app-loopscale[.]com

PhishDestroy identifies app-loopscale.com as a newly uncovered crypto drainer domain designed to trick users into connecting crypto wallets and authorize unauthorized token transfers. The site mimics a legitimate service portal to harvest wallet credentials and drain digital assets without victims noticing until it is too late. Security researchers first observed this domain on April 21, 2026, suggesting a recent and rapidly evolving campaign targeting cryptocurrency users across multiple regions. While the domain currently shows zero detections on VirusTotal (5/95 engines), its active status and use of a Let’s Encrypt SSL certificate indicate ongoing operational deployment. This domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.96.3, a hosting infrastructure associated with multiple low-trust online services. The combination of a freshly created domain, lack of detection, and transparent SSL usage highlights an advanced tactic where threat actors prioritize speed and stealth to bypass traditional security filters. Independent analysis confirms that no major antivirus or threat intelligence platform has yet classified this domain as malicious, making it especially perilous for unsuspecting users. If you visited app-loopscale.com, immediately disconnect your wallet from any connected dApps, revoke any unauthorized permissions via your wallet’s settings, and transfer remaining funds to a new, isolated wallet. Scan all connected devices for infostealers or malware, and consider reporting the domain to PhishDestroy or your local cybersecurity authority. Never re-enter credentials or approve transactions on untrusted sites, and always verify URLs through official channels before interacting.