dappadar[.]to

The domain dappadar.to was a phishing site engaged in brand impersonation targeting Namecheap users, classified as a DeFi scam. It posed an elevated risk by mimicking legitimate services to deceive victims into disclosing sensitive information or interacting with fraudulent decentralized finance platforms. No crypto drainer kit was identified, and the site is currently taken offline.

Technical indicators confirm dappadar.to was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. The domain was registered through NameCheap, Inc. on 2025-06-22 02:27:06 and resolved to the IP address 91.195.240.19, hosted in Germany under AS47846 SEDO GmbH. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by GoDaddy.com, Inc. via the Go Daddy Secure Certificate Authority - G2. The observed page title was 'dappadar.to - dappadar Recursos e Informações.' Technologies detected included Node.js, Envoy, Express, HSTS, and Akamai. Google Safe Browsing did not flag the domain at the time of analysis.

Individuals who interacted with dappadar.to should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet to mitigate potential losses. If credentials were entered, change passwords for all associated accounts, enable two-factor authentication, and monitor for unauthorized transactions or account activity. Report the phishing domain to Namecheap’s abuse team, file a complaint with the Internet Crime Complaint Center (IC3), and submit the URL to Google Safe Browsing and additional blocklists to prevent further victimization.