xyz-app-v4-wallet-connect[.]com

The domain xyz-app-v4-wallet-connect.com is a phishing site engaged in brand impersonation targeting WalletConnect, a cryptocurrency wallet connection service. It poses an elevated risk by mimicking legitimate WalletConnect interfaces to deceive users into disclosing sensitive information or authorizing fraudulent transactions. As of the latest verification, xyz-app-v4-wallet-connect.com has been taken offline, though it previously operated as an active scam site.

Technical indicators confirm the malicious nature of xyz-app-v4-wallet-connect.com. The domain was flagged by 2 of 95 VirusTotal security vendors, including ADMINUSLabs and Kaspersky, and appears on 1 security blocklist (PhishDestroy). Registered through Key-Systems GmbH on July 30, 2025, it resolved to the IP address 54.38.220.85, hosted by OVH SAS in Germany (AS16276). No SSL certificate was issued, and the observed page title was 'Contact Verification Suspension Page'. The domain used nameservers ns1.emailverification.info and ns2.emailverification.info, further indicating its fraudulent intent.

Users who interacted with xyz-app-v4-wallet-connect.com should immediately revoke any token approvals granted to unknown or suspicious contracts using tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet and monitor transaction history for unauthorized activity. Change passwords for any accounts linked to the phishing site and enable two-factor authentication (2FA) where available. Report the domain to WalletConnect’s official security team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to prevent further victimization.