allnodesolution[.]com

allnodesolution[.]com is a confirmed phishing domain engaged in brand impersonation, specifically targeting users of the WalletConnect service. The domain posed as a legitimate WalletConnect interface to steal login credentials or sensitive wallet information. As of the latest assessment, the site has been taken offline, but the threat remains elevated due to its association with a high-value target. No drainer kit was identified, indicating the attack focused on credential harvesting rather than automated token theft.

Technical indicators confirm the malicious nature of allnodesolution[.]com. VirusTotal flagged it with 1 detection out of 95 vendors, including G-Data, while Google Safe Browsing did not flag it. The domain was registered through HOSTINGER operations, UAB, on August 9, 2025, and resolves to the IPv6 address 2a02:4780:44:a242:bed2:ac15:e55a:29f0, hosted in Germany (AS47583 Hostinger International Limited). It appears on 5 security blocklists, including PhishDestroy, ScamSniffer, and Polkadot, and has no SSL certificate. The observed page title was 'WalletConnect,' and its nameservers were NS1.DNS-PARKING.COM and NS2.DNS-PARKING.COM.

Users who may have interacted with allnodesolution[.]com should take immediate safety steps. Since this is a credential-login phishing attack, change any passwords used on the fraudulent site and enable two-factor authentication on all associated accounts. Monitor financial accounts for unauthorized activity and report the domain to relevant authorities such as the Anti-Phishing Working Group or your email provider. If any wallet connection was attempted, revoke token approvals and move funds to a new, secure wallet as a precaution.