İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.
209,359
Toplam Takip Edilen
203,981
VT Algılandı
73,838
En Son Görüldü: Aktif
135,521
Son kontrolde erişilemiyordu
0
VT Beklemede
How This Attack Works
WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.
STEP 1
Creation of Fake Alan adları
Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.
STEP 2
Deployment of Phishing Pages
Phishing pages are set up on these domains to capture user credentials and wallet information.
STEP 3
Execution of Malicious Code
JavaScript and other scripting languages are used to execute malicious code that intercepts user data.
STEP 4
Unauthorized Transactions
Stolen credentials are used to authorize transactions, draining victims’ wallets.
Technical Analysis
WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.
Real Cases
The Opensea Phishing Incident (2024)
$2 million stolen
A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.
Vercel App Scam (2023)
$1.5 million stolen
Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.
Marketplace-Art Fraud (2024)
$3 million stolen
Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.
How to Detect
Unfamiliar domain names mimicking legitimate services
Requests for private keys or seed phrases
Unexpected transaction requests
Poor website design or misspellings
Limited or no HTTPS security
How to Protect Yourself
1
Always verify domain authenticity
2
Enable two-factor authentication
3
Use hardware wallets for transactions
4
Regularly update security software
5
Educate yourself on common phishing tactics
Frequently Asked Questions
Data sourced from PhishDestroy threat intelligence database — 1,675 domains tracked for this threat type
WalletConnect Abuse 1,675 domains
![[Ekran görüntüsü] web3walletconnectsite.netlify.app](https://screenshots.phishdestroy.io/019d0d7f-5784-70a0-be9e-491011dd7c44.png){kind=small}
web3walletconnectsite.netlify.app
![[Ekran görüntüsü] xp-lido.com](https://screenshots.phishdestroy.io/019b2e21-1ae3-74e0-8080-7a4b82e7b310.png){kind=small}
xp-lido.com
![[Ekran görüntüsü] xp-steth.com](https://screenshots.phishdestroy.io/019b4266-6fd0-7429-b474-f07df93474e9.png){kind=small}
xp-steth.com
![[Ekran görüntüsü] xp-steth.org](https://screenshots.phishdestroy.io/019b6e2f-e527-772b-a2d9-320766b963f7.png){kind=small}
xp-steth.org
![[Ekran görüntüsü] xp-stether.com](https://screenshots.phishdestroy.io/019b50ef-60d6-75d8-9525-82042b40fe07.png){kind=small}
xp-stether.com
![[Ekran görüntüsü] yieldusd.net](https://screenshots.phishdestroy.io/019b80fd-5d19-7596-bd8b-af250f8d8eab.png){kind=small}
yieldusd.net
![[Ekran görüntüsü] airdrop-asterdex.io](https://screenshots.phishdestroy.io/019b2763-8677-74dc-8032-8959f6dfaa2a.png){kind=small}
airdrop-asterdex.io
![[Ekran görüntüsü] airdrop-wlfi.org](https://screenshots.phishdestroy.io/019a4e73-8e50-719a-8a1a-ec207e9c5b45.png){kind=small}
airdrop-wlfi.org
![[Ekran görüntüsü] app-ratex.org](https://screenshots.phishdestroy.io/019b4b3a-ce81-74d3-a3f3-2e9f2a6006dd.png){kind=small}
app-ratex.org
![[Ekran görüntüsü] app-renzoprotocol.network](https://screenshots.phishdestroy.io/01988f9b-30d1-767d-b368-ee9e59a9bef7.png){kind=small}
app-renzoprotocol.network
![[Ekran görüntüsü] aster-join.com](https://screenshots.phishdestroy.io/019a9271-17f8-7169-a7d1-3a16977a8a8c.png){kind=small}
aster-join.com
![[Ekran görüntüsü] authereumportal.com](https://screenshots.phishdestroy.io/019a2dc4-0a80-713d-87c8-9c10046f8db6.png){kind=small}
authereumportal.com
![[Ekran görüntüsü] avax-airdrop.click](https://screenshots.phishdestroy.io/019abb09-a822-758d-8b9c-c2ced9cc5b41.png){kind=small}
avax-airdrop.click
![[Ekran görüntüsü] berlinsystem.cfd](https://screenshots.phishdestroy.io/019aef11-f64a-700d-9fd3-f75403a5f8e3.png){kind=small}
berlinsystem.cfd
![[Ekran görüntüsü] bnb-38.cc](https://screenshots.phishdestroy.io/019b6c7a-c462-7529-a677-59c7bb434ffe.png){kind=small}
bnb-38.cc
![[Ekran görüntüsü] boostmypi.com](https://screenshots.phishdestroy.io/019b3036-49b1-7189-a3ef-d42f3f6bc1cd.png){kind=small}
boostmypi.com
![[Ekran görüntüsü] chain.link-treasurypools.app](https://screenshots.phishdestroy.io/019a9b6c-ee90-7510-aa4f-f19c9f52ef70.png){kind=small}
chain.link-treasurypools.app
![[Ekran görüntüsü] chalngpt-pad.net](https://screenshots.phishdestroy.io/019a629d-dde4-7128-bdc9-0d0ccc142563.png){kind=small}
chalngpt-pad.net
![[Ekran görüntüsü] claim-tectum.org](https://screenshots.phishdestroy.io/019adfde-e640-7563-905a-7ac130d5b9a6.png){kind=small}
claim-tectum.org
![[Ekran görüntüsü] claim-walrus.app](https://screenshots.phishdestroy.io/0199d3b6-6cae-708f-93de-9d32e0fd19c8.png){kind=small}
claim-walrus.app
![[Ekran görüntüsü] claims-snortertoken.com](https://screenshots.phishdestroy.io/019a9330-b7e4-73ce-bfc7-30e6c1e45204.png){kind=small}
claims-snortertoken.com
![[Ekran görüntüsü] crypto-francedeclaration.com](https://screenshots.phishdestroy.io/019a54af-a321-762b-beb3-5feff0bd906e.png){kind=small}
crypto-francedeclaration.com
![[Ekran görüntüsü] debridge-foundation.app](https://screenshots.phishdestroy.io/019a9ec2-4fc1-742d-81fa-1d71256afb06.png){kind=small}
debridge-foundation.app
![[Ekran görüntüsü] dextool.netlify.app](https://screenshots.phishdestroy.io/0199a6eb-b35f-7218-b6ba-6d43bc6ac773.png){kind=small}
dextool.netlify.app
![[Ekran görüntüsü] eligibility-grass.org](https://screenshots.phishdestroy.io/019adfe0-e5c8-71ca-b57b-6607a3845ddd.png){kind=small}
eligibility-grass.org
![[Ekran görüntüsü] eth-trust.org](https://screenshots.phishdestroy.io/01999f46-f8db-72f2-a967-25149b24f7dd.png){kind=small}
eth-trust.org
![[Ekran görüntüsü] ethereum-provider.icu](https://screenshots.phishdestroy.io/019a20cc-c26c-7795-b63e-6bb78ce3af4a.png){kind=small}
ethereum-provider.icu
![[Ekran görüntüsü] fcfmfy.cc](https://screenshots.phishdestroy.io/0199b226-71a5-72bf-8178-f4543ea269ff.png){kind=small}
fcfmfy.cc
![[Ekran görüntüsü] flyingtulip.finance](https://screenshots.phishdestroy.io/019a932f-6c4b-769e-8e90-5cc90edeb74e.png){kind=small}
flyingtulip.finance
![[Ekran görüntüsü] folksdrop.xyz](https://screenshots.phishdestroy.io/019a6a8f-ae8c-7142-8a8a-0081d12fdc1d.png){kind=small}
folksdrop.xyz
![[Ekran görüntüsü] gensyn-ai.app](https://screenshots.phishdestroy.io/019b4b29-0508-72bd-b8fc-3be4dfee27ff.png){kind=small}
gensyn-ai.app
![[Ekran görüntüsü] grass-network.org](https://screenshots.phishdestroy.io/019adfe0-c5fd-7624-b9cc-6ad354efd061.png){kind=small}
grass-network.org
![[Ekran görüntüsü] hydr.live](https://screenshots.phishdestroy.io/019acbc8-7ce1-7206-943f-5c8445436f9a.png){kind=small}
hydr.live
![[Ekran görüntüsü] impactxconnect.com](https://screenshots.phishdestroy.io/0198f169-1a98-728a-bb92-5aafdb8b89a3.png){kind=small}
impactxconnect.com
![[Ekran görüntüsü] join-dein.com](https://screenshots.phishdestroy.io/019a9c75-1510-74fc-918e-687603fb9a7b.png){kind=small}
join-dein.com
![[Ekran görüntüsü] layer2-chain.com](https://screenshots.phishdestroy.io/019b5bc7-8b2b-7510-8b89-f620d8b2c727.png){kind=small}
layer2-chain.com
![[Ekran görüntüsü] lineabuildscheck.com](https://screenshots.phishdestroy.io/01999d0a-51bc-73cd-b470-3e4f09be5631.png){kind=small}
lineabuildscheck.com
![[Ekran görüntüsü] lineachecklive.xyz](https://screenshots.phishdestroy.io/01999d0e-31d6-76ea-81b7-1a35d0bbe983.png){kind=small}
lineachecklive.xyz
![[Ekran görüntüsü] mask-reward.app](https://screenshots.phishdestroy.io/0199b22d-4f4c-74fe-9aaa-e36a72c0e352.png){kind=small}
mask-reward.app
![[Ekran görüntüsü] monadxdevelop.xyz](https://screenshots.phishdestroy.io/0199e569-fc41-761c-91d5-996a0eb11faa.png){kind=small}
monadxdevelop.xyz
![[Ekran görüntüsü] noox.fi](https://screenshots.phishdestroy.io/01998686-2d15-723e-8c73-88f2ad588228.png){kind=small}
noox.fi
![[Ekran görüntüsü] nooxhub.pro](https://screenshots.phishdestroy.io/0199a025-6209-7739-8b39-d4229bc43bc4.png){kind=small}
nooxhub.pro
![[Ekran görüntüsü] nooxnft.app](https://screenshots.phishdestroy.io/0199a025-6040-7305-a065-7c94d34bc887.png){kind=small}
nooxnft.app
![[Ekran görüntüsü] ozak.claims](https://screenshots.phishdestroy.io/019a9330-84b1-70f8-a179-71c9e40b3c38.png){kind=small}
ozak.claims
![[Ekran görüntüsü] pancakeswap.vip](https://screenshots.phishdestroy.io/0198f41f-5995-716f-b848-908e29206dfd.png){kind=small}
pancakeswap.vip
![[Ekran görüntüsü] pancakkeswap.com](https://screenshots.phishdestroy.io/01999239-2697-728c-906b-b56048102d92.png){kind=small}
pancakkeswap.com
![[Ekran görüntüsü] pepeunchained-sales.pages.dev](https://screenshots.phishdestroy.io/019b57d7-9300-7551-b170-c620998c26c4.png){kind=small}
pepeunchained-sales.pages.dev
![[Ekran görüntüsü] plasmagetclaim.xyz](https://screenshots.phishdestroy.io/0199d3ad-ae47-777a-b352-60ba469a009b.png){kind=small}
plasmagetclaim.xyz
![[Ekran görüntüsü] polyoptions.xyz](https://screenshots.phishdestroy.io/019ad31d-6cea-70e4-819f-32f4ef4516f2.png){kind=small}
polyoptions.xyz
![[Ekran görüntüsü] protocol-pepe.org](https://screenshots.phishdestroy.io/019c55b7-ba51-77cc-b61f-49ff332c1202.png){kind=small}
protocol-pepe.org
![[Ekran görüntüsü] register-dein.com](https://screenshots.phishdestroy.io/019a9c77-21f3-73c1-9df4-be79d559e4ff.png){kind=small}
register-dein.com
![[Ekran görüntüsü] reward-night.org](https://screenshots.phishdestroy.io/019b0975-14b8-73a6-afbd-ef6989953fe5.png){kind=small}
reward-night.org
![[Ekran görüntüsü] reward-pcpe.com](https://screenshots.phishdestroy.io/019b4266-94a7-73cc-883d-068a52faa26e.png){kind=small}
reward-pcpe.com
![[Ekran görüntüsü] rpc2-uni.com](https://screenshots.phishdestroy.io/019a72bd-b94a-758e-9d71-f26941924f4a.png){kind=small}
rpc2-uni.com
![[Ekran görüntüsü] sdhweyhashkey.top](https://screenshots.phishdestroy.io/01992f13-ce3d-74fc-9637-6ceac82d8ea5.png){kind=small}
sdhweyhashkey.top
![[Ekran görüntüsü] solanaincinerator.pro](https://screenshots.phishdestroy.io/0199dbe5-6893-72ed-a17f-7b7c199349b7.png){kind=small}
solanaincinerator.pro
![[Ekran görüntüsü] staking-ether-fi.com](https://screenshots.phishdestroy.io/019a695b-0b50-7702-b14f-0b5f3d278431.png){kind=small}
staking-ether-fi.com
![[Ekran görüntüsü] swapbytes.net](https://screenshots.phishdestroy.io/019acbc8-d31e-71ae-875c-500b16b61b66.png){kind=small}
swapbytes.net
![[Ekran görüntüsü] unlock-wallet-trust.com](https://screenshots.phishdestroy.io/019b14a2-e663-7263-a013-a74719004159.png){kind=small}
unlock-wallet-trust.com
![[Ekran görüntüsü] update-lido.net](https://screenshots.phishdestroy.io/019aa2f6-6fee-7424-9353-1c4eb9edc1e5.png){kind=small}
update-lido.net
![[Ekran görüntüsü] walletconnect--en.typedream.app](https://screenshots.phishdestroy.io/01998655-d329-748f-91a9-15eaac31876d.png){kind=small}
walletconnect--en.typedream.app
![[Ekran görüntüsü] walletconnectnodes.firebaseapp.com](https://screenshots.phishdestroy.io/019cdfc5-cb2b-77d6-9cda-427e36d87e86.png){kind=small}
walletconnectnodes.firebaseapp.com
![[Ekran görüntüsü] wlfllibertyfinancial.com](https://screenshots.phishdestroy.io/0199c65c-998f-769a-8101-73477bd6bbc1.png){kind=small}
wlfllibertyfinancial.com
![[Ekran görüntüsü] www.nexus-dex.web.id](https://screenshots.phishdestroy.io/019a8aa7-d0b0-761b-9417-4fca5836c329.png){kind=small}
www.nexus-dex.web.id
![[Ekran görüntüsü] xzxzxzxz.elysium-drainer.world](https://screenshots.phishdestroy.io/019aa2f6-9c50-75d3-9a5a-6ffa883e4c4a.png){kind=small}
xzxzxzxz.elysium-drainer.world
![[Ekran görüntüsü] yieldusd.org](https://screenshots.phishdestroy.io/019b4080-d80b-759f-ab38-5aaf5890caa7.png){kind=small}
yieldusd.org
![[Ekran görüntüsü] zorabridge.app](https://screenshots.phishdestroy.io/01988f98-6dcf-737c-808d-3c24c828d706.png){kind=small}
zorabridge.app
![[Ekran görüntüsü] amlcheck.in](https://screenshots.phishdestroy.io/01996510-4306-7340-afdc-4dffaac70575.png){kind=small}
amlcheck.in
![[Ekran görüntüsü] amltrackerbot.com](https://screenshots.phishdestroy.io/0199fb98-78ee-7575-a77d-a00b2101373d.png){kind=small}
amltrackerbot.com
![[Ekran görüntüsü] animocabrands.page](https://screenshots.phishdestroy.io/019aa2f4-ce45-744b-874d-e8508ccbf665.png){kind=small}
animocabrands.page
![[Ekran görüntüsü] app-bittensor.com](https://screenshots.phishdestroy.io/019b4b44-9d02-73aa-9531-967e6101b6b6.png){kind=small}
app-bittensor.com
![[Ekran görüntüsü] app-kyberswap.com](https://screenshots.phishdestroy.io/019932ae-3e90-7307-9827-8191b1cbb056.png){kind=small}
app-kyberswap.com
![[Ekran görüntüsü] aster-dex.run](https://screenshots.phishdestroy.io/019b0695-83f8-73a0-86c3-afa1b6636f5a.png){kind=small}
aster-dex.run
![[Ekran görüntüsü] aster-governance.com](https://screenshots.phishdestroy.io/019a89ae-6008-72b1-920b-84a34ae55a7c.png){kind=small}
aster-governance.com
![[Ekran görüntüsü] aster-register.com](https://screenshots.phishdestroy.io/019a9fe9-9384-73b7-9a50-2400d211edd3.png){kind=small}
aster-register.com
![[Ekran görüntüsü] asterdex.com-stake.id](https://screenshots.phishdestroy.io/019a285e-0afb-726c-9537-70fef75017dd.png){kind=small}
asterdex.com-stake.id
![[Ekran görüntüsü] aureumcapitall.com](https://screenshots.phishdestroy.io/019a6027-04f4-74fd-bde6-eec0ae9f6108.png){kind=small}
aureumcapitall.com
![[Ekran görüntüsü] bafybeibtcfgrhknlfhnz2c5cddfnsoje4dumrc3wsyoikx2pwuf6fbcsr4.ipfs.dweb.link](https://screenshots.phishdestroy.io/01988f9b-a9a7-75f0-8873-b04343301696.png){kind=small}
bafybeibtcfgrhknlfhnz2c5cddfnsoje4dumrc3wsyoikx2pwuf6fbcsr4.ipfs.dweb.link
![[Ekran görüntüsü] bituniswap.com](https://screenshots.phishdestroy.io/01992f94-2119-731e-8268-556dc3271fcb.png){kind=small}
bituniswap.com
![[Ekran görüntüsü] blockchainapproval.app](https://screenshots.phishdestroy.io/019a10b2-7fb6-7312-9078-641a09794d42.png){kind=small}
blockchainapproval.app
![[Ekran görüntüsü] bna77.cc](https://screenshots.phishdestroy.io/019a0f0b-9515-767d-baeb-58f38f505456.png){kind=small}
bna77.cc
![[Ekran görüntüsü] bnb-4.vip](https://screenshots.phishdestroy.io/019b6c7a-c625-760e-9754-d750b7f3754b.png){kind=small}
bnb-4.vip
![[Ekran görüntüsü] bnb-8.cc](https://screenshots.phishdestroy.io/019b95ca-532f-77ca-8fe0-a386e18abe98.png){kind=small}
bnb-8.cc
![[Ekran görüntüsü] bounce-bit.us](https://screenshots.phishdestroy.io/019abafa-c600-71bd-a907-6d79b0d7f78f.png){kind=small}
bounce-bit.us
![[Ekran görüntüsü] check-aml.net](https://screenshots.phishdestroy.io/0197ee53-b12e-731f-9d9f-73046f3bc8d4.png){kind=small}
check-aml.net
![[Ekran görüntüsü] checker-youmio.org](https://screenshots.phishdestroy.io/019b0489-1d36-729a-8ef7-c889d7f4b17a.png){kind=small}
checker-youmio.org
![[Ekran görüntüsü] claim-espressofoundation.org](https://screenshots.phishdestroy.io/019b6648-67a7-7365-88c3-5886b4f9abc8.png){kind=small}
claim-espressofoundation.org
![[Ekran görüntüsü] claim.monadairdop.xyz](https://screenshots.phishdestroy.io/019a2a70-a22d-757b-890e-6e220fe3527c.png){kind=small}
claim.monadairdop.xyz
![[Ekran görüntüsü] claims-irys.org](https://screenshots.phishdestroy.io/019adfe1-4242-774c-a5ed-40516b820cf2.png){kind=small}
claims-irys.org
![[Ekran görüntüsü] coinbase.commerce-id.net](https://screenshots.phishdestroy.io/019b43ca-1c31-7402-b5dc-27a9d4e1109a.png){kind=small}
coinbase.commerce-id.net
![[Ekran görüntüsü] copyconnection.top](https://screenshots.phishdestroy.io/019b9763-c09f-7038-8e79-62864e098920.png){kind=small}
copyconnection.top
![[Ekran görüntüsü] dappslink.com](https://screenshots.phishdestroy.io/019b1d02-23a1-718d-92a2-d5aefb46e4fb.png){kind=small}
dappslink.com
![[Ekran görüntüsü] dawgz.ai](https://screenshots.phishdestroy.io/019b8d02-759d-745f-87de-579076464e6f.png){kind=small}
dawgz.ai
![[Ekran görüntüsü] dgdg43.elysium-drainer.world](https://screenshots.phishdestroy.io/019a6027-0577-7230-af44-93c42c332e59.png){kind=small}
dgdg43.elysium-drainer.world
![[Ekran görüntüsü] dogsairdrop.live](https://screenshots.phishdestroy.io/01988f98-f007-7101-9ed7-c8e2bb57f3f5.png){kind=small}
dogsairdrop.live
![[Ekran görüntüsü] drop-brevis.network](https://screenshots.phishdestroy.io/019b86e6-ec0f-766e-815d-96a2dd3373ce.png){kind=small}
drop-brevis.network
![[Ekran görüntüsü] ebemevm.live](https://screenshots.phishdestroy.io/019a6027-0338-773e-b2f8-970a2dd40ce7.png){kind=small}
ebemevm.live
![[Ekran görüntüsü] eligibility-alloca.org](https://screenshots.phishdestroy.io/019adfe0-8edf-724c-8201-c74c0860ad00.png){kind=small}
eligibility-alloca.org
![[Ekran görüntüsü] eligibility-xpl.xyz](https://screenshots.phishdestroy.io/019a6323-e8bf-71f3-a812-5bd4c227d7c8.png){kind=small}
eligibility-xpl.xyz
Tehdit Müdahale Pipeline
Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →
Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir:
urlscan.ioEkran görüntüsü · DOM · HTTPVirusTotal90+ AV enginesGoogle Safe BrowsingTransparency RaporCloudflare RadarDNS · certs · categoriesAlienVault OTXThreat-intel pulsesWayback MachineHistorical evidenceabuse.ch ThreatFoxIOC correlationcrt.shCertificate TransparencyDNS Güvenlik FiltersQuad9 · AdGuard · CleanBrowsingWeb-Kontrol etFull surface scan
crt.shKüresel Tedarikçi Senkronizasyonu— Doğrulanmış tespitler 29 iş ortağına iletilir:
GoogleSafe BrowsingGoogleWeb Risk APIMicrosoftSmartScreenVirusTotalDetection feedCloudflareRadar / 1.1.1.1YandexSafe BrowsingURLScan.ioPublic scanESETWebGuardBitdefenderThreat exchangeNortonSafe WebSymantecSite İncelemesiAviraCloud detectionAvast / AVGWeb ShieldKasperskyOpenTIPDr.WebOnline scannerNetcraftKaldırma APIPhishTankVerified voteAPWG eCXBulk feedPhishStatsOpen feedPhish.RaporHosting abuseSpamhausDBL feedPolySwarmMarketplaceCheckPhishBolster scanQutteraMalware scanURLquerySandboxCriminal IPAsset intelCRDFThreat CenterScamadviserTrust scoreMyWOTWeb of Trust