aborean-checker[.]world

Analysis of the domain aborean-checker.world confirms its classification as an active brand-impersonation phishing site targeting WalletConnect users. Registered on October 8, 2025, through Web Commerce Communications Limited, the domain currently resolves to the IP address 91.92.242.155. Detection metrics indicate widespread recognition of its malicious nature, with 13 out of 95 security vendors on VirusTotal flagging the domain as harmful. Additionally, the domain appears on three security blocklists and has been documented in 24 threat intelligence pulses on AlienVault OTX, suggesting persistent monitoring by the security community. The page title, Aborean Finance, does not directly reference WalletConnect but aligns with the broader pattern of cryptocurrency-related phishing schemes. While the exact content and functionality of the site remain unanalyzed, the domain’s association with WalletConnect impersonation is well-documented. Gridinsoft assigns the domain a trust score of 0 out of 100, further corroborating its high-risk status. The domain’s creation date, nearly nine months prior to this report, indicates it has been operational for an extended period, increasing the likelihood of sustained malicious activity. Defenders should prioritize blocking this domain at the network level, particularly in environments where WalletConnect or cryptocurrency-related services are utilized. The IP address 91.92.242.155 may serve as an additional indicator of compromise for threat hunting purposes. Given the domain’s presence on multiple blocklists and its detection by security vendors, organizations are advised to treat any interaction with aborean-checker.world as a potential security incident. Further investigation into the hosting infrastructure and associated domains may reveal additional components of this phishing campaign.