Danger signal

Name Contains a URL

The token's on-chain name or symbol carries a website, domain or claim-channel link - a phishing-bait token.

Analyzer: Source-Code Analysis
Slug: name_contains_url

What it means

The ERC-20 name() or symbol() embeds a URL, a domain on a common scam TLD, or a t.me/discord.gg invite ("Visit claim-xyz.com to redeem", "t.me/freedrop"). These tokens are airdropped en masse to random wallets to lure holders to a drainer site. The spoofed metadata is the entire attack - there is nothing to trade.

Why it matters

This is a distinct scam class from rugs: the token has no liquidity and no real market, so it slips past pool-based and honeypot checks. A holder who follows the link signs a malicious approval or connects to a drainer and loses unrelated assets. The on-chain name is the lure, and it is detectable the moment the contract is deployed.

How RektRadar detects it

RektRadar scans the token's name and symbol for http(s):// or www. URLs, real <label>.<scam-tld> domains, and t.me / discord.gg claim-channel invites. Bare @handles and TLD substrings inside ordinary words (DeFi, config) are deliberately excluded to avoid false positives.

From our dataset

421
tokens carried this flag
239
of them classified scam
56.8%
of tokens with this flag end up classified scam
23
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $FUN, $PUMP, $FRAG, $ETHFI, $TCOMon

Pool version of the flagged tokens that trade: V4 341 · V3 61 · V2 22

Snapshot from RektRadar's token_analysis database as of 2026-08-17.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →