Fake “Kamino Swap” Phishing Website Promoted

[albon]

What happened:: This user posted a phishing link to a new swap platform that is only one day old. What stands out is that they used the name of the well-known platform Kamino Swap, while the embedded link redirects to a different phishing website. These scammers wait for someone to ask about a swap platform, then recommend a “popular” swap or exchange with a fake embedded link.. AAnyone can easily verify this by right-clicking on the text and selecting "Copy link address" to see that the link has no connection to the official Kamino platform.

I use it myself and recommend it to everyone.
Swap with the best price execution on Solana
Swap Kamino

Scammers Profile Link: https://bitcointalk.org/index.php?action=profile;u=3740840

Reference Link: [1] - [2] - [3]

The phishing website link: tonair[.]fun

Domain Name: TONAIR.FUN
Registrar:   Registrar Of Domain Names Reg.ru, LLC IANA ID 1606
Status: clientTransferProhibited, ServerTransferProhibited, ADDPERIOD
Creation Date: December 22, 2025 (1 day ago)
Update Date: December 23, 2025 (8 hours ago)
Expiration Date:   December 22, 2026
Age: 1 day
Source: https://www.domainiq.com/domain?tonair.fun#/whois

Additional Notes: I do not recommend using any automated trading tools, especially on Solana. If we look at the official website that this phishing site is impersonating, SOLSniper[.]com ^[Trustpilot], we will also see that its reviews are extremely poor, and some users have accused it of being a scam and a waste of money.

[SFR10]

If we look at the official website that this phishing site is impersonating, SOLSniper[.]com ^[Trustpilot], we will also see that its reviews are extremely poor, and some users have accused it of being a scam and a waste of money.

So basically, a scammer is trying to impersonate another scammer ^{[they can't get any lower than that (SMH)]}. I thought using a plagiarism checking tool would be easy on it, but it turned out to be the opposite ^{[somehow those scammers managed to make the text appear normal, but if you try to copy it somewhere, every single letter is going to be on a separate line, so I had to manually type those sentences]}... Luckily, it was worth the effort, because it led to their main "announcement ^{[archived version]}" & account ^{[Sniper_Team]} on this forum.

[albon]

So basically, a scammer is trying to impersonate another scammer ^{[they can't get any lower than that (SMH)]}. I thought using a plagiarism checking tool would be easy on it, but it turned out to be the opposite ^{[somehow those scammers managed to make the text appear normal, but if you try to copy it somewhere, every single letter is going to be on a separate line, so I had to manually type those sentences]}... Luckily, it was worth the effort, because it led to their main "announcement ^{[archived version]}" & account ^{[Sniper_Team]} on this forum.

Good catch, well done.

I think with artificial intelligence, it can help scammers bypass plagiarism by generating content that looks different from the original one. So, detecting fraud today depends on a much deeper investigation than it did in the past..

I tagged their representative's account on the forum, in addition to reporting his topic, and yesterday I submitted a report to the domain registrar of this phishing website, which is REG.RU.

This was their reply to me in the support ticket email:

Dear Sir/Madam,

We have initiated identity verification. A request has been sent to the domain owner. If the client does not respond in a timely manner, then measures will be taken to suspend the delegation of the domain.
--
C yвaжeниeм,
Oтдeл paccмoтpeния жaлoб
Peгиcтpaтop дoмeнныx имeн REG.RU
Эл. пoчтa: abuse@reg.ru
Caйт: http://www.reg.ru
Caйт: http://peг.pф

Therefore, the situation is clear now, and it is only a matter of time before the domain is taken down because I do not believe that the scammer will be able to pass the identity verification process.