isldata[.]cc

Analysis of isldata.cc indicates this domain is actively impersonating WalletConnect, a widely used protocol for connecting decentralized applications to cryptocurrency wallets. The domain was registered on July 4, 2025, through NameSilo, LLC, and currently resolves to the IP address 188.114.96.3. Infrastructure analysis reveals the use of Cloudflare services and HTTP/3, which are common among both legitimate and malicious sites but often employed to obscure hosting origins and evade detection. The domain is secured with a Let's Encrypt SSL certificate, a practice frequently observed in phishing campaigns to lend a false sense of legitimacy. As of July 12, 2026, isldata.cc remains active and has been flagged by multiple security blocklists, including ScamSniffer, PhishDestroy, and BLP-Malware. It appears on three distinct security blocklists, and AlienVault OTX records show the domain in 24 threat intelligence pulses, suggesting repeated identification in malicious activity reports. While specific page content has not been analyzed, the domain is explicitly categorized as a brand impersonation threat targeting WalletConnect. Defenders should note that two out of 95 security vendors on VirusTotal have flagged this domain, though the absence of broader detection does not imply safety. The domain's registration age—over a year old—may indicate an attempt to evade reputation-based filters that prioritize newly registered domains. Organizations are advised to block this domain at the network level and monitor for related infrastructure, particularly any domains resolving to 188.114.96.3 or sharing registration patterns with NameSilo. Further investigation into associated hosting providers and certificate issuance patterns may reveal additional linked threats.