Phishing sites impersonating WalletConnect

PhishDestroy has recorded 634 phishing domains impersonating WalletConnect since 2025-07-15, 9 of them in the last 30 days. The most used registrars are Cloudflare and NiceNIC; the most common TLDs are .com and .app. The official WalletConnect domain is walletconnect.com: any other site asking for your login or wallet is not WalletConnect.

634
Domains, all time
9
Last 30 days
221
Online at last check
162
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 12026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 12026-08-11: 02026-08-12: 12026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 12026-08-19: 02026-08-20: 02026-08-21: 12026-08-22: 02026-08-23: 12026-08-24: 22026-08-25: 02026-08-26: 12026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 72026-09-01: 32026-09-02: 12026-09-03: 22026-09-04: 12026-09-05: 02026-09-06: 22026-09-07: 42026-09-08: 02026-09-09: 12026-09-10: 02026-09-11: 52026-09-12: 02026-09-13: 22026-09-14: 22026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 22026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 12026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 22026-10-08: 02026-10-09: 12026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 22026-10-14: 02026-10-15: 12026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
WalletConnect phishing domains detected per day: 48 from 2026-07-25 to 2026-10-22; peak 7.

How to tell a fake WalletConnect site

Official domains: walletconnect.com, reown.com.

Words most often added to the brand in reported domains: wallet, connect, airdrop, claim, bnb, cai, icp, dapp, dex, eth.

  • Type the address yourself or use a bookmark; phishing links for WalletConnect arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • WalletConnect will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest WalletConnect phishing domains

The 50 most recently detected domains impersonating WalletConnect
DomainFirst detectedStatus at last checkRegistrar
digit-asseetirsagn-porta.online2026-10-15OfflineUltahost
walletconnect.pro2026-10-13OnlineGlobal Domain
crypto-pay-connect.com2026-10-13OnlineNICENIC
eth-get.lol2026-10-09OnlineGlobal Domain
web3pay-connect.com2026-10-07OnlineNICENIC
onchain-checkout.com2026-10-07OnlineNICENIC
web3evmpayconnect.com2026-09-29OnlineNICENIC
wallet-connecthub.com2026-09-25OnlineNICENIC
walletconnect-airdrop.xyz2026-09-25OfflineSpaceship
web3connectcenter.com2026-09-14OfflineNICENIC
hsd05e53837dec3946be106277583f5550.nexusqalinka2.lol2026-09-14OfflineNAMECHEAP
connect-wallet.xyz2026-09-13OfflineCosmotown
perfectwalletconnect.com2026-09-13UnknownNICENIC
walletconnectportal.onrender.com2026-09-11OnlineAmazon Registrar
walletconnectgate.com2026-09-11UnknownNICENIC
counntktwalt.gitbook.io2026-09-11OnlineCloudflare
easy-wallet-connect.net2026-09-11OnlineNICENIC
easy-wallet-connect.com2026-09-11UnknownNICENIC
web3-connect-center.com2026-09-09UnknownNICENIC
hs58433afc673bc0493787dd6a77ce85ab.nexusqalinka2.quest2026-09-07OfflineNAMECHEAP
hs6429b18715a5dd68ac051d352a3ca960.nexusqalinka2.quest2026-09-07OfflineNAMECHEAP
hs487cf02500f16e5d351d032259d9badc.nexusqalinka2.quest2026-09-07OfflineNAMECHEAP
hs1db12c223ba78bf5f4bc4a5d24d86f29.nexusqalinka2.quest2026-09-07OfflineNAMECHEAP
easy-connect-web3.com2026-09-06OnlineNICENIC
connect4payment.com2026-09-06UnknownNICENIC
renode-extension.pages.dev2026-09-04OfflineCloudflare Pages
ton-wallet-connect.vercel.app2026-09-03OnlineVercel
walletconnect-website.vercel.app2026-09-03OnlineVercel
app.internalsystemfix.com2026-09-02OfflineUltahost
wallet-connect-payment.net2026-09-01OnlineNICENIC
web3-cnnct-center.com2026-09-01OnlineNICENIC
eth-gate-connection.lol2026-09-01OfflineGlobal Domain
web3-easy-connect.com2026-08-31UnknownNICENIC
app-walletsconnects.web.app2026-08-31OnlineGoogle
wallet-connect-gate.com2026-08-31UnknownNICENIC
evm-cnct.com2026-08-31OnlineNICENIC
web3-crypto-gate.com2026-08-31OnlineNICENIC
evm-llnk.com2026-08-31OnlineNICENIC
intergrateclaimv2.xyz2026-08-31UnknownNICENIC
wallet-connectweb.app2026-08-26OfflineGoogle
wallconnecte.click2026-08-24OnlineGlobal Domain
amlconnect.app2026-08-24UnknownNICENIC
willowy-moxie-4d085f.netlify.app2026-08-23OfflineNetlify
flowxprotocol.world.tetherking.world2026-08-21OfflineHOSTINGER operations
apps--wallet-connects.web.app2026-08-18OnlineGoogle Firebase
walletconnect0.netlify.app2026-08-12OfflineNetlify
18827.click2026-08-10OnlineNETIM
wall-node.com2026-07-27OfflineTucows Domains
connectmodalsol.org2026-07-24OfflineCloudflare
web.walletsync-dapp.com2026-07-06OnlineInternet Domain Service BS

All 634 WalletConnect reports

Where they are registered and hosted

Registrars

  1. Cloudflare72
  2. NiceNIC49
  3. Gname.com44
  4. GoDaddy.com34
  5. NICENIC34
  6. HOSTINGER operations29
  7. NameCheap23
  8. NameSilo23

Top-level domains

  1. .com213
  2. .app86
  3. .dev49
  4. .xyz38
  5. .io31
  6. .cc30
  7. .org24
  8. .net20

Hosting networks

  1. CLOUDFLARENET, US195
  2. Cloudflare, Inc.86
  3. AMAZON-02, US52
  4. CLOUDFLARENET - Cloudflare, Inc., US31
  5. AS-HOSTINGER Hostinger International Limited, CY28
  6. FASTLY, US28
  7. Amazon.com, Inc.15
  8. AMAZON-02 - Amazon.com, Inc., US14

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is WalletConnect; share of all PhishDestroy reports: 0.28%.