🕵️ At OFFZONE, I’ll be presenting my talk:

People Behind the Interfaces: Tracking Reused Wallet Flows Across Web3 Scam Sites

Web3 scam websites constantly change their domains, names, branding, and visual design. But underneath, they often reuse the same infrastructure and logic: frontend components, wallet connection flows, approval sequences, and transaction-building mechanisms.

In this talk, I’ll show how preserved JavaScript bundles and other frontend artifacts can be analyzed even after a scam website has been blocked or taken offline.

We’ll look at how to:

compare wallet UX and transaction flows across different scam websites;
identify reused frontend components and behavioral patterns;
connect interface-level findings with lightweight on-chain verification;
cluster related campaigns and build detections for threat hunting.

The main idea is simple: scam websites should not be treated as isolated pages. Their interfaces are reusable technical artifacts that can reveal the infrastructure, tools, and potentially the people behind multiple campaigns.

See you at OFFZONE 👾