İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

209,359

Toplam Takip Edilen

VT Algılandı

73,838

En Son Görüldü: Aktif

135,521

Son kontrolde erişilemiyordu

VT Beklemede

YÜKSEK THREAT

Understanding and Combating WalletConnect Abuse

WalletConnect Abuse represents a significant threat, with 1,667 domains detected and 555 currently active. PhishDestroy has identified top TLDs including .com, .app, and .xyz, and leading registrars such as NICENIC INTERNATIONAL GROUP CO., LIMITED.

1,675

Alan adları Detected

YÜKSEK

Threat Level

How This Attack Works

WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.

STEP 1

Creation of Fake Alan adları

Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.

STEP 2

Deployment of Phishing Pages

Phishing pages are set up on these domains to capture user credentials and wallet information.

STEP 3

Execution of Malicious Code

JavaScript and other scripting languages are used to execute malicious code that intercepts user data.

STEP 4

Unauthorized Transactions

Stolen credentials are used to authorize transactions, draining victims’ wallets.

Technical Analysis

WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.

Real Cases

The Opensea Phishing Incident (2024)

$2 million stolen

A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.

Vercel App Scam (2023)

$1.5 million stolen

Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.

Marketplace-Art Fraud (2024)

$3 million stolen

Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.

How to Detect

Unfamiliar domain names mimicking legitimate services

Requests for private keys or seed phrases

Unexpected transaction requests

Poor website design or misspellings

Limited or no HTTPS security

How to Protect Yourself

1 Always verify domain authenticity

2 Enable two-factor authentication

3 Use hardware wallets for transactions

4 Regularly update security software

5 Educate yourself on common phishing tactics

Frequently Asked Questions

What is WalletConnect Abuse?

WalletConnect Abuse involves exploiting the WalletConnect protocol to trick users into revealing their cryptocurrency wallet credentials through phishing tactics.

How much money has been stolen through WalletConnect Abuse?

To date, WalletConnect Abuse has resulted in millions of dollars in losses, with specific incidents causing damages ranging from $1.5 million to $3 million.

How do I protect myself from WalletConnect Abuse?

Verify domain authenticity, use two-factor authentication, and employ hardware wallets for added security against phishing attacks.

What should I do if I'm a victim of WalletConnect Abuse?

Rapor the incident to your wallet provider, change passwords immediately, and contact local authorities or a cybersecurity expert for assistance.

Data sourced from PhishDestroy threat intelligence database — 1,675 domains tracked for this threat type

Wallet Connect Abuse — Threat Intelligence Protocol Abuse Etkin Threat

walletconnect.com (official)

1,675

Alan adları

423

Alive

1,243

Kaldırıldı

7.7

Avg VT

25.3%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,010 VT değeri 5 veya daha büyük olan alanlar

WalletConnect Abuse 1,675 domains

hyperliquids-airdrop.org

13 VTBilinmiyoraave

hyperliquids-airdrop.org

jxswtc.com

13 VTBilinmiyorethereum

jxswtc.com

lasttest.elysium-drainer.world

13 VTEtkingenericcrypto

lasttest.elysium-drainer.world

linea.corefoundation.xyz

13 VTBilinmiyorLinea

linea.corefoundation.xyz

13 VTBilinmiyorWalletConnect

13 VTBilinmiyorEthereum

nooxnft.space

pancakeswapcakepad.finance

13 VTBilinmiyorPancakeSwap

pancakeswapcakepad.finance

panswap.pro

13 VTBilinmiyoracross

13 VTBilinmiyorbitfinex

plasmachainlive.com

plasmaoneth.com

13 VTBilinmiyorEthereum

plasmaoneth.com

polymarket-trade.xyz

13 VTEtkinCloudflare

porlfolio-melamask.app

13 VTBilinmiyordiscord

porlfolio-melamask.app

proposal-yieldfi.votings.workers.dev

13 VTBilinmiyoraave

proposal-yieldfi.votings.workers.dev

13 VTBilinmiyorWalletConnect

[Ekran görüntüsü] register-cysicfoundation.org

13 VTBilinmiyorWalletConnect

reward-ethena.finance

13 VTBilinmiyor

reward-ethena.finance

13 VTBilinmiyorWalletConnect

rubery.fun

secured-file-manager.com

13 VTBilinmiyorbnb chain

secured-file-manager.com

shardssoniclabs.online

13 VTBilinmiyorWalletConnect

shardssoniclabs.online

shiba-app.org

13 VTBilinmiyorbinance

shiba-app.org

soniclabs-network.web.app

13 VTEtkinEthereum

soniclabs-network.web.app

stage.degengames.fun

13 VTEtkinchase

stage.degengames.fun

stake-lido.vercel.app

13 VTEtkinLido

stake-lido.vercel.app

stake-nanoeth.net

13 VTBilinmiyoracross

stake-nanoeth.net

stlink.world

13 VTBilinmiyorchainlink

stlink.world

tetimons.click

13 VTBilinmiyorfoundation

13 VTBilinmiyorOpenSea

13 VTEtkinWalletConnect

13 VTBilinmiyorgenericcrypto

usdt-verif.net

virtual-vote.app

13 VTBilinmiyorcoingecko

virtual-vote.app

web3.pancake.run

13 VTEtkinPancakeSwap

web3.pancake.run

xplecosystem.xyz

13 VTBilinmiyorEthereum

xplecosystem.xyz

xwalletconnect.com

13 VTEtkinWalletConnect

xwalletconnect.com

xz12312333.elysium-drainer.world

13 VTEtkincsgo

xz12312333.elysium-drainer.world

yieldusd-dashboard.net

13 VTBilinmiyoraave

yieldusd-dashboard.net

zi.danloaded.com

13 VTEtkinfoundation

zi.danloaded.com

0g-foundiation-claim.netlify.app

12 VTBilinmiyorWalletConnect

0g-foundiation-claim.netlify.app

12 VTBilinmiyorargent

209494.com

3bxnlej.icu

12 VTBilinmiyorPancakeSwap

12 VTBilinmiyorgenericcrypto

aavdefi.top

airdropmmt.finance

12 VTBilinmiyorWalletConnect

airdropmmt.finance

aisdhostingrefund.pages.dev

12 VTBilinmiyordiscord

aisdhostingrefund.pages.dev

12 VTBilinmiyorAMLBot

12 VTBilinmiyorarbitrum

app.templefinance.io

app.un.iswap.cam

12 VTBilinmiyoruniswap

app.un.iswap.cam

app.usdclmp.com

12 VTBilinmiyorEthereum

app.usdclmp.com

app.xn--unswap-4va.org

12 VTBilinmiyorUniswap

app.xn--unswap-4va.org

asdasdas.elysium-drainer.world

12 VTEtkincsgo

asdasdas.elysium-drainer.world

aster-drops.netlify.app

12 VTEtkindiscord

aster-drops.netlify.app

asterdiex.com

12 VTBilinmiyoracross

asterdiex.com

avvvdefi.top

12 VTBilinmiyorgenericcrypto

avvvdefi.top

award-yieldusd.org

12 VTBilinmiyorgenericcrypto

award-yieldusd.org

best-wallettoken.com

12 VTBilinmiyoracross

best-wallettoken.com

blaze-giveawaay.net

12 VTBilinmiyoracross

blaze-giveawaay.net

bob-sepolia-a9kyey7hq-distributed-crafts.vercel.app

12 VTBilinmiyoracross

bob-sepolia-a9kyey7hq-distributed-crafts.vercel.app

buycoin.sbs

12 VTBilinmiyoraerodrome

buycoin.sbs

centralchain-elitebridge.web.app

12 VTBilinmiyorgenericcrypto

centralchain-elitebridge.web.app

check-morpho.app

12 VTBilinmiyormorpho

check-morpho.app

checker-aml.org

12 VTBilinmiyorlinkedin

checker-aml.org

cifr121.com

12 VTBilinmiyortrust wallet

12 VTBilinmiyorUnknown

12 VTBilinmiyor["across"]

claim-perceptron.xyz

claim-ravedao.org

12 VTBilinmiyorUnknown

12 VTBilinmiyorWalletConnect

claim-vooi.org

claim-wet.org

12 VTBilinmiyoracross

claim-wet.org

claim.esqresso.foundation

12 VTEtkinUnknown

claim.esqresso.foundation

claims-doublezero.app

12 VTBilinmiyorceler

claims-doublezero.app

connectcopy.top

12 VTEtkinacross

connectcopy.top

dasdas.elysium-drainer.world

12 VTEtkinWalletConnect

dasdas.elysium-drainer.world

distribution-etc.com

12 VTBilinmiyoracross

distribution-etc.com

dlsperese.xyz

12 VTBilinmiyorcoinbase

dlsperese.xyz

dropmonadspro.xyz

12 VTBilinmiyordiscord

12 VTEtkinWalletConnect

fcboft.cc

« Önceki 1 2 3 4 5 6 7 Sonraki » Sayfa 4 ...'nin 17

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: