walletconnectt[.]blogspot[.]com

The domain walletconnectt.blogspot.com is a phishing site engaged in brand impersonation, specifically targeting Facebook users. It presents itself as a legitimate WalletConnect service but is designed to deceive victims into disclosing login credentials or other sensitive information through social media scams. No crypto drainer kit was detected, and the site is currently taken offline, though its prior activity poses a residual risk to users who may have interacted with it.

Technical indicators confirm the elevated risk level of walletconnectt.blogspot.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and Netcraft, and appears on 1 security blocklist (PhishDestroy). It is registered through GOOGLE (ASN: 15169) and resolves to the IPv6 address 2a00:1450:4001:81d::2001, hosted by Google LLC in Germany. The SSL certificate is issued by Google Trust Services / WE2, and the observed page title was 'WalletConnect'. Technologies detected include Blogger, Java, Python, OpenGSE, Clipboard.js, and HTTP/3. No creation date or nameserver information is available.

Users who visited walletconnectt.blogspot.com should immediately change their Facebook passwords and enable two-factor authentication to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized posts or messages, and report any fraudulent transactions. Victims can report the phishing domain to Google Safe Browsing, their local cybercrime unit, or platforms like PhishTank to aid in takedown efforts. If financial or personal data was compromised, consider contacting relevant institutions to secure accounts.