1inch

Crypto & web31inch.comDecentralized exchange aggregator
Cert findings · 24 h
2
Cert findings · 7 days
8
3 reported or listed · 5 on phishing hosts
Registered lookalikes
109
20 listed by a source or an address list
Official domains
7
verified from 1inch's own sites and records

Certificate findings for 1inch

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to 1inch's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 9 findings, grouped by hostname

  1. www.1inch.help CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    www.1inch.help
    First seen
    2026-11-04 19:06 UTC
    First published
    2026-11-04 20:01 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 18:05 UTC to 2027-02-02 18:05 UTC
    Logged 2026-11-04 19:04 UTC in IPng Networks Gouda2027h1, entry 317,355,730
    SHA-256 70724fff030d47cb707e306343ce96790e97e00985a2fc667c34ee72b3010c53
    Public key SHA-256 b018019fb8cfa23982746ab5c9490d89cf73dfd4ac090c9ec0d88964fd123295
    Brand
    1inch
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    1inch.help
    Registered
    2026-11-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:00 UTC

    Suggest a correction

  2. 1inch.help CY · AS47583 · AS-HOSTINGER Hostinger Inte…
    Phishing hostHostingerAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 1 d ago
    DetailsHide
    Hostname
    1inch.help
    First seen
    2026-11-04 19:05 UTC
    First published
    2026-11-04 20:01 UTC
    DNS
    Resolves · checked 2026-11-04 20:05 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 2.57.91.91.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 2.57.91.91
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-04 18:05 UTC to 2027-02-02 18:05 UTC
    Logged 2026-11-04 19:04 UTC in IPng Networks Gouda2027h1, entry 317,355,730
    SHA-256 70724fff030d47cb707e306343ce96790e97e00985a2fc667c34ee72b3010c53
    Public key SHA-256 b018019fb8cfa23982746ab5c9490d89cf73dfd4ac090c9ec0d88964fd123295
    Brand
    1inch
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Domain
    1inch.help
    Registered
    2026-11-04 · HOSTINGER operations, UAB
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 20:00 UTC

    Suggest a correction

  3. 1inch.trade SG · AS63949 · Akamai Connected Cloud3 addresses
    ListedPhishing hostAkamai LinodeListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    1inch.trade
    First seen
    2026-11-03 00:15 UTC
    First published
    2026-11-03 00:33 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-05 00:48 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Resolved to 172.232.24.161
    3. Latest DNS check
    Certificate
    Issued by YE2 · precertificate
    Valid 2026-11-02 23:14 UTC to 2027-01-31 23:14 UTC
    Logged 2026-11-03 00:12 UTC in IPng Networks Gouda2027h1, entry 297,586,108
    SHA-256 8b76ee9a9988e054a18a4f1de6e990ade4658ac44a612f04cbabca1f2d2de081
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    1inch
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    1inch.trade
    Registered
    2026-09-01 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 01:41 UTC

    Suggest a correction

  4. 1inch-connect.org US · AS13335 · Cloudflare, Inc.4 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    1inch-connect.org
    First seen
    2026-11-02 22:56 UTC
    First published
    2026-11-02 23:19 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 23:32 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by WE1 · precertificate
    Valid 2026-11-02 21:51 UTC to 2027-01-31 22:49 UTC
    Logged 2026-11-02 22:51 UTC in DigiCert Wyvern2027h1, entry 382,774,454
    SHA-256 ec2972b5494b297b932dd767a2ea857aee7acd453dce60a0a38db813b2c51ceb
    Public key SHA-256 32d8a70365e2e1c0e335530f3c56e9cedb4c79531a3f16b69a51a3ec77902396
    Brand
    1inch
    Addresses
    104.21.95.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.169.45 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:a92d
    2606:4700:3034::6815:5f15
    Cloudflare
    Cloudflare (104.21.95.21, 172.67.169.45): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    1inch-connect.org
    Registered
    2026-09-04 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 23:22 UTC

    Suggest a correction

  5. 1inch.me SG · AS63949 · Akamai Connected Cloud3 addresses
    Phishing hostAkamai LinodeAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 2 mo ago
    DetailsHide
    Hostname
    1inch.me
    First seen
    2026-11-02 18:06 UTC
    First published
    2026-11-02 19:02 UTC
    DNS
    Resolves · checked 2026-11-04 19:08 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 172.232.24.161.
    1. Phishing-host list fetched with the address
    2. Certificate logged in CT
    3. Resolved to 172.232.24.161
    4. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-11-02 17:05 UTC to 2027-01-31 17:05 UTC
    Logged 2026-11-02 18:04 UTC in Google ParcelYard2027h1, entry 576,237,297
    SHA-256 725c4bafd0e01342a6483fb22c0f91ba9a39dc1ae2f9cbaea535e6947f66e9a1
    Public key SHA-256 9c0d3cae4928bd8bad20b19f0040371e902bb6f7825ecdd301bfef5b7e864f57
    Brand
    1inch
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Domain
    1inch.me
    Registered
    2026-09-01 · NameSilo, LLC
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

  6. 1inch-info.to GE · AS200823 · MHost-AS MHost LLC2 addresses
    ListedPhishing hostListed by MetaMask · Address hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    1inch-info.to
    First seen
    2026-10-30 17:40 UTC
    First published
    2026-10-30 18:07 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 18:13 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 5.252.155.27.
    1. Resolved to 5.252.155.27
    2. Phishing-host list fetched with the address
    3. Latest DNS check
    Certificate
    Issued by YE2
    Valid 2026-10-30 16:39 UTC to 2027-01-28 16:39 UTC
    Logged 2026-10-30 17:38 UTC in Google PlumbersArms2027h1, entry 526,841,702
    SHA-256 5bd6ed1e9f1fa6321df3597c3e22866a2ea0980a8e0f87cc3d09c313cef63f70
    Public key SHA-256 152e6f49457b057527b200f79a75da7a88eb7792b4324aa6e39876db7b1fd38c
    Brand
    1inch
    Addresses
    5.252.155.27 · Georgia · AS200823 MHost-AS MHost LLC
    192.142.10.83 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Domain
    1inch-info.to
    Registered
    2026-06-24 · Tonic
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:43 UTC

    Suggest a correction

  7. v2-1inch.com US · AS13335 · Cloudflare, Inc.2 addresses
    ListedCloudflareListed by MetaMaskMX absentSPF missingDMARC missingRegistered 4 mo ago
    DetailsHide
    Hostname
    v2-1inch.com
    First seen
    2026-10-28 10:21 UTC
    First published
    2026-10-28 11:02 UTC
    Listing
    MetaMask: first observed in the feed 2026-10-27 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    PhishDestroy: first observed in the feed 2026-10-25 · still listed at the last successful feed check 2026-11-05 05:51 UTC
    DNS
    Resolves · checked 2026-11-04 11:08 UTC
    Listed
    MetaMask
    1. Observed in the MetaMask feed
    2. Certificate logged in CT
    3. We matched its certificate name
    4. Latest DNS check
    Certificate
    Issued by YE1
    Valid 2026-10-28 09:20 UTC to 2027-01-26 09:20 UTC
    Logged 2026-10-28 10:19 UTC in Let's Encrypt Sycamore2027h1, entry 818,510,979
    SHA-256 1f55bfc07d594bb0b755f2db667f5c8036615742c8ff2eb719c0b8835468ea12
    Public key SHA-256 3b97242573a1dad83b203ad255091da105417b6068d9633a945a798f9bf83623
    Brand
    1inch
    Addresses
    104.21.71.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (104.21.71.205, 172.67.149.43): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Domain
    v2-1inch.com
    Registered
    2026-07-19 · Hosting Concepts B.V. d/b/a Registrar.eu
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-05 06:44 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches 1inch when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Crypto & web3

All brands →