[Warning]: Scam/Phishing Avalaunch Website

[TravelMug]

What Happened: Scam/Phishing Avalaunch Website

Website:

Code:

https://air-drop.at/

Archived: https://web.archive.org/web/20231021120758/https://air-drop.at/

Whois Information:

Code:

Dates	Updated on 2023-10-17	  
Name Servers	NS1.VERCEL-DNS.COM (has 134,370 domains)
NS2.VERCEL-DNS.COM (has 134,370 domains)
  
IP Address	76.76.21.98 - 39,533 other sites hosted on this server
  
IP Location	United States - California - Walnut - Vercel Inc
ASN	United States AS16509 AMAZON-02, US (registered May 04, 2000)
IP History	2 changes on 2 unique IP addresses over 0 years	  
Hosting History	1 change on 2 unique name servers over 0 year	  
Whois Record ( last updated on 2023-10-21 )
domain:         air-drop.at
registrar:      Registrar.eu ( https://nic.at/registrar/648 )
registrant:     <data not disclosed>
tech-c:         <data not disclosed>
nserver:        ns1.vercel-dns.com
nserver:        ns2.vercel-dns.com
changed:        20231017 11:18:11
source:         AT-DOM

So there's the red flag here, newly created websites just like the rest of the scam sites.

And then they copy the UI of the real website here: https://avalaunch.app/

This serves another warning for everyone.

[hugeblack]

Individual efforts to track phishing links will be futile. These scammers have armies of these sites and are ready to buy templates for their devices and prepare hundreds of sites daily, so focusing on how to verify these sites and teaching beginners how to avoid them is best.

I began to notice that a significant percentage of scam topics on this board were linked to phishing links.

[Baofeng]

Individual efforts to track phishing links will be futile. These scammers have armies of these sites and are ready to buy templates for their devices and prepare hundreds of sites daily, so focusing on how to verify these sites and teaching beginners how to avoid them is best.

I don't think it will be futile, and that's why there are a lot of hunters in this community to give warning to everyone. Of course, it's going to be a cat and mouse game, but everyone should involved themselves to at least reports this sites, we do our part and hope that no one will fall for the trap.

I began to notice that a significant percentage of scam topics on this board were linked to phishing links.

As you have said, they are like an armies of scammers in crypto industry and as we approach next year which is considered to be a bullish year, scammers are going to ramp up their activities so we should be very watchful and be critical that not every websites is safe.

[robelneo]

Individual efforts to track phishing links will be futile. These scammers have armies of these sites and are ready to buy templates for their devices and prepare hundreds of sites daily, so focusing on how to verify these sites and teaching beginners how to avoid them is best.

Most of these phishing sites have unpopular domain extensions because on popular domain registrars, you can buy bulk domains at a very cheap price, especially on their anniversary sale, there are domain registrars that have extensions that offer $2 or even lower

I began to notice that a significant percentage of scam topics on this board were linked to phishing links.

The creators are developers and coders and it's easy for them because it's an automated smart contract script, all the victim will do is connect their wallet and they can employ their scheme, it's very easy for them and these hackers' scheme thrives on victims' ignorance.

[albon]

Most of these phishing sites have unpopular domain extensions because on popular domain registrars, you can buy bulk domains at a very cheap price, especially on their anniversary sale, there are domain registrars that have extensions that offer $2 or even lower

The creators are developers and coders and it's easy for them because it's an automated smart contract script, all the victim will do is connect their wallet and they can employ their scheme, it's very easy for them and these hackers' scheme thrives on victims' ignorance.

This means that for around $50, these scammers can create dozens of domains and place their script for the automated smart contract on an HTML template that mimics the basic interface of the original domain for any project or platform. They promote their poor tricks on social media in the hope of trapping a victim with limited experience. And they steal and deplete his wallet assets, which will compensate them for the few dollars it costs them to create their phishing sites.

So, the solution, as mentioned by Hugeblack, is to educate beginners through information and advice adequately. If the protective measures are firmly embedded in their minds, they will be able to avoid any phishing websites they encounter. This is because there are countless phishing sites that cannot be counted.

[robelneo]

Most of these phishing sites have unpopular domain extensions because on popular domain registrars, you can buy bulk domains at a very cheap price, especially on their anniversary sale, there are domain registrars that have extensions that offer $2 or even lower

The creators are developers and coders and it's easy for them because it's an automated smart contract script, all the victim will do is connect their wallet and they can employ their scheme, it's very easy for them and these hackers' scheme thrives on victims' ignorance.

This means that for around $50, these scammers can create dozens of domains and place their script for the automated smart contract on an HTML template that mimics the basic interface of the original domain for any project or platform. They promote their poor tricks on social media in the hope of trapping a victim with limited experience. And they steal and deplete his wallet assets, which will compensate them for the few dollars it costs them to create their phishing sites.

Without naming the domain registrar as I don't want to give hackers and scammers a tip, you can buy a domain extension for as little as $2, so yes $50 will give you not only a dozen but more than 2 dozen new domains It is not .com or TLD top-level domain but still popular domain extensions.

            

So, the solution, as mentioned by Hugeblack, is to educate beginners through information and advice adequately. If the protective measures are firmly embedded in their minds, they will be able to avoid any phishing websites they encounter. This is because there are countless phishing sites that cannot be counted.

That's the best solution, scammers will always scam and hackers will always scam so we should not stop educating people on how to stop these scammers and hackers, they keep innovating so we should always expose their schemes.

[cryptoaddictchie]

So there's the red flag here, newly created websites just like the rest of the scam sites.

And then they copy the UI of the real website here: https://avalaunch.app/

This serves another warning for everyone.

Thats bit tricky. Good thing I bookedmarked the real website of avalaunch since I am an investor and user of it. Since the bull run I always used them for new launchpad and now that they are quiet Im not been able to use their platform but thanks for sharing in case I am still active to their project might ignore this and noted these sites.

[shasan]

The redirected link has already been marked by the metamask so the user might not be able to take any more funds from foolish people.

We can stay away from this type of phishing site. If we care:
#Not to post any private key
# Double-check the redirected site
# check the spelling of the site multiple time
# google the name of the site
#not to post anything like a seed, email, username password, etc on any non-valid/non trusted site. And many more like this.

[TheUltraElite]

Similar templates have been used by scammers and since there is no policing of the net, side-effect of free speech, we have similar looking site pop up to fool a unsuspecting newbie. Obviously this is profitable for the scammers because the buying price for a number of domains and the profit from scamming even a single newbie breaks even and crosses it as well. Hence their motivation to continue to scam from their own pocket. It is likened to an investment.

Although the above site will get reported by many of the forum members here, another hydra head will come up. That should not deter us from getting weary and keep spreading the word about such scams.

[Jating]

Similar templates have been used by scammers and since there is no policing of the net, side-effect of free speech, we have similar looking site pop up to fool a unsuspecting newbie. Obviously this is profitable for the scammers because the buying price for a number of domains and the profit from scamming even a single newbie breaks even and crosses it as well. Hence their motivation to continue to scam from their own pocket. It is likened to an investment.

Although the above site will get reported by many of the forum members here, another hydra head will come up. That should not deter us from getting weary and keep spreading the word about such scams.

Yeah, it's true, sometimes you really think what is the side-effect of this freedom that we got, if someone will question it, for sure it's going to backfire on that person because they will say that he doesn't want freedom.

Now scammers in the web are taking advantage of it, just have this template ready, contact a domain registar and buy a similar looking domain name and roll out their scams, easy as 1-2-3. And then just wait for newbies who found out this side to fall for this trick and losses all his crypto once he connect his wallet.

But it's good that it has been flag down already. But for sure there will be more to discover.

[Dunamisx]

Having such experience like this will still brought us back to discussing on what we do online, where we visit online, I've learnt that people like wandering around without having a course or bearing on which direction they are heading to or on what precisely they want, if we are also to look at the situation of things now, there are several attempts that makes us easily get attracted to some of these scam site especially when we are not on the look of such, they have recruited alot of means to use as their weapons on their target victims.

[yhiaali3]

Unfortunately, these suspicious sites have become very common in the recent period, especially phishing sites that rely on imitating popular sites with some minor differences in the spelling of the site name.

Another unfortunate thing is that most victims rely on the Google search to reach these sites, while in reality, phishers use simple CEO tricks to make their fake site appear in the first search results, which makes victims easily fall into the trap.

So it is better not to avoid using Google search to access these sites.

[salad daging]

Unfortunately, these suspicious sites have become very common in the recent period, especially phishing sites that rely on imitating popular sites with some minor differences in the spelling of the site name.

Another unfortunate thing is that most victims rely on the Google search to reach these sites, while in reality, phishers use simple CEO tricks to make their fake site appear in the first search results, which makes victims easily fall into the trap.

So it is better not to avoid using Google search to access these sites.

Actually, phishing sites have been around for a long time but they have never disappeared even though they have been reported a lot, I don't know if they have a script so that they can create many specific domains with slightly similar spelling site names.

Google search is not a safe way to access the original site, as you said scammers have managed to master SEO so it is easy to enter google search with the first phishing site, so it's better to just type if you want to enter a particular crypto site rather than google search people don't know will get stuck there and lead to phishing sites.

Sometimes people are lazy to avoid searching on Google and there are still many of them choosing there to find something they need.