GuildOfGuardians[.]net: Scammer ETH Addresses

Etherscan is your friend.

If you're new to Crypto you may not have spent much time on the various blockchain explorers, but they are very handy when you want to understand where your funds are going when you send them to an address.

https://etherscan.io/

You can take any address and double check that it looks legitimate before you transfer funds.  For example, this is the contract address for the GoG token:

0x9AB7bb7FdC60f4357ECFef43986818A2A3569c62

If you search for that address on Etherscan (https://etherscan.io/token/0x9AB7bb7FdC60f4357ECFef43986818A2A3569c62) it will look like this: 


The Token is called Guild of Guardians (although that title could be faked), the supply is 1,000,000,000 GoG which is what I expect based on the Guild of Guardians whitepaper, there are 1,811 holders (I expected more actually) and there have been 8,139 transfers.  You can also take a look at the transfers down below and there are some from SushiSwap: GOG, CoinList, and if you own GoG your address will come up on the transfers too.

However, tonight I took a little time to scour though the source code of the webpage hosted at GuildOfGuardians[.]net to see if I could get any indication of what addresses the scammers were using to receive funds.

I turned up the following wallet addresses after looking through the pages source code:

0x5e3d6Fc405d8060BC7C41b5f56f6C05AC66aCF8e

0x82374224c9c03388F40a146E286A7799b333DA72

0xf319B5047d657c054C73908308E4C22A98dC7C22

0x7Dd59016d418b72Ffa2A9857F9fb6a99b8d80E4C

0x71C7656EC7ab88b098defB751B7401B5f6d8976F

0x89205A3A3b2A69De6Dbf7f01ED13B2108B2c43e7

0xfa9def342411e2fa16f9a823e8f6d46dc173ca5

The last one however seems to be missing a character and so doesn't show up on Etherscan.

If you take the first address and search for it in Etherscan you get the following:




This address is a wallet address by the looks of it, not connected to any sort of contract.  The balance is relatively low, and if this were the destination for the funds of an NFT sale you would probably expect a higher balance at least during the sale.  The transactions on the address sort of drip money into the wallet, which is also unlike what you'd expect from the wallet for an NFT sale.  This really looks like someone's private wallet.

On Etherscan there is also a comments section.  You can jump to the comments section and read what people have to say about this wallet address.  Generally you should take these comments with a grain of salt, but the very first comment identifies this wallet as a scam address, then the next comment under that also identifies this wallet as a scam address, and so on.  If several comments identify the wallet as a scam address you can be pretty confident the address is associated with a scam.

Compare this with the comments section of the Guild of Guardians presale contract address:


You can take a look at the other addresses I pulled out of the fake Guild Of Guardians website on Etherscan, and none of them look legitimate.  You can also compare them to the actual GoG presale contract address: 0xc253CbC67556E797FDB750a031D5E6208C423ad5

Finally, I found these addresses while digging around in the source code for the fake Guild of Guardians site, but if you are performing a transaction using Metamask you can check the destination address of the transaction before you sign it like this:


In this case the destination is 0xE592427A0AEce92De3Edee1F18E0157C05861564.  Check out the address for yourself and see if you think the transaction in the picture above was to a legit contract or not.

That's it for now.  If you come across any GoG related scams don't hesitate to @gogscamtracker on Twitter or email report@gogscamtracker.com.  I'm going to go avatar shopping...





Comments

Popular posts from this blog

NameSilo Abuse Reporting

More Sites Taken Down

Down MetaMask Impersonation Rabbit Hole