Lookalike 'Make Aliens Great Again' sites push a fake $MAGA token allocation described as a wallet drainer
MalwareTips warns that lookalike 'Make Aliens Great Again' sites (makealiensgreatagain[.]app, makealiengreatsagain[.]com) push a fake $MAGA token allocation described as a wallet drainer; the established project uses makealiensgreatagain.com.
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
MalwareTips published a warning on 17 October 2026 about a "Make Aliens Great Again" allocation scam that copies the identity of an existing meme-token project and suggests visitors can check or receive $MAGA tokens. It names the reported lookalike domains makealiensgreatagain[.]app and makealiengreatsagain[.]com; the established project uses a different address, makealiensgreatagain.com. MalwareTips says the counterfeit allocation is described as a wallet-draining operation and stresses that the accusation applies to the impersonating pages, not to the project whose identity they copied. Recognising the genuine project is not an endorsement of its token as an investment.
How the scam works
The entry point is a supposed allocation, an amount of tokens reserved for an eligible wallet, which makes a promotion sound like a distribution. The page doesn't need to promise huge returns: even checking a small possible reward opens the next step. Counters, claim badges and congratulation messages can appear before the site knows anything meaningful about a wallet.
The two domains rely on easily missed changes. One keeps the familiar phrase but swaps the ending to .app; the other moves the letter "s" (makealiengreatsagain), which readers skim past because they recognise the phrase rather than read each letter, especially in a narrow mobile address bar. MalwareTips notes a .app address is not fraudulent in itself, and projects may own several domains, but that doesn't authenticate an unsolicited allocation link.
The crucial step is the move from a displayed allocation to a request inside the visitor's wallet. Sharing a public address or allowing a basic connection is not the same as authorising a transfer; harm depends on the permissions, signatures or secrets actually given. MalwareTips says its fresh capture of the .app address failed and it did not connect a wallet or sign anything, so it does not claim one exact draining method. Its lead image is explanatory artwork, not a screenshot.
Source
MalwareTips, "Make Aliens Great Again Allocation Scam: Fake $MAGA Wallet Claim Exposed" (published 17 October 2026).
Red flags
- A token 'allocation' or claim page reached from an unsolicited link.
- A project name on a different domain ending (.app) or with rearranged letters (makealiengreatsagain).
- Claim badges or balances shown before you've done anything.
- A button that leads straight to a wallet approval, or any request for recovery secrets.
If you were targeted
- 1Don't connect your wallet, sign, or approve anything on the page.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.