dappswaletconnect[.]pages[.]dev

PhishDestroy identifies dappswaletconnect.pages.dev as an active cryptocurrency drainer phishing domain currently propagating under investigation with threat type flagged as generic_phishing. This campaign is designed to impersonate WalletConnect, a legitimate decentralized app connection protocol, and trick users into connecting their wallets to drain crypto assets. The domain remains active at the time of writing and is being tracked for escalation if new indicators emerge. This domain was flagged by 0 of 95 VirusTotal vendors and is registered through Cloudflare, Inc. It resolves to IP address 172.66.47.150 and holds a valid SSL certificate issued by Let's Encrypt. While domain age and creation date are not publicly available due to Cloudflare's WHOIS privacy protection, this site is hosted on Cloudflare Pages, a legitimate platform often exploited for quick deployment of malicious sites. PhishDestroy notes the absence of blocklist entries and low trust scores due to recent deployment and evasion tactics. PhishDestroy currently classifies this domain as active with a risk level under investigation. Users are advised never to connect Web3 wallets to unknown dapp links and verify URLs through official WalletConnect channels or PhishDestroy’s real-time blocklist. If exposed, revoke any connected wallet permissions immediately using tools like revoke.cash or your wallet’s interface. Do not interact with pop-ups or transaction prompts from unknown sources. Always cross-check domains against trusted sources before proceeding with crypto transactions.