remotecall-coretechrobe[.]com

Analysis of remotecall-coretechrobe.com shows a confirmed WalletConnect brand impersonation campaign that was taken offline prior to the report date of 23 July 2026. The domain was registered through Hostinger operations, UAB on 8 July 2025 and points to the IP address 46.202.158.224, which belongs to AS47583 Hostinger International Limited located in Germany. No SSL certificate is present, indicating the site was served over plain HTTP. The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parked domains. The only visible page element is the title "WalletConnect", matching the declared target brand.

The site has been flagged by multiple external defenses: PhishDestroy and ScamSniffer have listed it, and it appears on two additional security blocklists. AlienVault OTX references include 16 distinct threat‑intelligence pulses that cite the same domain, reinforcing its association with the WalletConnect impersonation toolkit. VirusTotal scans recorded 15 of 95 security vendors marking the domain as malicious, providing further independent confirmation. Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low reputation.

The convergence of registrar data, hosting infrastructure, lack of TLS, and multiple independent detections indicates a high confidence that the domain was used to lure victims into a WalletConnect‑related fraud flow. The current offline status limits immediate observation, and the content of the landing page has not been captured, leaving the exact phishing mechanics unknown. Defenders should continue to block the domain at network egress points, update URL filtering feeds with the observed indicators, and monitor for any re‑registration attempts that reuse the same hoster or name server pattern. Surveillance of the host IP 46.202.158.224 for new domain activity is recommended, as the infrastructure may be repurposed for future campaigns.