İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

209,359

Toplam Takip Edilen

VT Algılandı

73,838

En Son Görüldü: Aktif

135,521

Son kontrolde erişilemiyordu

VT Beklemede

YÜKSEK THREAT

Understanding and Combating WalletConnect Abuse

WalletConnect Abuse represents a significant threat, with 1,667 domains detected and 555 currently active. PhishDestroy has identified top TLDs including .com, .app, and .xyz, and leading registrars such as NICENIC INTERNATIONAL GROUP CO., LIMITED.

1,675

Alan adları Detected

YÜKSEK

Threat Level

How This Attack Works

WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.

STEP 1

Creation of Fake Alan adları

Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.

STEP 2

Deployment of Phishing Pages

Phishing pages are set up on these domains to capture user credentials and wallet information.

STEP 3

Execution of Malicious Code

JavaScript and other scripting languages are used to execute malicious code that intercepts user data.

STEP 4

Unauthorized Transactions

Stolen credentials are used to authorize transactions, draining victims’ wallets.

Technical Analysis

WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.

Real Cases

The Opensea Phishing Incident (2024)

$2 million stolen

A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.

Vercel App Scam (2023)

$1.5 million stolen

Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.

Marketplace-Art Fraud (2024)

$3 million stolen

Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.

How to Detect

Unfamiliar domain names mimicking legitimate services

Requests for private keys or seed phrases

Unexpected transaction requests

Poor website design or misspellings

Limited or no HTTPS security

How to Protect Yourself

1 Always verify domain authenticity

2 Enable two-factor authentication

3 Use hardware wallets for transactions

4 Regularly update security software

5 Educate yourself on common phishing tactics

Frequently Asked Questions

What is WalletConnect Abuse?

WalletConnect Abuse involves exploiting the WalletConnect protocol to trick users into revealing their cryptocurrency wallet credentials through phishing tactics.

How much money has been stolen through WalletConnect Abuse?

To date, WalletConnect Abuse has resulted in millions of dollars in losses, with specific incidents causing damages ranging from $1.5 million to $3 million.

How do I protect myself from WalletConnect Abuse?

Verify domain authenticity, use two-factor authentication, and employ hardware wallets for added security against phishing attacks.

What should I do if I'm a victim of WalletConnect Abuse?

Rapor the incident to your wallet provider, change passwords immediately, and contact local authorities or a cybersecurity expert for assistance.

Data sourced from PhishDestroy threat intelligence database — 1,675 domains tracked for this threat type

Wallet Connect Abuse — Threat Intelligence Protocol Abuse Etkin Threat

walletconnect.com (official)

1,675

Alan adları

423

Alive

1,243

Kaldırıldı

7.7

Avg VT

25.3%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,010 VT değeri 5 veya daha büyük olan alanlar

WalletConnect Abuse 1,675 domains

11 VTBilinmiyorWalletConnect

hyperappy.com

hyperliquid.com-dex-secure-auth-beta.ltd

11 VTEtkinCoinbase

hyperliquid.com-dex-secure-auth-beta.ltd

hyperliquid.com-service-alpha-auth-app.pro

11 VTEtkinCoinbase

hyperliquid.com-service-alpha-auth-app.pro

kinetiqs-market.xyz

11 VTBilinmiyordiscord

kinetiqs-market.xyz

lab-airdrop.xyz

11 VTEtkinWalletConnect

lab-airdrop.xyz

lhyperfndl.com

11 VTBilinmiyorHyperliquid

11 VTBilinmiyoracross

link-tree.xyz

linkdao-defi-user.pages.dev

11 VTBilinmiyorgenericcloudflare

linkdao-defi-user.pages.dev

live-humanity.org

11 VTEtkinacross

live-humanity.org

live-hyperxliquid.xyz

11 VTBilinmiyorHyperliquid

live-hyperxliquid.xyz

magafinance.info

11 VTBilinmiyorcoinbase

11 VTBilinmiyorUnknown

11 VTEtkinWalletConnect

moon088.an239.com

nooxdao.com

11 VTBilinmiyorEthereum

nooxdao.com

opensea-dez.pages.dev

11 VTBilinmiyorOpenSea

opensea-dez.pages.dev

opensea-login.netlify.app

11 VTBilinmiyorOpenSea

opensea-login.netlify.app

origin-trails.app

11 VTBilinmiyoracross

origin-trails.app

pancake-bridge.pages.dev

11 VTBilinmiyoracross

pancake-bridge.pages.dev

pass-ligther.xyz

11 VTBilinmiyorbase

pass-ligther.xyz

pepusunchained.votings.workers.dev

11 VTEtkinUnknown

pepusunchained.votings.workers.dev

plasmaxplclaimer.xyz

11 VTBilinmiyorEthereum

plasmaxplclaimer.xyz

protocol-yieldusd.net

11 VTBilinmiyoraave

protocol-yieldusd.net

11 VTBilinmiyorWalletConnect

schainnowww.pages.dev

11 VTEtkinEthereum

schainnowww.pages.dev

shshshsh.after-drainer.sbs

11 VTBilinmiyordiscord

shshshsh.after-drainer.sbs

solana-incinerator.pro

11 VTBilinmiyorSolana

solana-incinerator.pro

solcard-cc.netlify.app

11 VTBilinmiyorWalletConnect

solcard-cc.netlify.app

solget.fun

11 VTBilinmiyoracross

solget.fun

soniclabs.vote

11 VTBilinmiyorWalletConnect

soniclabs.vote

sub.verifywalletconnect.com

11 VTBilinmiyorWalletConnect

sub.verifywalletconnect.com

superformfoundations.org

11 VTBilinmiyorUnknown

superformfoundations.org

tesnetmonad.xyz

11 VTBilinmiyordiscord

11 VTBilinmiyorWalletConnect

ttzqiv.top

twt-trustwallet.com

11 VTEtkinTrustWallet

twt-trustwallet.com

uai.wasegem.com

11 VTBilinmiyormetamask

11 VTBilinmiyorethereum

11 VTEtkinBlockchain.com

vaultblockchain.ink

votes-trovemarkets.pages.dev

11 VTEtkinWalletConnect

votes-trovemarkets.pages.dev

voting-punksauction.com

11 VTBilinmiyorWalletConnect

voting-punksauction.com

walletconnectadmins.com

11 VTBilinmiyorWalletConnect

walletconnectrpc.web.app

11 VTBilinmiyorWalletConnect

walletconnectrpc.web.app

wasegem.com

11 VTBilinmiyor

wasegem.com

web-git-develop.pancake.run

11 VTEtkinPancakeSwap

web-git-develop.pancake.run

11 VTBilinmiyordexscreener

wlfimemecoin.com

www.blockchaincheck.us

11 VTBilinmiyorBlockchain.com

www.blockchaincheck.us

www.hypertliquid.com

11 VTBilinmiyoracross

www.hypertliquid.com

www.kyberswap-com.exchange

11 VTEtkinacross

www.kyberswap-com.exchange

zenafex.com

11 VTEtkinMicrosoft

zenafex.com

activate.pcrairdrop.com

10 VTBilinmiyor

activate.pcrairdrop.com

airdrop-plasma.top

10 VTBilinmiyor

airdrop-plasma.top

airdrops-soniclabs.org

10 VTBilinmiyor

airdrops-soniclabs.org

aml-tracker.info

10 VTBilinmiyorlinkedin

aml-tracker.info

amlchebot.app

10 VTBilinmiyorlinkedin

amlchebot.app

amlforte.pro

10 VTBilinmiyorarbitrum

amlforte.pro

app-pudgypenguins.xyz

10 VTBilinmiyorsolana

app-pudgypenguins.xyz

app.wasegem.com

10 VTBilinmiyorsolana

app.wasegem.com

appondo.xyz

10 VTBilinmiyorWalletConnect

appondo.xyz

asterdexlive.xyz

10 VTBilinmiyorbnb chain

asterdexlive.xyz

ath.fail

10 VTBilinmiyorbnb chain

ath.fail

audit-usdt.net

10 VTBilinmiyorlinkedin

audit-usdt.net

av-defi.top

10 VTBilinmiyorgenericcrypto

av-defi.top

bimodal-oxeliteoriginator.web.app

10 VTBilinmiyorWalletConnect

bimodal-oxeliteoriginator.web.app

bnb.connectweb3c.io

10 VTBilinmiyorbinance

bnb.connectweb3c.io

bob-mainnet-ncwjobm32-distributed-crafts.vercel.app

10 VTEtkinacross

bob-mainnet-ncwjobm32-distributed-crafts.vercel.app

bob-sepolia-5r3ytp9gg-distributed-crafts.vercel.app

10 VTBilinmiyoracross

bob-sepolia-5r3ytp9gg-distributed-crafts.vercel.app

bob-sepolia-gbxuamav0-distributed-crafts.vercel.app

10 VTBilinmiyoracross

bob-sepolia-gbxuamav0-distributed-crafts.vercel.app

borroefinance-ai.web.app

10 VTBilinmiyorethereum

borroefinance-ai.web.app

campaundfenence.org

10 VTBilinmiyorchainlink

campaundfenence.org

cdn.giveaway-pepe.net

10 VTBilinmiyorcoingecko

cdn.giveaway-pepe.net

checker-eul.xyz

10 VTBilinmiyordiscord

10 VTBilinmiyorEthereum

10 VTBilinmiyoracross

cloud-one.co

coinbase-react.vercel.app

10 VTBilinmiyoramazon

coinbase-react.vercel.app

croc.finance

10 VTEtkindiscord

croc.finance

cryptoriskscanner.com

10 VTBilinmiyorcsgo

cryptoriskscanner.com

czasters-allocations.xyz

10 VTBilinmiyor

czasters-allocations.xyz

danawhitememe.com

10 VTEtkinfoundation

danawhitememe.com

defire-solutions.pages.dev

10 VTBilinmiyorWalletConnect

defire-solutions.pages.dev

dex-eth.xyz

10 VTBilinmiyorWalletConnect

dex-eth.xyz

dex-support-desk.netlify.app

10 VTBilinmiyorWalletConnect

dex-support-desk.netlify.app

eth-burner.xyz

10 VTBilinmiyorEthereum

10 VTBilinmiyoracross

10 VTBilinmiyordiscord

j-dex-v1.app

jumper.exposed

10 VTBilinmiyorWalletConnect

ktaliveclaim.xyz

10 VTBilinmiyoracross

ktaliveclaim.xyz

« Önceki 3 4 5 6 7 8 9 Sonraki » Sayfa 6 ...'nin 17

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: