# walletconnectpro.testdev.sbs — MALICIOUS — Crypto Drainer (Wallet Connect Abuse)

> walletconnectpro.testdev.sbs is an active crypto drainer domain posing medium risk. Avoid interaction and block this site immediately.

## Summary
PhishDestroy identifies walletconnectpro.testdev.sbs as an active medium-risk threat primarily involved in crypto drainer activities. The domain leverages Wallet Connect Abuse drainer kits targeting cryptocurrency users, aiming to illicitly access and siphon digital assets. Due to its active status, users should exercise heightened caution when encountering this domain.

Supporting intelligence reveals the domain was registered recently on May 01, 2025, through Dynadot LLC and resolves to the IP address 198.251.89.220. While only a minority of security vendors (6 out of 95) flag this domain on VirusTotal, the presence of two security blocklists indicating malicious behavior underscores credible risk. The associated drainer kit, Wallet Connect Abuse, is a known mechanism to exploit wallet connections and drain crypto funds, substantiating the domain's malicious intent.

To mitigate risks posed by walletconnectpro.testdev.sbs, it is advised to immediately block access to this domain on all organizational networks and endpoints. Users should refrain from engaging with any links or wallet connections associated with this domain. Continuous monitoring of threat intel feeds and applying network-level filtering are critical, given the domain's ongoing active status and evolving crypto draining tactics. PhishDestroy recommends enhanced vigilance to protect digital asset security against emerging wallet abuse threats like those employed here.

## Threat Details
- Verdict: MALICIOUS — Crypto Drainer (Wallet Connect Abuse)
- Site status: alive (HTTP 200)
- Drainer type: Wallet Connect Abuse
- Target brand: WalletConnect
- Page title: FLARE - HOME

## Domain Intelligence
- Registered: 2026-03-05 15:07:02
- Registrar: Dynadot LLC
- Country: US
- IP: 198.251.89.220
- IP Country: US
- IP City: Cheyenne
- IP Org: AS53667 FranTech Solutions
- Nameservers: ["ns27.asurahosting.com", "ns28.asurahosting.com"]
- SSL Issuer: Let's Encrypt / R13

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ChainPatrol", "Fortinet", "Netcraft", "Seclookup", "Sophos", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Live Page Content

### Page Text
FLARE - HOME Claim Airdrop CONNECT EVERYTHING Flare is the blockchain for data, providing developers with secure decentralized access to high-integrity data from other chains and the internet Claim Airdrop Getting Started Flare is a layer 1 EVM-based blockchain that has 2 core data acquisition protocols, the State Connector and Flare Time Series Oracle (FTSO). Products The Flare protocols, how they work and what they can do. Flare blockchain When to use Flare, Songbird and Coston. Open Source Our source code repositories. Bug bounty Support the safety of the Flare network. Grants program Apply funding to develop on or using Flare. The blockchain for data Flare is an EVN smart contract platform with two enshrined data acquisition protocols FTSO Decentralized Prices Offers highly-decentralized price and data to dapps on Flare, without relying on centralized providers. Data Connector Trustless data proofs Enables information from other blockchains and the internet to be used securely and trustlessly on Flare. Claimed Flare Wallet Amount Hash Time ONTO wallet 4044.26 FLR vwhi59cf... 15 minutes ago Crypto.com 17938.61 FLR z02ob8lx... 12 minutes ago ONTO wallet 2832.97 FLR nfnrf59w... 43 seconds ago Safepal Wallet 9400.06 FLR d611vkki... 41 seconds ago Coinbase 18057.74 FLR 4ti6iqrn... 19 minutes ago Tangem Wallet 17255.17 FLR y3qr8din... 24 minutes ago Exodus Wallet 12677.43 FLR iu7qmb6v... 29 minutes ago Xaman 18398.95 FLR gr0yu6dj... 11 minutes ago Exodus Wallet 17763.12 FLR wjshuh1p... 23 minutes ago Bitget 8548.31 FLR 69hv8o2l... 17 minutes ago Token Pocket 16900.27 FLR dwjoieh7... 8 minutes ago Trust Wallet 17341.43 FLR ehmr180w... 15 minutes ago Fantom 3886.34 FLR esiit9wk... 40 seconds ago Trezor Wallet 10330.20 FLR rv2q6k6z... 37 seconds ago SafePal 7682.02 FLR 4n8ptm38... 36 seconds ago Build without limitation Bridging Use Flare's core protocols to build safer bridges State Acquisition Build dapps and protocols that works from any connected chain Web2 Connectivity Trustlessly trigger smart contracts with data from Web2 APIs. Decentralized Data Feeds Trustlessly trigger smart contracts with data from Web2 APIs. Scalable Smart Contracts Flare integrates an industry standard EVM with low carbon consensus alogrithm. © Flare Network 2024

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cbe8b-8fd0-71d7-bcf6-87fd50a0a43a.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/walletconnectpro.testdev.sbs
- Wayback Machine: https://web.archive.org/web/https://walletconnectpro.testdev.sbs
- PhishDestroy: https://phishdestroy.io/domain/walletconnectpro.testdev.sbs/
- LLM endpoint: https://phishdestroy.io/domain/walletconnectpro.testdev.sbs/llm.txt

## If You Visited This Site
1. Revoke all token approvals immediately (revoke.cash / unrekt.net)
2. Move remaining funds to a new wallet
3. Do not interact with any transactions from this site
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/walletconnectpro.testdev.sbs/
Last updated: 2026-03-16