of 95 security vendors, and it appears on one security blocklist. The domain was created on February 21, 2026, and resolves to IP address 172.67.146.171, which is associated with Cloudflare. The SSL certificate is issued by WE1, and the domain uses a deceptive name that includes the legitimate 1inch.io domain string to trick users. The brand target is explicitly 1inch, and the seed 31a37f was used for unique identification.

Users who may have interacted with this domain should immediately disconnect any wallet that was connected and revoke permissions via a token approval checker. Since this is a crypto drainer, never enter seed phrases or private keys on any site. Always verify the official domain of 1inch by checking its official website or social media channels. For future protection, use PhishDestroy to scan unknown domains before connecting wallets or entering sensitive information.