İzlenen etki alanlarını arayın ve kaydedilmiş kanıtları, tespitleri ve en son gözlemlenen erişilebilirlik durumunu inceleyin.

209,359

Toplam Takip Edilen

VT Algılandı

73,838

En Son Görüldü: Aktif

135,521

Son kontrolde erişilemiyordu

VT Beklemede

YÜKSEK THREAT

Understanding and Combating WalletConnect Abuse

WalletConnect Abuse represents a significant threat, with 1,667 domains detected and 555 currently active. PhishDestroy has identified top TLDs including .com, .app, and .xyz, and leading registrars such as NICENIC INTERNATIONAL GROUP CO., LIMITED.

1,675

Alan adları Detected

YÜKSEK

Threat Level

How This Attack Works

WalletConnect Abuse involves deceptive tactics to exploit users of cryptocurrency platforms. Understanding these steps can help in prevention.

STEP 1

Creation of Fake Alan adları

Attackers create fake domains that mimic legitimate cryptocurrency platforms to lure victims.

STEP 2

Deployment of Phishing Pages

Phishing pages are set up on these domains to capture user credentials and wallet information.

STEP 3

Execution of Malicious Code

JavaScript and other scripting languages are used to execute malicious code that intercepts user data.

STEP 4

Unauthorized Transactions

Stolen credentials are used to authorize transactions, draining victims’ wallets.

Technical Analysis

WalletConnect Abuse often involves the creation of phishing sites that mimic popular cryptocurrency service providers. Attackers use sophisticated scripts to manipulate the WalletConnect protocol, intercepting the authentication process. This includes the use of JavaScript to capture private keys and signatures when users attempt to connect their wallets. Infrastructure-wise, attackers frequently utilize content delivery networks like Cloudflare to host phishing sites, taking advantage of high availability and speed. Additionally, smart contracts are sometimes manipulated to automatically approve transactions that transfer funds to the attacker’s address without the victim's explicit consent.

Real Cases

The Opensea Phishing Incident (2024)

$2 million stolen

A phishing campaign targeting Opensea users resulted in significant financial losses and credential theft.

Vercel App Scam (2023)

$1.5 million stolen

Attackers used fake Vercel app domains to trick users into revealing wallet information, leading to unauthorized access.

Marketplace-Art Fraud (2024)

$3 million stolen

Fraudulent marketplace-art domains were used to deceive users into connecting their wallets, resulting in asset theft.

How to Detect

Unfamiliar domain names mimicking legitimate services

Requests for private keys or seed phrases

Unexpected transaction requests

Poor website design or misspellings

Limited or no HTTPS security

How to Protect Yourself

1 Always verify domain authenticity

2 Enable two-factor authentication

3 Use hardware wallets for transactions

4 Regularly update security software

5 Educate yourself on common phishing tactics

Frequently Asked Questions

What is WalletConnect Abuse?

WalletConnect Abuse involves exploiting the WalletConnect protocol to trick users into revealing their cryptocurrency wallet credentials through phishing tactics.

How much money has been stolen through WalletConnect Abuse?

To date, WalletConnect Abuse has resulted in millions of dollars in losses, with specific incidents causing damages ranging from $1.5 million to $3 million.

How do I protect myself from WalletConnect Abuse?

Verify domain authenticity, use two-factor authentication, and employ hardware wallets for added security against phishing attacks.

What should I do if I'm a victim of WalletConnect Abuse?

Rapor the incident to your wallet provider, change passwords immediately, and contact local authorities or a cybersecurity expert for assistance.

Data sourced from PhishDestroy threat intelligence database — 1,675 domains tracked for this threat type

Wallet Connect Abuse — Threat Intelligence Protocol Abuse Etkin Threat

walletconnect.com (official)

1,675

Alan adları

423

Alive

1,243

Kaldırıldı

7.7

Avg VT

25.3%

Hayatta Kalma Oranı

96%

Detected

Since Mar 2024 1,010 VT değeri 5 veya daha büyük olan alanlar

WalletConnect Abuse 1,675 domains

10 VTBilinmiyorcoinbase

10 VTBilinmiyormetamask

[Ekran görüntüsü] login-ai-deus.pages.dev

manyushlba.com

10 VTBilinmiyor

metamask-snap-polkadot.pages.dev

10 VTEtkinMetaMask

metamask-snap-polkadot.pages.dev

mining1104.94bm.com

10 VTBilinmiyorfoundation

official-brevis.network

10 VTBilinmiyorWalletConnect

opensea-eo4.pages.dev

10 VTBilinmiyorOpenSea

opensea-eo4.pages.dev

opensea-n7n.pages.dev

10 VTBilinmiyorOpenSea

opensea-n7n.pages.dev

optnexus-pc.nexiorwa.com

10 VTBilinmiyorWalletConnect

optnexus-pc.nexiorwa.com

pan-wallet-v3.app

10 VTEtkinacross

pan-wallet-v3.app

pancakeswapairdrop.com

10 VTBilinmiyorPancakeSwap

pancakeswapairdrop.com

pepeobtain.com

10 VTBilinmiyorCoinbase

pepeobtain.com

pepestake.org

10 VTBilinmiyorcoingecko

pepestake.org

pmlcoin.app

10 VTEtkinWalletConnect

10 VTBilinmiyorUnknown

reward-snortertoken.com

10 VTBilinmiyordextools

reward-snortertoken.com

rewards-lighter.xyz

10 VTBilinmiyorbase

rewards-lighter.xyz

serve.giveaway-pepe.net

10 VTBilinmiyorcoingecko

serve.giveaway-pepe.net

smartprotocolfix.web.app

10 VTBilinmiyor["across"]

smartprotocolfix.web.app

sol-gets.xyz

10 VTBilinmiyorSolana

sol-gets.xyz

swap-jupag-v4.com

10 VTBilinmiyorjupiter

swap-jupag-v4.com

swiftrectifyrequestprompt.pages.dev

10 VTEtkinacross

swiftrectifyrequestprompt.pages.dev

10 VTBilinmiyorUniswap

walletanalytics.netlify.app

10 VTEtkinUnknown

walletanalytics.netlify.app

webchainresolver.web.app

10 VTBilinmiyorWalletConnect

webchainresolver.web.app

ybribe.com

10 VTBilinmiyorcompound

9 VTBilinmiyorethereum

5eth.top

aethircloud-proposal.net

9 VTBilinmiyordiscord

aethircloud-proposal.net

airdrop-hyperliquids.xyz

9 VTBilinmiyoraave

airdrop-hyperliquids.xyz

airdrop-lighter.sbs

9 VTBilinmiyorbase

airdrop-lighter.sbs

airdrops-pendle.finance

9 VTBilinmiyorPendle

airdrops-pendle.finance

amlpremium.top

9 VTBilinmiyortelegram

amlpremium.top

app-jupiter-swap.org

9 VTBilinmiyorJupiter

app-jupiter-swap.org

app.templefi.net

9 VTBilinmiyorarbitrum

app.templefi.net

app.u.niswap.exchange

9 VTBilinmiyorUniswap

app.u.niswap.exchange

base-blockchain.vercel.app

9 VTEtkinbase

base-blockchain.vercel.app

bcsolver-bmu6nihnxs.edgeone.dev

9 VTBilinmiyoracross

bcsolver-bmu6nihnxs.edgeone.dev

9 VTBilinmiyordiscord

9 VTBilinmiyorbackpack

9 VTBilinmiyorcompound

claim-omnera.xyz

claim-talus.org

9 VTBilinmiyorWalletConnect

claim-talus.org

claim.jupiter-dex.net

9 VTBilinmiyorJupiter

claim.jupiter-dex.net

connect-layer3.com

9 VTBilinmiyorEthereum

cryptogiveaways.netlify.app

9 VTEtkinBinance

cryptogiveaways.netlify.app

defi-dappp.vercel.app

9 VTEtkinBinance

defi-dappp.vercel.app

9 VTBilinmiyorarbitrum

gift-uni.org

giveaway-pepe.net

9 VTBilinmiyorcoingecko

giveaway-pepe.net

gwarc-biaaa-aaaak-akwua-cai.icp0.io

9 VTEtkinacross

gwarc-biaaa-aaaak-akwua-cai.icp0.io

9 VTBilinmiyorBinance

minionsonbnb.com

multilivesync.firebaseapp.com

9 VTBilinmiyorWalletConnect

multilivesync.firebaseapp.com

multilivesync.web.app

9 VTBilinmiyorWalletConnect

multilivesync.web.app

neuuihahhashkey.top

9 VTBilinmiyorEthereum

opensea-408.pages.dev

9 VTBilinmiyorOpenSea

opensea-408.pages.dev

opensea-iba2.pages.dev

9 VTBilinmiyorOpenSea

opensea-iba2.pages.dev

9 VTBilinmiyorbitfinex

plasmalive.xyz

proposal-aethircloud.votings.workers.dev

9 VTBilinmiyorWalletConnect

proposal-aethircloud.votings.workers.dev

proposals-maplefi.com

9 VTBilinmiyoracross

proposals-maplefi.com

smartsolvedefi.web.app

9 VTBilinmiyorUnknown

smartsolvedefi.web.app

sol-flairy.vercel.app

9 VTEtkinEthereum

sol-flairy.vercel.app

stake-binance-us.com

9 VTEtkinBinance

stake-binance-us.com

stake-validator2027.tech

9 VTBilinmiyortrust wallet

stake-validator2027.tech

starcheckcrypto.com

9 VTBilinmiyorEthereum

starcheckcrypto.com

starknet-governancne.com

9 VTBilinmiyorStarknet

starknet-governancne.com

wallet-connect-embed-example.web.app

9 VTBilinmiyorWalletConnect

wallet-connect-embed-example.web.app

walletconnect-final-test-airdrop.web3-openhub.com

9 VTEtkinWalletConnect

walletconnect-final-test-airdrop.web3-openhub.com

walletconnectgate.com

9 VTBilinmiyorWalletConnect

walletconnectgate.com

web3walletconnect.online

9 VTBilinmiyorWalletConnect

web3walletconnect.online

worldlibertyfinancial-airdrops.com

9 VTBilinmiyornear

worldlibertyfinancial-airdrops.com

www-berachains.vote

9 VTBilinmiyorberachain

www-berachains.vote

www.app-jupiter-swap.org

9 VTBilinmiyorJupiter

www.app-jupiter-swap.org

« Önceki 4 5 6 7 8 9 10 Sonraki » Sayfa 7 ...'nin 17

Tehdit Müdahale Pipeline

Bu merkezde yer alan her bir alan adının nasıl doğrulandığı ve teyit edilmiş tehditlerin nasıl etkisiz hale getirildiği. Boru hattının tam görselleştirilmesi →

Tehdit İstihbaratı Kontroller— her alan adı taranır ve aşağıdakilerle karşılaştırılarak kontrol edilir: