[Warning]: Fake Arbitrum Foundation Website

[TravelMug]

What happened: Fake Arbitrum Foundation Website

Website:

Code:

https://airdrop.arbihrum.foundation/

Archived: https://archive.is/2IIpd



Official Site: (https://arbitrum.foundation/) and (https://arbitrum.io/)

Whois information:

Code:

Domain Name: arbihrum.foundation
Registry Domain ID: 4857e156b29d40f7a108803c9e8ba049-LROR
Registrar WHOIS Server: http://whois-service.virtualcloud.co
Registrar URL: http://sav.com
Updated Date: 2023-10-09T07:06:55Z
Creation Date: 2023-10-09T07:05:30Z
Registry Expiry Date: 2024-10-09T07:05:30Z
Registrar: Sav.com, LLC
Registrar IANA ID: 609
Registrar Abuse Contact Email: 
Registrar Abuse Contact Phone: +1.8885808790
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited]

As you can see, this is just a new website, and if you look at the name of the website, it has a wrong spelling as compare to the original name of the project.

Please do not connect your wallet, because once you did, it's over as this hackers are going to steal everything from you.

So I urge everyone to report it to: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en. And hopefully it will be taken down immediately to stop any crypto enthusiast to lose money to this cyber criminals.

[1714713293]

1714713293

[1714713293]

1714713293

[1714713293]

1714713293

[1714713293]

1714713293

[1714713293]

1714713293

[1714713293]

1714713293

[albon]

Website:

Code:

arbihrum[.]foundation

Official Site: (https://arbitrum.foundation/) and (https://arbitrum.io/)

So I urge everyone to report it.

The phishing domain name is "Arbihrum" instead of "Arbitrum," and this is further evidence that the scammer behind it has a lisp and difficulty with the letter "T"

Scammers try as much as possible to make the domain name close to the name of the official project domain they are targeting or identical to its template script, then they put their stupid artistic touch on it, which is a wallet connection button.

The reports and complaints we will send about this domain will be useful actions to protect potential victims, who will be targeted through Arbitrum communities.

[Yamane_Keto]

Why do these projects choose these names? Isn’t it better for the domain name to be easy for them to buy a domain like ARB.IO that redirects or anything that makes the user easily distinguish between the real website and the phishing link? I reported them, thank you.

[robelneo]

Why do these projects choose these names? Isn’t it better for the domain name to be easy for them to buy a domain like ARB.IO that redirects or anything that makes the user easily distinguish between the real website and the phishing link? I reported them, thank you.

When you're buying a domain you will not think that your domain will be targeted by phishing your primary intention in buying a domain is to brand your platform and have a unique identity online,  so we seldom see top projects domains on their initial only they want people to know what their platform is all about on their domain name.

[Dave1]

Website:

Code:

arbihrum[.]foundation

Official Site: (https://arbitrum.foundation/) and (https://arbitrum.io/)

So I urge everyone to report it.

The phishing domain name is "Arbihrum" instead of "Arbitrum," and this is further evidence that the scammer behind it has a lisp and difficulty with the letter "T"

Yes, that's already a giveaway that this is really fake, however, as smart as this criminals are, they might think that no one will notice it if ever someone will accidentally go and visit their website and thinks it's the real one.

Scammers try as much as possible to make the domain name close to the name of the official project domain they are targeting or identical to its template script, then they put their stupid artistic touch on it, which is a wallet connection button.

The reports and complaints we will send about this domain will be useful actions to protect potential victims, who will be targeted through Arbitrum communities.

Yes, and most likely they are scanning domain names that are very close to any crypto project, buy them and then starts their scamming. I already reported it and hopefully they will be removed. And again, good catch by the OP.

[Awaklara]

Yes, that's already a giveaway that this is really fake, however, as smart as this criminals are, they might think that no one will notice it if ever someone will accidentally go and visit their website and thinks it's the real one.

Scammers like this have the habit of spreading links in the crypto community or those who like to hunt for airdrops on social media. they make shared links difficult to identify. so when we click on the link we will automatically be directed to the scammer's website. If we are not careful, of course we will fall into a trap.
a slight difference in letters sometimes makes us unwary. This is what makes many airdrop hunters complain that their wallets have been hacked and the assets inside have been drained.

[TravelMug]

I've added a couple more in the list,

Code:

http://arbitrum-fouhdation.com/
http://arbitrum.nftmint-eth.com/
arbtrumweekly.com

Again, I needed others to report this scam websites as well and thanks to those who have did their part already.

And as we all know, Arbitrum is the biggest player in Ethereum’s layer 2 scaling landscape and they have a huge airdrop so obviously, it's a good target for the criminals.

[TheUltraElite]

Add in NFT and ETH to the name of the project and put up a search engine run, you are bound to get the above results that @TravelMug posted. No wonder people who are buzzing with the currently shiny things thinking them as fool's gold, run into and get scammed. Much to the delight of the scammers, these types of scams rarely get reported unless someone from the forum or somewhere else digs in deeper and tries to connect the dots.

Hence for anyone who landed on this thread through a search engine, the above sites are fake clones of a legitimate project and you should be careful which one you click on.

[yhiaali3]

Again, I needed others to report this scam websites as well and thanks to those who have did their part already.

And as we all know, Arbitrum is the biggest player in Ethereum’s layer 2 scaling landscape and they have a huge airdrop so obviously, it's a good target for the criminals.

Thank you for this good investigation, it is useful to share such information about these trolls because these have become widespread on the Internet. Especially new networks like Arbitrum and ZkSync (ZKS) that are likely to have huge airdrops.

Unfortunately many people are too lazy to do their own research before connecting their wallet to these sites, especially bounty hunters who are only interested in getting airdrops and never care about safety issues so they lose their money instead of earning airdrops.

[Jating]

Again, I needed others to report this scam websites as well and thanks to those who have did their part already.

And as we all know, Arbitrum is the biggest player in Ethereum’s layer 2 scaling landscape and they have a huge airdrop so obviously, it's a good target for the criminals.

Thank you for this good investigation, it is useful to share such information about these trolls because these have become widespread on the Internet. Especially new networks like Arbitrum and ZkSync (ZKS) that are likely to have huge airdrops.

Unfortunately many people are too lazy to do their own research before connecting their wallet to these sites, especially bounty hunters who are only interested in getting airdrops and never care about safety issues so they lose their money instead of earning airdrops.

Correct, I think one of the hottest is Arbitrum because they just had a airdrop and there are a lot of expectations that they will be big in the next coming bull run. Although the expectations is that they should be at least $1.00 by now, but it hasn't reach that price.

Nevertheless, it's good that we have this kind of warning to all, because this scammers are not going to stop just because they haven't got anyone to scammed yet. They will continue until someone got caught.

Reported it already:

Report Sent

Thanks for sending a report to Google. Now that you've done your good deed for the day, feel free to:

1. Take a second to rejoice merrily for doing your part in making the web a safer place.

2. Call/email/write to a neighbor/friend/relative and tell them what phishing is and how they can protect themselves.

3. Learn more about malware that can infect your computer on Stopbadware.org.

[ajiz138]

Phishing sites will not disappear, they will definitely come with unique but very similar domain names, of course it's good because it helps our awareness to them to stay alert and research the domain site name, now that I know that Arbitrum no longer holds airdrops, so I hope they understand that if something appears like asking to connect to a wallet then it needs to be vigilant and observant again to see it.

OP I have reported what is suggested above, hopefully this can help and close this domain soon.

[shasan]

Great catch Op. Nowadays scammers are being smarter and smarter. The site is only misled by a character. The scammer used h instead of the latter T which will make a lot of victims who are not aware of the letter which has been replaced by the scammer.