appwallets--connects[.]pages[.]dev

The domain appwallets--connects.pages.dev is currently under investigation for brand impersonation, specifically targeting the WalletConnect brand. This type of threat aims to deceive users into believing they are interacting with a legitimate service, potentially leading to the theft of sensitive information or unauthorized access to accounts.

Analysis indicates that the domain was created on May 27, 2026, and is registered through Cloudflare, Inc. The domain has been checked on VirusTotal, where it has received 0 detections out of 95, suggesting that it has not been widely flagged by security systems yet. However, it is currently listed on one security blocklist, and the SSL certificate is issued by Let's Encrypt, which is commonly used by both legitimate and malicious sites. The IP address 172.66.47.204 is located in the United States and is associated with AS13335 Cloudflare, Inc., further indicating that the site is being hosted through a reputable but widely used service.

If a user has visited appwallets--connects.pages.dev, they should immediately cease all interactions with the site. It is recommended to change any passwords or credentials that may have been entered, and to monitor account activity for any signs of unauthorized access. Users should also report the incident to their financial institutions and consider enabling two-factor authentication on all relevant accounts. For further protection, users should add this domain to their browser's list of blocked sites and avoid clicking on any links or downloading any files from the site.