Browser → Wallet · Approval phishing · setApprovalForAll drain
The Airdrop That Wanted Everything
Briefing
A trending token is 'airdropping' to early users, and you've landed on the claim page. There's a big number, a countdown, and a wallet prompt standing between you and the tokens. Everything here is simulated — no real site, no real wallet, nothing signs on-chain.
What to watch for
- A punycode / look-alike domain (xn--…) in the address bar instead of the official site
- A countdown timer and 'thousands already claimed' manufacturing urgency
- A 'verify eligibility' step that is really a setApprovalForAll on your NFTs
Simulated environment · nothing here is real, nothing runs, nothing sends.