walletsupportconnectlive[.]com

PhishDestroy has identified walletsupportconnectlive.com as a high-risk phishing domain currently taken offline. This site was specifically designed to impersonate WalletConnect, a legitimate open protocol for connecting wallets to dapps, in order to steal cryptocurrency wallet credentials and drain user funds. The threat type is a brand impersonation crypto drainer, targeting users who trust the WalletConnect brand to securely link their wallets. With an elevated risk level, this domain posed a serious threat to anyone who encountered it before it was shut down.

Technical indicators paint a clear picture of malicious intent. The domain was registered on May 3, 2025, through HOSTINGER operations, UAB, a registrar often abused by threat actors. It resolves to IP address 147.79.103.204 and used an SSL certificate issued by WR1, which is not a trusted certificate authority for legitimate services. VirusTotal data shows that 6 out of 95 security vendors flagged this domain as malicious, and it appears on five separate security blocklists. The page title, "Open protocol for connecting Wallets to Dapps," was a direct copy of the legitimate WalletConnect site, designed to deceive users. The domain is currently offline, but similar threats may still be active.

To stay safe, users should always verify the authenticity of any website claiming to be a crypto service by double-checking the URL and ensuring it matches the official domain exactly. Never connect your wallet to a site that you are not 100% certain is legitimate. Use PhishDestroy's verification tools to check any suspicious domain before interacting with it. If you have already connected your wallet to this site, immediately revoke permissions through your wallet settings and transfer your assets to a new wallet. Enable two-factor authentication and monitor your accounts for unauthorized transactions. Report any similar phishing domains to PhishDestroy and the relevant authorities to help protect the community.