Author

Topic: NFT collection scam site (Read 202 times)

sr. member
Activity: 1491
Merit: 320
🐪
December 30, 2024, 06:06:00 PM
#10
Found one more copy of this scam website that is still live. I wonder if these scammers will prolong the domain after January 2025. when registration of domain ends.
I expect that they will create other phishing sites after this one has been exposed. You can also report it to the domain registrar to have it taken down. Domain registrars carefully review abuse reports, and if any violation of their terms of service is proven, they will deactivate the domain. Also, why are the scammers still holding on to this NFT collection? Does it still have hype around it?

I haven't reported this one yet...
I also wonder why they still hold on NFT's , I don't think anyone take it seriously anymore. Even when NFT's are not outright scam like this one, they are still kind of scam, specially now when they sell bunch of AI generated junk images.

Phishing links have become an old game and can now be easily detected just from the wallet popup window that appears on the phishing site and through browser extensions related to security and wallet extensions. Therefore, I believe they only pose a concern for those with 0% knowledge and those who click on random links without verifying them.
Yes I hope this will help at least one newbie not to fall in the trap and lose his money. Things like this make crypto unattractive to people who don't understand tech.
legendary
Activity: 1932
Merit: 1549
December 30, 2024, 05:50:50 PM
#9
Found one more copy of this scam website that is still live. I wonder if these scammers will prolong the domain after January 2025. when registration of domain ends.
I expect that they will create other phishing sites after this one has been exposed. You can also report it to the domain registrar to have it taken down. Domain registrars carefully review abuse reports, and if any violation of their terms of service is proven, they will deactivate the domain. Also, why are the scammers still holding on to this NFT collection? Does it still have hype around it?

Phishing links have become an old game and can now be easily detected just from the wallet popup window that appears on the phishing site and through browser extensions related to security and wallet extensions. Therefore, I believe they only pose a concern for those with 0% knowledge and those who click on random links without verifying them.
sr. member
Activity: 1491
Merit: 320
🐪
December 30, 2024, 05:11:19 PM
#8
Found one more copy of this scam website that is still live. I wonder if these scammers will prolong the domain after January 2025. when registration of domain ends.

Code:
https://kyototrails.com/
https://archive.is/wip/bJdz1 Edit. Seems like link is not working

Whois lookup:
https://www.whois.com/whois/kyototrails.com
https://archive.is/wip/LZaP8

Info from hostingchecker.com:
Quote
It is hosted by: Ddos-guard LTD
WHOIS information: Click here
Organization name: Ddos-guard LLC
IP address: 185.149.120.183
AS(autonomous system) number and organization: AS57724 DDOS-GUARD LTD
AS name: DDOS-GUARD
Reverse DNS of the IP: glabinvest.com
City: Rostov-on-Don
Country: Russia
legendary
Activity: 2730
Merit: 7065
May 01, 2024, 01:50:37 AM
#6
Scammers are simply taking advantage of the current hype revolving around NFTs and those gullible enough to try and claim as many as possible. What we are seeing was expected. I could only load the achieve for the Fowun airdrop scam, but my guess is that the rest is similar. Complete garbage, of course.

You got to love the NFT counter that keeps rising every second. The scammers are trying to trick people into believing there is great demand, so hurry up and send us your money and connect your wallets. Every time you refresh the page, the counter goes down to 3859/5000. Cheesy

Don't believe in fake money fairy tales and you'll be safe.
sr. member
Activity: 1491
Merit: 320
🐪
April 25, 2024, 12:10:42 PM
#5
Merely looking at the same pattern of airdrops on multiple sites, anyone who is vigilant enough could identify it as a scam airdrop, in which the scammer might either be interested in the traffic that the airdrop can generate or to penetrate the victim's wallet when they try to claim whatever they offer them.
 

We should all be vigilant, specially newbies who do not have experience to recognize what is scam and what is not. I believe this scam is not set up to generate traffic because there are no ads on that site. I also didn't want to connect wallet and risk the funds.


It could have been nice if you could also drop-link to some of those telegram channels where these scam airdrops are being promoted. 

There is one thing I noticed recently on some of these telegram channels: it seems like they use one channel with a lot of subscribers and followers to promote a particular scam project.
 

It was not particular channel that this scam was promoted on. It was in comments on various channels and o some moderators deleted it soon after posting. On non moderated channels there are probably still comments with links to those websites .

legendary
Activity: 3934
Merit: 1061
April 25, 2024, 03:02:35 AM
#4
In last few months I found one scam that seem to me is going for some time.

The scammers are active on Telegram where they dropped a link for claiming NFT airdrop.

This seemed fishy to me, so I started to investigate further and found out that there are many more versions of this "airdrop" webpage. Some versions are inactive by now.

On the first look the project seems legit, but there are just too many versions of the same airdrop for it to be legitimate. Also the most webpages have hidden owners on whois and those that have not hidden owners gave some random gibberish inputted for owners and e-mail.

Some of sites are down for sometime so I found them on archive.org and I am putting them for the record.

If you will check the websites better click on archived version because it is safer.

The list goes:

https://qaqo.io/
https://archive.is/pxnwF

https://tenc.io/
https://archive.is/hbU0b

https://xibu.io
https://archive.is/wip/MLdvg

https://fowun.com/
https://web.archive.org/web/20240318165011/https://fowun.com/

https://fluf-world.net/
https://archive.is/wip/hTS1v

https://unpfa.com/
https://archive.is/wip/XixWJ

https://www.claimfluff.com
https://web.archive.org/web/20231216223608/https://www.claimfluff.com/

https://gewem.com/
https://archive.is/wip/NQisy

https://mewot.com/
https://archive.is/wip/9XRIs

https://brak.io/
https://archive.is/wip/Ec22z

https://fupo.io
https://archive.is/wip/G7fRJ

https://flufs.io
https://archive.is/wip/EyXvg

https://fluff.top
https://web.archive.org/web/20231031112616/http://www.fluff.top/

https://xuzu.io/
https://archive.is/wip/izLRp


Judging on the size of this potential scam, there are almost certainly more of these sites. If you find any you can add it in this thread so we can have updated list.

Edit. For some reason some of archived links do not work. There are enough evidence even with the links that remained.

Telegram is really bad for fake airdrops that are dangerous to click. NFT and crypto.
legendary
Activity: 1932
Merit: 1549
April 24, 2024, 03:28:03 PM
#3
There is one thing I noticed recently on some of these telegram channels: it seems like they use one channel with a lot of subscribers and followers to promote a particular scam project.
The first thing someone who recently joined the channel looks at is the number of subscribers, reducing his suspicions. Naturally, scammers use various methods to increase the number of subscribers to these channels by a few dollars, and this is not only on Telegram but on any social media account. After the scam succeeds through one of the projects or phishing airdrops, the scammer will erase the trace of the fraud behind him and create a new project or a new phishing link for the NFTs collection to continue his theft.

I am unsurprised by the long list of phishing links to the NFTs collection that the scammers have created and which the OP mentioned. Scammers now target all projects and promote their phishing schemes, even through Telegram ads. It is worth noting that installing ScamSniffer or any of the fraud detection extensions to the browser can significantly reduce the scam rate if someone clicks directly on the phishing link without researching it.
hero member
Activity: 798
Merit: 702
April 24, 2024, 02:42:48 PM
#2
Merely looking at the same pattern of airdrops on multiple sites, anyone who is vigilant enough could identify it as a scam airdrop, in which the scammer might either be interested in the traffic that the airdrop can generate or to penetrate the victim's wallet when they try to claim whatever they offer them.
 
It could have been nice if you could also drop-link to some of those telegram channels where these scam airdrops are being promoted. 
 
There is one thing I noticed recently on some of these telegram channels: it seems like they use one channel with a lot of subscribers and followers to promote a particular scam project.
 
When that one has been frowned upon as being a scam, they change the name of the channel or group to a new one, if the group is not yet blocked. 
sr. member
Activity: 1491
Merit: 320
🐪
April 24, 2024, 01:53:08 PM
#1
In last few months I found one scam that seem to me is going for some time.

The scammers are active on Telegram where they dropped a link for claiming NFT airdrop.

This seemed fishy to me, so I started to investigate further and found out that there are many more versions of this "airdrop" webpage. Some versions are inactive by now.

On the first look the project seems legit, but there are just too many versions of the same airdrop for it to be legitimate. Also the most webpages have hidden owners on whois and those that have not hidden owners gave some random gibberish inputted for owners and e-mail.

Some of sites are down for sometime so I found them on archive.org and I am putting them for the record.

If you will check the websites better click on archived version because it is safer.

The list goes:

https://qaqo.io/
https://archive.is/pxnwF

https://tenc.io/
https://archive.is/hbU0b

https://xibu.io
https://archive.is/wip/MLdvg

https://fowun.com/
https://web.archive.org/web/20240318165011/https://fowun.com/

https://fluf-world.net/
https://archive.is/wip/hTS1v

https://unpfa.com/
https://archive.is/wip/XixWJ

https://www.claimfluff.com
https://web.archive.org/web/20231216223608/https://www.claimfluff.com/

https://gewem.com/
https://archive.is/wip/NQisy

https://mewot.com/
https://archive.is/wip/9XRIs

https://brak.io/
https://archive.is/wip/Ec22z

https://fupo.io
https://archive.is/wip/G7fRJ

https://flufs.io
https://archive.is/wip/EyXvg

https://fluff.top
https://web.archive.org/web/20231031112616/http://www.fluff.top/

https://xuzu.io/
https://archive.is/wip/izLRp


Judging on the size of this potential scam, there are almost certainly more of these sites. If you find any you can add it in this thread so we can have updated list.

Edit. For some reason some of archived links do not work. There are enough evidence even with the links that remained.
Jump to: