İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

210,003

Toplam Takip Edilen

VT Algılandı

74,190

En Son Görüldü: Aktif

135,813

Son kontrolde erişilemiyordu

VT Beklemede

YÜKSEK THREAT

Understanding and Combating WalletConnect Abuse

WalletConnect Abuse represents a significant threat, with 1,667 domains detected and 555 currently active. PhishDestroy has identified top TLDs including .com, .app, and .xyz, and leading registrars such as NICENIC INTERNATIONAL GROUP CO., LIMITED.

1,676

Alan adları Detected

YÜKSEK

Threat Level

How This Attack Works

WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.

STEP 1

Creation of Fake Alan adları

Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.

STEP 2

Deployment of Phishing Pages

Phishing pages are set up on these domains to capture user credentials and wallet information.

STEP 3

Execution of Malicious Code

JavaScript and other scripting languages are used to execute malicious code that intercepts user data.

STEP 4

Unauthorized Transactions

Stolen credentials are used to authorize transactions, draining victims’ wallets.

Technical Analysis

WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.

Real Cases

The Opensea Phishing Incident (2024)

$2 million stolen

A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.

Vercel App Scam (2023)

$1.5 million stolen

Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.

Marketplace-Art Fraud (2024)

$3 million stolen

Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.

How to Detect

Unfamiliar domain names mimicking legitimate services

Requests for private keys or seed phrases

Unexpected transaction requests

Poor website design or misspellings

Limited or no HTTPS security

How to Protect Yourself

1 Always verify domain authenticity

2 Enable two-factor authentication

3 Use hardware wallets for transactions

4 Regularly update security software

5 Educate yourself on common phishing tactics

Frequently Asked Questions

What is WalletConnect Abuse?

WalletConnect Abuse involves exploiting the WalletConnect protocol to trick users into revealing their cryptocurrency wallet credentials through phishing tactics.

How much money has been stolen through WalletConnect Abuse?

To date, WalletConnect Abuse has resulted in millions of dollars in losses, with specific incidents causing damages ranging from $1.5 million to $3 million.

How do I protect myself from WalletConnect Abuse?

Verify domain authenticity, use two-factor authentication, and employ hardware wallets for added security against phishing attacks.

What should I do if I'm a victim of WalletConnect Abuse?

Rapor the incident to your wallet provider, change passwords immediately, and contact local authorities or a cybersecurity expert for assistance.

Data sourced from PhishDestroy threat intelligence database — 1,676 domains tracked for this threat type

Wallet Connect Abuse — Threat Intelligence Protocol Abuse Etkin Threat

walletconnect.com (official)

1,676

Alan adları

426

Alive

1,241

Kaldırıldı

7.7

Avg VT

25.4%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,011 VT değeri 5 veya daha büyük olan alanlar

WalletConnect Abuse 1,676 domains

1 VTBilinmiyorWalletConnect

animalfarm3app.com

app-aeuc.com

1 VTBilinmiyorWalletConnect

app-hyperliquidl.cam

1 VTBilinmiyorfoundation

app-hyperliquidl.cam

appethos-invite.network

1 VTBilinmiyorWalletConnect

appethos-invite.network

apptea-fi.com

1 VTBilinmiyorWalletConnect

bob-sepolia-q8djryial-distributed-crafts.vercel.app

1 VTBilinmiyoracross

bob-sepolia-q8djryial-distributed-crafts.vercel.app

bobonbsc.com

1 VTBilinmiyorbinance

bobonbsc.com

boundless.eligibility.ink

1 VTBilinmiyor

boundless.eligibility.ink

1 VTEtkinWalletConnect

cashewgetsajob.com

chain6.net

1 VTBilinmiyorWalletConnect

chain6.net

chainlinkairdrop.web.app

1 VTBilinmiyorWalletConnect

chainlinkairdrop.web.app

chainopera.foundation

1 VTEtkinBinance

chainopera.foundation

claim-aquadoge.web.app

1 VTEtkinacross

claim-aquadoge.web.app

decte-rqaaa-aaaam-advta-cai.icp0.io

1 VTEtkin

decte-rqaaa-aaaam-advta-cai.icp0.io

1 VTBilinmiyoreigenlayer

1 VTBilinmiyorEtherFi

euylk-paaaa-aaaac-a3uya-cai.icp0.io

1 VTEtkinWalletConnect

euylk-paaaa-aaaac-a3uya-cai.icp0.io

foxletfuntoken-com-purchase-website.pages.dev

1 VTEtkinrevolut

foxletfuntoken-com-purchase-website.pages.dev

1 VTBilinmiyormetamask

getyourairdrop.com

hype.rliquid.co.com

1 VTBilinmiyorHyperliquid

hype.rliquid.co.com

hyper-eligibility.com

1 VTBilinmiyorHyperliquid

hyper-eligibility.com

hyperfoundation.snapshots.workers.dev

1 VTBilinmiyorethereum

hyperfoundation.snapshots.workers.dev

hyperliquid-airdrop.org

1 VTBilinmiyorfoundation

hyperliquid-airdrop.org

hyperliquid-tracing.web.app

1 VTEtkinEthereum

hyperliquid-tracing.web.app

ico.gaia-blockchain.com

1 VTBilinmiyorBlockchain.com

ico.gaia-blockchain.com

integratedsystemsconnect.com

1 VTBilinmiyoracross

integratedsystemsconnect.com

interac.cakepay.eu

1 VTBilinmiyorInterac

islamic-guard.web.app

1 VTBilinmiyor["discord"]

islamic-guard.web.app

1 VTBilinmiyorfoundation

jitosol.lol

layer3-webportal.com

1 VTBilinmiyorEthereum

1 VTBilinmiyorbinance

migratejpeg-jpegd.com

1 VTBilinmiyorcurve

migratejpeg-jpegd.com

mstblockchain.com

1 VTEtkinBlockchain.com

nnvtz-uqaaa-aaaah-qpuuq-cai.icp0.io

1 VTEtkin

nnvtz-uqaaa-aaaah-qpuuq-cai.icp0.io

online650.com

1 VTBilinmiyortrust wallet

online650.com

opinion-vote.com

1 VTBilinmiyorbnb chain

opinion-vote.com

originswap.org

1 VTBilinmiyorarbitrum

originswap.org

oxygenprotocol.space

1 VTBilinmiyorbinance

oxygenprotocol.space

pancakeswap.cam

1 VTBilinmiyorPancakeSwap

pancakeswap.cam

pharoshub.web.app

1 VTBilinmiyordiscord

pharoshub.web.app

play.astroc2m.space

1 VTBilinmiyormetamask

play.astroc2m.space

portalbancus.com

1 VTBilinmiyorbinance

portalbancus.com

pqlzd-baaaa-aaaai-aqfja-cai.icp0.io

1 VTBilinmiyorWalletConnect

pqlzd-baaaa-aaaai-aqfja-cai.icp0.io

pumpcoin.site

1 VTBilinmiyorrevolut

pumpcoin.site

pumpfunclaim.online

1 VTBilinmiyordiscord

quickswap.exchange-defi-web-referral.icu

1 VTBilinmiyorpolygon

quickswap.exchange-defi-web-referral.icu

quickswap.exchange-dex-swap-referral.lol

1 VTBilinmiyorpolygon

quickswap.exchange-dex-swap-referral.lol

quickswap.exchange-web-defi-referral.life

1 VTBilinmiyorpolygon

quickswap.exchange-web-defi-referral.life

quickswap.orbs-tt.com

1 VTEtkinUnknown

quickswap.orbs-tt.com

1 VTBilinmiyorUnknown

1 VTBilinmiyordiscord

snipersolbot.com

solsnipers.netlify.app

1 VTBilinmiyorPump.fun

solsnipers.netlify.app

1 VTBilinmiyorrevolut

telegrambotgame.pages.dev

1 VTEtkinTelegram

telegrambotgame.pages.dev

1 VTBilinmiyorbnb chain

triasnetx-phase2.com

trumpxsol.com

1 VTBilinmiyorraydium

u53lc-iaaaa-aaaap-qbnea-cai.icp0.io

1 VTEtkinEthereum

u53lc-iaaaa-aaaap-qbnea-cai.icp0.io

vesperbridge.com

1 VTBilinmiyorbnb chain

vesperbridge.com

virtual.votings.workers.dev

1 VTBilinmiyorWalletConnect

virtual.votings.workers.dev

vote-hyprstr.com

1 VTBilinmiyorWalletConnect

wallet-app-dfl.pages.dev

1 VTEtkinUnknown

wallet-app-dfl.pages.dev

walletconnectscan.netlify.app

1 VTBilinmiyorWalletConnect

walletconnectscan.netlify.app

« Önceki 13 14 15 16 17 Sonraki » Sayfa 16 ...'nin 17

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: