VirusTotal
9 / 89 engine detections
レポートを開く“Wallet connect”
WalletConnectフィッシング: walletconnectgate.com — 未検証. 証拠の概要: VirusTotal 9/89 (ChainPatrol, alphaMountain.ai, Chong Lua Dao, CRDF, Forcepoint ThreatSeeker)…
元のフォレンジック記録を保持するため、下の PhishDestroy AI 詳細分析は英語のままです。
9 / 89 engine detections
レポートを開く15/100
レポートを開くDBL_PHISH
4 community references
レポートを開くprovider verdict: clean
レポートを開くNo threat flag
レポートを開くNo malicious flag
レポートを開くResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
PhishDestroy threat report
walletconnectgate.com is a fraudulent site that impersonates WalletConnect, the widely used open protocol for connecting crypto wallets to decentralized applications. Its purpose is to drain cryptocurrency from any wallet a visitor connects to it. PhishDestroy first identified it on 2026-09-11, one day after it was registered, indicating rapid deployment. As of 2026-10-19 the site's DNS is inactive, meaning it is no longer resolving, though the domain itself remains a confirmed threat.
The site presents itself under the page title "Wallet connect", closely mimicking the legitimate WalletConnect brand to appear trustworthy to DeFi and Web3 users. Using a Wallet Connect Abuse drainer kit, the site prompts visitors to connect their crypto wallet, typically by requesting a wallet signature or approval transaction. Once the victim approves, the kit silently submits malicious transactions that transfer tokens and assets out of the wallet to attacker-controlled addresses. The victim loses funds immediately and often without any further interaction required.
VirusTotal returned 9 detections from 89 scanning engines as of 2026-09-13, with flagging vendors including ChainPatrol, Fortinet, Forcepoint ThreatSeeker, SOCRadar, Gridinsoft, CRDF, alphaMountain.ai, and Chong Lua Dao. The domain appears on three blocklists: PhishDestroy, MetaMask, and SEAL, the last of which specifically targets crypto-ecosystem threats. Spamhaus classifies it as DBL_PHISH, and it has accumulated 4 threat pulses on OTX. Collectively, this cross-vendor and cross-blocklist consensus firmly supports the Crypto Drainer classification.
The domain was registered on 2026-09-10 through NICENIC INTERNATIONAL GROUP CO., LIMITED and was active within 24 hours. It is hosted on Cloudflare's network at IP 172.67.190.27, located in the US. TLS was provisioned via Let's Encrypt, issuer YE2, which provides free, automated certificates requiring no identity verification.
If you visited this site but did not connect a wallet, no immediate action is needed beyond clearing your browser cache. If you connected a wallet, immediately revoke all token approvals granted to any contract associated with this site using a trusted approval-management tool. Transfer remaining assets to a fresh wallet address as a precaution, and report the incident to your wallet provider. Security teams and defenders should ensure walletconnectgate.com is present on all internal blocklists and push the domain to any threat-intelligence feeds not already carrying it.
Last checked
Edge-IP の評判はこのドメインに起因しません。
martin.ns.cloudflare.comsunny.ns.cloudflare.comLocation describes the IP network.
76e27eb1d05bac40e13f277b09596b4b175975c88a5f1370e69d52ccd31cdd0cSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of walletconnectgate.com · checked Sep 11, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
walletconnectgate.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
不明→dns_inactive
dns_nxdomain
dns_inactive
dns_nxdomain
到達可能→利用不可
到達可能
4 community references
View source9/89 engine detections
View sourceNo threat flag
View sourcePage captured
View sourcewalletconnectgate.com
View sourceListed domains receive at least one abuse report; this entry has no retained notification history.
このドメインを操作したり、個人情報を入力したり、暗号通貨ウォレットに接続したりした場合は、直ちに行動を起こしてください。インシデントを報告し、自分自身を守るのに役立つリソースを以下に示します。
サイバー犯罪の公式連絡先 または 苦情草稿を作成する → を取得するには、国を選択してください。
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
推定では $51 billion 2024年に違法な暗号資産ウォレットへと流出した(source). もしあなたが walletconnectgate.com — 今すぐ行動しましょう。
Wallet-specific steps below apply if you connected a wallet, signed a transaction, or exposed a wallet secret.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
によると、 FBI、最も重要な詳細はトランザクションデータです:
0x5856...35985)walletconnectgate.com)たとえすべての詳細がわかっていなくても―― とにかく報告を提出する. 不完全な情報であっても、捜査には役立つ。
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
保存されたブロックリスト、WHOIS、DNS、および公開スキャン証拠を使用した脅威分析
今すぐスキャン不審なドメインを当社の脅威データベースに報告してください — コミュニティを守りましょう
レポート最近のフィッシングレポートと観察された可用性の変化
監視リアルタイムの脅威を監視するか、誤検知だと思われる場合はこのリストに異議を申し立ててください
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.