dapp-trustepads[.]xyz

PhishDestroy identifies dapp-trustepads.xyz as an active crypto drainer scam impersonating TrustPad, a legitimate launchpad platform. The domain employs deceptive tactics to trick users into connecting their wallets and signing malicious transactions that drain cryptocurrency funds. Security researchers have observed drainer kits integrated into the site's frontend, including fake wallet connection prompts and transaction simulation overlays designed to steal private keys and approval signatures. This domain exhibits multiple red flags confirmed by forensic analysis. VirusTotal currently shows a clean score of 5/95 detections despite active malicious activity, highlighting evasion techniques. The domain was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on May 14, 2026, and resolves to IP address 172.67.220.148. Google Safe Browsing has already flagged this domain, and it appears on 1 active security blocklist. The SSL certificate issued by Let's Encrypt provides no security guarantee, as malicious actors frequently exploit free certificates to appear legitimate. The scam remains active with high-risk potential due to its recent creation and minimal detection by security engines. MetaMask has already taken proactive measures by blocking wallet connections to this domain. PhishDestroy recommends immediate avoidance and verification of any TrustPad-related links through official channels. While current mitigation efforts show promise, the domain's recent registration date suggests potential expansion of operations. Users should exercise extreme caution with any TrustPad-related communications and verify all URLs against official sources before engaging.