Danger signal

Name Contains a URL

The token's on-chain name or symbol carries a website, domain or claim-channel link - a phishing-bait token.

Analyzer: Source-Code Analysis
Slug: name_contains_url

What it means

The ERC-20 name() or symbol() embeds a URL, a domain on a common scam TLD, or a t.me/discord.gg invite ("Visit claim-xyz.com to redeem", "t.me/freedrop"). These tokens are airdropped en masse to random wallets to lure holders to a drainer site. The spoofed metadata is the entire attack - there is nothing to trade.

Why it matters

This is a distinct scam class from rugs: the token has no liquidity and no real market, so it slips past pool-based and honeypot checks. A holder who follows the link signs a malicious approval or connects to a drainer and loses unrelated assets. The on-chain name is the lure, and it is detectable the moment the contract is deployed.

How RektRadar detects it

RektRadar scans the token's name and symbol for http(s):// or www. URLs, real <label>.<scam-tld> domains, and t.me / discord.gg claim-channel invites. Bare @handles and TLD substrings inside ordinary words (DeFi, config) are deliberately excluded to avoid false positives.

From our dataset

134
tokens carried this flag
68
of them classified scam
50.7%
of tokens with this flag end up classified scam
22
flagged in the last 30 days

Top brand-jacked tickers carrying this flag: $FRAG, $FUN, $gas711.com, $KZEN, $LBYTE

Pool version of the flagged tokens that trade: V4 115 · V3 11 · V2 8

Snapshot from RektRadar's token_analysis database as of 2026-06-20.

Recent tokens with this signal

Loading recent tokens…

Analyze a token →