web3walletconnect.digital

This domain, web3walletconnect.digital, functions as a crypto drainer designed to siphon cryptocurrency assets by impersonating WalletConnect, a legitimate decentralized messaging protocol for blockchain wallets. The site employs a fraudulent interface titled 'Blockchain Vault Protocol,' which mimics authentic wallet connection flows to deceive users into authorizing malicious transactions. Analysis indicates the domain was engineered to exploit trust in WalletConnect’s branding, leveraging social engineering tactics to prompt victims into granting access to their digital wallets, thereby enabling unauthorized fund transfers to attacker-controlled addresses. Infrastructure analysis reveals the domain was registered on March 10, 2026, through Name.com, Inc., and resolved to the IP address 64.29.17.1, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). The domain appears on one security blocklist, while VirusTotal detection metrics show 20 out of 95 security vendors flagging it as malicious. The SSL certificate, identified as R12, further corroborates the domain’s association with a broader crypto drainer campaign, specifically linked to the 'Wallet Connect Abuse' kit. The discrepancy between the creation date and current year suggests potential data manipulation or a typographical error in registration records, a tactic occasionally observed in phishing operations to obscure tracking efforts. Users who interacted with web3walletconnect.digital or authorized any transactions through the site should immediately revoke all active wallet connections via their wallet’s interface. It is critical to audit recent transaction histories for unauthorized transfers and transfer remaining assets to a new, secure wallet address. Additionally, affected users should monitor for secondary phishing attempts, as compromised data may be leveraged for follow-up attacks. Security teams are advised to block the domain, its resolving IP, and associated indicators of compromise within network defenses to prevent further exposure.