İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

209,359

Toplam Takip Edilen

VT Algılandı

73,838

En Son Görüldü: Aktif

135,521

Son kontrolde erişilemiyordu

VT Beklemede

YÜKSEK THREAT

Understanding and Combating WalletConnect Abuse

WalletConnect Abuse represents a significant threat, with 1,667 domains detected and 555 currently active. PhishDestroy has identified top TLDs including .com, .app, and .xyz, and leading registrars such as NICENIC INTERNATIONAL GROUP CO., LIMITED.

1,675

Alan adları Detected

YÜKSEK

Threat Level

How This Attack Works

WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.

STEP 1

Creation of Fake Alan adları

Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.

STEP 2

Deployment of Phishing Pages

Phishing pages are set up on these domains to capture user credentials and wallet information.

STEP 3

Execution of Malicious Code

JavaScript and other scripting languages are used to execute malicious code that intercepts user data.

STEP 4

Unauthorized Transactions

Stolen credentials are used to authorize transactions, draining victims’ wallets.

Technical Analysis

WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.

Real Cases

The Opensea Phishing Incident (2024)

$2 million stolen

A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.

Vercel App Scam (2023)

$1.5 million stolen

Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.

Marketplace-Art Fraud (2024)

$3 million stolen

Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.

How to Detect

Unfamiliar domain names mimicking legitimate services

Requests for private keys or seed phrases

Unexpected transaction requests

Poor website design or misspellings

Limited or no HTTPS security

How to Protect Yourself

1 Always verify domain authenticity

2 Enable two-factor authentication

3 Use hardware wallets for transactions

4 Regularly update security software

5 Educate yourself on common phishing tactics

Frequently Asked Questions

What is WalletConnect Abuse?

WalletConnect Abuse involves exploiting the WalletConnect protocol to trick users into revealing their cryptocurrency wallet credentials through phishing tactics.

How much money has been stolen through WalletConnect Abuse?

To date, WalletConnect Abuse has resulted in millions of dollars in losses, with specific incidents causing damages ranging from $1.5 million to $3 million.

How do I protect myself from WalletConnect Abuse?

Verify domain authenticity, use two-factor authentication, and employ hardware wallets for added security against phishing attacks.

What should I do if I'm a victim of WalletConnect Abuse?

Rapor the incident to your wallet provider, change passwords immediately, and contact local authorities or a cybersecurity expert for assistance.

Data sourced from PhishDestroy threat intelligence database — 1,675 domains tracked for this threat type

Wallet Connect Abuse — Threat Intelligence Protocol Abuse Etkin Threat

walletconnect.com (official)

1,675

Alan adları

423

Alive

1,243

Kaldırıldı

7.7

Avg VT

25.3%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,010 VT değeri 5 veya daha büyük olan alanlar

WalletConnect Abuse 1,675 domains

12 VTEtkinWalletConnect

frrvfe.cc

giveaway-blaze.net

12 VTBilinmiyoracross

giveaway-blaze.net

grouped-service-display.shmonad-frontend-dapp.pages.dev

12 VTBilinmiyorWalletConnect

grouped-service-display.shmonad-frontend-dapp.pages.dev

hananetwork.app

12 VTBilinmiyorWalletConnect

hananetwork.app

hyperliquid.com-api-gateway-beta-wallets-v4.pro

12 VTBilinmiyorcoinbase

hyperliquid.com-api-gateway-beta-wallets-v4.pro

hyperunit.vc

12 VTEtkingenericcrypto

hyperunit.vc

jameswins-allocations.xyz

12 VTBilinmiyorWalletConnect

jameswins-allocations.xyz

lighterlit.com

12 VTEtkinWalletConnect

12 VTBilinmiyormorpho

12 VTBilinmiyorsolana

luxedrop.pro

mainnetmonad.io

12 VTBilinmiyordiscord

mainnetmonad.io

mantra-dex.ink

12 VTBilinmiyorWalletConnect

mantra-dex.ink

megaeth-refund.xyz

12 VTEtkinWalletConnect

megaeth-refund.xyz

metamask-supported.pages.dev

12 VTBilinmiyorMetaMask

metamask-supported.pages.dev

micdrop-market.io

12 VTBilinmiyoracross

micdrop-market.io

monad-testnet.icu

12 VTBilinmiyordiscord

12 VTBilinmiyoracross

multicoinprotoco.app

noox.global

12 VTBilinmiyorEthereum

oracle-eligibility.com

12 VTBilinmiyorbase

oracle-eligibility.com

pan-swaps.pro

12 VTBilinmiyoracross

pan-swaps.pro

pancakeswap.xn--financeswap-0t4j.0x4e15361fd6b4bb609fa63c81a2be19d873717870.link

12 VTBilinmiyorPancakeSwap

pancakeswap.xn--financeswap-0t4j.0x4e15361fd6b4bb609fa63c81a2be19d873717870.link

12 VTBilinmiyoracross

paxosgift.com

perceptron-network.xyz

12 VTBilinmiyoracross

perceptron-network.xyz

12 VTBilinmiyorbitfinex

plasmachecks.com

polysniper.fun

12 VTBilinmiyorWalletConnect

polysniper.fun

pub-d2815d99eef1471eb19512b2562cb1f8.r2.dev

12 VTBilinmiyorDappRadar

pub-d2815d99eef1471eb19512b2562cb1f8.r2.dev

12 VTBilinmiyorphantom

12 VTBilinmiyorSolana

sol-claims.com

sundaeswap.org

12 VTBilinmiyorWalletConnect

sundaeswap.org

techlayer3.com

12 VTBilinmiyorethereum

12 VTBilinmiyorarbitrum

tornado-cash.co

trendsfun-git-feature-new-12-api-takoprotocol.vercel.app

12 VTBilinmiyorallbridge

trendsfun-git-feature-new-12-api-takoprotocol.vercel.app

u103.ucdc2233.xyz

12 VTBilinmiyorWalletConnect

uniswap-airdrop.pages.dev

12 VTBilinmiyorUniswap

uniswap-airdrop.pages.dev

usdtoffers.com

12 VTEtkinblast

usdtoffers.com

vote-hyprstr.votings.workers.dev

12 VTEtkindebridge

vote-hyprstr.votings.workers.dev

walletconnector.cc

12 VTBilinmiyorWalletConnect

12 VTBilinmiyorbinance

wlfecoclaim.com

worldlibertyficlaim.xyz

12 VTBilinmiyorlinkedin

worldlibertyficlaim.xyz

wormhole.today

12 VTEtkinArbitrum

wormhole.today

www.blockchainlegacy.io

12 VTBilinmiyorBlockchain.com

www.blockchainlegacy.io

www.lawsgrouponline.com

12 VTEtkinacross

www.lawsgrouponline.com

www.walletconnect-support.duckdns.org

12 VTEtkinWalletConnect

www.xmaquina-verify.com

12 VTEtkinWalletConnect

www.xmaquina-verify.com

xplclaimlive.xyz

12 VTBilinmiyorEthereum

xplclaimlive.xyz

y5ppo-6aaaa-aaaal-ajzmq-cai.icp0.io

12 VTEtkinWalletConnect

y5ppo-6aaaa-aaaal-ajzmq-cai.icp0.io

yields-basis.com

12 VTBilinmiyorGoogle

12 VTBilinmiyorcoinbase

yqiiai.pages.dev

zcoinlab.com

12 VTBilinmiyorphantom

zcoinlab.com

aboreon.finance

11 VTBilinmiyorWalletConnect

aboreon.finance

access-asterdex.com

11 VTBilinmiyoracross

11 VTBilinmiyorbnb chain

asterdex-s2.com

bimodal-oxeliteoriginator.firebaseapp.com

11 VTBilinmiyor["across"]

bimodal-oxeliteoriginator.firebaseapp.com

blockchaindapp.site

11 VTBilinmiyorBlockchain.com

blockchaindapp.site

bnb6844.com

11 VTBilinmiyorargent

bob-mainnet-37o0si2us-distributed-crafts.vercel.app

11 VTEtkinacross

bob-mainnet-37o0si2us-distributed-crafts.vercel.app

bob-mainnet-5i9u3edtb-distributed-crafts.vercel.app

11 VTEtkinacross

bob-mainnet-5i9u3edtb-distributed-crafts.vercel.app

bridge.usduc.io

11 VTEtkinEthereum

bridge.usduc.io

cbc-auth-demo.quboid.app

11 VTEtkingoogle

cbc-auth-demo.quboid.app

centralchain-elitebridge.firebaseapp.com

11 VTBilinmiyorgenericcrypto

centralchain-elitebridge.firebaseapp.com

chain-validation.pages.dev

11 VTBilinmiyoracross

chain-validation.pages.dev

claim-airdrop-5mm.pages.dev

11 VTEtkindiscord

claim-airdrop-5mm.pages.dev

11 VTBilinmiyorWalletConnect

claimairdropfree.biz

eligibility-cysic.org

11 VTBilinmiyorUnknown

eligibility-cysic.org

eligibility-humidifi.org

11 VTBilinmiyoracross

eligibility-humidifi.org

eligibility-ofc.app

11 VTBilinmiyoracross

eligibility-ofc.app

eligibility-stable.org

11 VTBilinmiyoracross

eligibility-stable.org

eth-mining-global.top

11 VTEtkinUnknown

eth-mining-global.top

ether-fi-verification.com

11 VTEtkinEtherFi

ether-fi-verification.com

fcgffd.cc

11 VTEtkinWalletConnect

11 VTEtkinWalletConnect

fpmifp.cc

fprcfo.cc

11 VTEtkinWalletConnect

fprcfo.cc

fukzfb.cc

11 VTEtkinWalletConnect

fukzfb.cc

helpful-chebakia-c5e223.netlify.app

11 VTEtkinEthereum

helpful-chebakia-c5e223.netlify.app

hoimesai.xyz

11 VTBilinmiyorWalletConnect

hoimesai.xyz

« Önceki 2 3 4 5 6 7 8 Sonraki » Sayfa 5 ...'nin 17

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: