Impersonating DigiDaigaku Official site:https://digidaigaku.com/ Twitter:Digidaigaku via:Plugin Similar Scanner

Impersonating FULL SEND METACARD NFT Official site:http://metacard.io Twitter:metacard via:Plugin Similar Scanner

Impersonating Secret Official site:https://scrt.network/ Twitter:SecretNetwork via:Plugin Similar Scanner

Impersonating Based Money Official site:https://based.money/ Twitter:BasedProtocol via:Plugin Similar Scanner

Impersonating ESION CLUB Official site:https://esionnft.com/ Twitter:ESION_Club via:Plugin Similar Scanner

Impersonating edo2022 Official site:https://tokyonftlab.com/ Twitter:edo2022_nft via:Plugin Similar Scanner

Impersonating Plasticity by p4stoboy Official site:https://www.gmstudio.art/collections/plasticity Twitter:gmdaostudio via:Plugin Similar Scanner

Impersonating PREMINT Official site:https://www.premint.xyz/ Twitter:premint_nft via: Newly Registered Domains Scanner

Impersonating Uniswap Official site:https://uniswap.org/ Twitter:Uniswap via: Newly Registered Domains Scanner

Impersonated MV3 on Twitter, using a fake account. Same drainer config with evasion but uses a different external host...instead of trackfiles.xyz it now uses pingfiles.xyz. It has the same "some ziggy tryna use my API" error if the origin header is not correct. Domain history reveals an open directory screenshot showing different folders with folder paths whose domains are the names.

Fake "The Possessed NFT" mint site. Spread via a fake Twitter account. Evades web scanners by checking whether the browser client has a Metamask extension installed or not. Retrieves configuration at trackfiles[.]xyz First related public instance is seen from a fake Moonrunners NFT mint site on June 28.