connectwallet[.]live

connectwallet.live is a high-risk domain flagged for impersonating WalletConnect. The domain was created on March 12, 2026, and has been taken offline as of the report date, July 25, 2026. Analysis indicates that the domain appears on three security blocklists, namely PhishDestroy, MetaMask, and SEAL. The domain resolves to the IP address 35.157.26.135, which is located in the United States and is associated with Amazon.com, Inc. (AS14618).

The SSL certificate for the domain is issued by Let's Encrypt. The HTTP status code is 200, indicating that the server was responsive when the domain was active. The page title found is 'WalletConnect,' which supports the impersonation claim. The domain is registered through Name.com, Inc., and uses several modern web technologies, including Node.js, React, Next.js, Netlify, HSTS, and Webpack, suggesting a sophisticated setup.

VirusTotal has flagged this domain with 11 of 94 security vendors, which further corroborates the high-risk nature of the domain. Defenders are advised to block and monitor this domain to prevent potential crypto scam attempts, and to educate users about the risks of visiting unverified websites that claim to be related to WalletConnect. The exact content and functionality of the site have not been analyzed, but given the high risk and impersonation of a well-known brand, it is prudent to assume malicious intent and take preventive measures.