general-v2v1[.]org

The domain general-v2v1.org is a confirmed phishing site engaged in brand impersonation targeting WalletConnect users. It presents itself as the legitimate WalletConnect platform to deceive victims into entering sensitive credentials or wallet information, posing an elevated risk of financial loss or account compromise. As of the latest verification, general-v2v1.org has been taken offline, though prior activity indicates it was actively used for malicious purposes.

Technical analysis reveals that general-v2v1.org was flagged by 3 of 95 security vendors on VirusTotal, including Gridinsoft, SOCRadar, and Webroot, with a Gridinsoft trust score of 0/100. The domain appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot. It was registered through HOSTINGER operations, UAB, on November 05, 2025, and resolved to the IP address 82.198.227.200, hosted in Germany under AS47583. The site lacked an SSL certificate, and its nameservers were ns1.dns-parking.com and ns2.dns-parking.com. The observed page title was 'WalletConnect', reinforcing its impersonation of the legitimate service.

Individuals who interacted with general-v2v1.org should immediately change any passwords or credentials entered on the site and enable two-factor authentication on affected accounts. If cryptocurrency wallet information was exposed, revoke any active token approvals and transfer funds to a new, secure wallet. Report the phishing domain to relevant platforms, such as Google Safe Browsing, anti-phishing organizations, or the impersonated brand’s security team, to aid in broader takedown efforts.