wallet----connect[.]web[.]app

The domain wallet----connect.web.app has been identified as an elevated-risk brand impersonation threat targeting the WalletConnect brand. This domain was registered through Google LLC (Firebase) on February 21, 2026, and was recently taken offline, as of the report date of July 25, 2026. Infrastructure analysis reveals that the domain resolves to the IPv6 address 2620:0:890::100, which is located in the United States and is associated with AS54113 Fastly, Inc. The domain's SSL certificate is issued by Google Trust Services, indicating the use of Firebase services for hosting and security.

The HTTP status of the domain is 404, suggesting that the content has been removed or the website is no longer active. However, the domain still appears on seven security blocklists and is actively blocked by security tools such as PhishDestroy, MetaMask, ScamSniffer, Polkadot, and SEAL. These tools flag the domain as a crypto scam, which aligns with the brand impersonation of WalletConnect.

The exact content of the page is not yet analyzed, but the title 'Wallet Connect' further supports the impersonation attempt. Defenders should be aware of this domain and ensure that it is blocked in their security systems to prevent potential user exposure to the associated scam. Additionally, users should be educated to verify the authenticity of WalletConnect-related domains and to avoid following links from untrusted sources.