# claim.omeletteswap.finance — MALICIOUS — Crypto Drainer (Wallet Connect Abuse)

> claim.omeletteswap.finance is flagged as a high-risk crypto drainer. Stay cautious and verify before interacting with this domain to protect your wallet.

## Summary
PhishDestroy identifies claim.omeletteswap.finance as a high-risk crypto drainer targeting users via WalletConnect abuse. The domain is designed to trick victims into connecting their wallets, enabling unauthorized fund withdrawals. It mimics legitimate interfaces to deceive users into granting access to their crypto assets.

Technically, the domain resolves to IP address 198.18.6.121 and uses a WalletConnect-based drainer kit. It appears on multiple security blocklists and is flagged by 17 out of 95 VirusTotal security vendors. The page title "WalletConnect | React Starter Template" suggests the use of a common phishing template to exploit wallet connections. Registration details are not available, indicating possible attempts to mask ownership.

Currently, claim.omeletteswap.finance remains active and continues to pose a threat. Users are strongly advised not to interact or connect their wallets with this domain. Security professionals recommend blocking the domain at network level and reporting any suspicious wallet activity. Vigilance and verification are essential to avoid compromising digital assets.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Wallet Connect Abuse)
- Site status: alive (HTTP 200)
- Drainer type: Wallet Connect Abuse
- Page title: WalletConnect | React Starter Template

## Domain Intelligence
- Registrar: N/A
- Country: Unknown
- IP: 198.18.6.121
- Nameservers: N/A

## Detection Status
- VirusTotal: 17 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "Cluster25", "Criminal IP", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Kaspersky", "Lionic", "OpenPhish", "Phishing Database", "SOCRadar", "Sophos", "VIPRE", "alphaMountain.ai"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/01993ebe-618d-7687-8ed9-3495ac756e24.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4c991697-2e71-4500-b211-fa5364c9ab6b
- PhishDestroy: https://phishdestroy.io/domain/claim.omeletteswap.finance/

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/claim.omeletteswap.finance/
Last updated: 2026-03-13