multidapplaunchpad[.]app

The domain multidapplaunchpad.app has been identified as a crypto drainer phishing site, designed to illicitly drain cryptocurrency assets from targeted users. Analysis indicates the domain is currently offline, though prior activity suggests it was actively deployed to exploit users interacting with decentralized finance (DeFi) platforms. No specific brand impersonation was confirmed, but the domain’s naming convention and infrastructure align with known crypto drainer campaigns targeting wallet connections and transaction approvals. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Name.com, Inc., and resolves to the IP address 64.29.17.65, hosted within the Amazon.com, Inc. autonomous system (AS16509) in the United States. Security vendors have flagged the domain, with 18 of 95 VirusTotal engines detecting malicious activity, and it appears on four security blocklists, including PhishDestroy and Polkadot. The SSL certificate, issued by Let’s Encrypt (R13), is consistent with short-lived certificates commonly used in phishing operations. The page title, 'Deployment Unavailable,' suggests the site may have been temporarily disabled or taken offline following detection. Current status indicates the domain is inactive, though the underlying infrastructure remains a potential threat vector. Organizations and users are advised to block the domain and associated IP address at the network level. Monitoring for re-registration or similar domains using the same naming pattern is recommended. Wallet providers and DeFi platforms should alert users to avoid interacting with domains exhibiting these indicators, particularly those soliciting wallet connections or transaction approvals. Proactive threat intelligence sharing and continuous monitoring of related infrastructure are critical to mitigating further risks.