nodepact[.]com

PhishDestroy has identified nodepact.com as a brand impersonation threat specifically targeting WalletConnect, a popular cryptocurrency wallet connection service. The domain is currently offline, indicating that it has been taken down, likely due to security interventions. This domain was created on October 14, 2025, and its page title explicitly displayed "WalletConnect" to deceive users into believing it was a legitimate service.

Technical analysis reveals that nodepact.com was registered through HOSTINGER operations, UAB, and resolved to IP address 92.113.23.187. It was flagged by 16 of 95 VirusTotal security vendors, indicating a high level of malicious detection. Additionally, the domain appeared on one security blocklist and was found in four threat intelligence pulses on AlienVault OTX. Notably, the domain lacked an SSL certificate, a common red flag for phishing sites. These indicators collectively confirm that nodepact.com was a fraudulent site designed to steal credentials or facilitate crypto drainer attacks.

Given that nodepact.com is now offline, the immediate threat is mitigated. However, users should remain vigilant as similar domains may emerge. PhishDestroy recommends that WalletConnect users always verify the official domain (walletconnect.com) and avoid clicking on links from unsolicited messages. Enable two-factor authentication on all crypto wallets and use a reputable security solution to block known phishing domains. If you encounter any suspicious sites, report them to relevant authorities or security platforms.