12 DeFi Domains Linked to Redirects Were Registered at Name.com

Name.com was the registrar for 12 DeFi domains connected to Friday’s redirect incident, while Blockaid flagged nine of the sites as serving Step Drainer. Each record showed a change dated Oct. 31. The domains used four DNS providers: Vercel for six, Cloudflare for two, NS1 for three and Name.com for one. Flap, Kintsu and Origami confirmed their websites were redirected. Blockaid identified nine additional sites as serving Step Drainer: stonkfun.xyz, pickle.finance, echelon.market, fluxbeam.xyz, stakepoint.app, supswap.xyz, longbow.cash, shprd.finance and apexdefi.xyz. Name.com said Saturday that domains it manages were redirected late Friday as part of a plan to access visitors’ crypto wallets.