MalwareTips: simplytaoai.xyz impersonates SimplyTao with a fake $STAO 'snapshot' event to get wallet approvals
In a post dated October 24, 2026, MalwareTips says a fake SimplyTao snapshot scam uses the copycat domain simplytaoai[.]xyz to impersonate the established simplytao.ai website. According to MalwareTips, the page copie…
- First reported
- Reports
- 1
Source: malwaretips.com · published
What happened
In a post dated October 24, 2026, MalwareTips says a fake SimplyTao snapshot scam uses the copycat domain simplytaoai[.]xyz to impersonate the established simplytao.ai website. According to MalwareTips, the page copies navigation and market-style information, announces a purported $STAO snapshot event with Solana-related wording, and asks visitors to connect a cryptocurrency wallet through a familiar wallet-selection dialog; its reported purpose is draining assets. MalwareTips stresses the warning concerns the impersonator, not SimplyTao, and says a fresh capture of the page was unavailable and no wallet request was tested. It advises verifying announcements only through established project channels, reading any wallet operation before signing, and reviewing and revoking permissions if a wallet interacted with the page.
How the scam works
A 'snapshot' announcement suggests that holders who connect before a certain time will receive tokens or rewards, which creates urgency. The copycat domain adds 'ai' and switches to .xyz, so simplytaoai.xyz looks close to simplytao.ai, and the page borrows navigation and market-style details to look like the real site. A familiar wallet-selection dialog then makes the next step feel routine.
MalwareTips stresses that connecting, signing a message, granting a token permission and sending a transfer are different operations. A harmless-sounding label on a page doesn't limit what an approval allows, so the exact request matters. It could not get a fresh capture and didn't test a wallet. Anyone who connected should review recent signatures and token permissions and revoke any they don't recognise. Check announcements only through SimplyTao's established channels. SimplyTao is impersonated and is not involved; MalwareTips says the warning is about the copycat, not the project.
Source
MalwareTips, "Fake SimplyTao Snapshot Scam" (published 24 October 2026).
Red flags
- A $STAO 'snapshot' event on a domain such as simplytaoai.xyz instead of simplytao.ai.
- A countdown or deadline to connect before the snapshot.
- Wallet prompts asking for signatures or token approvals to 'register'.
- Requests for a recovery phrase or private key.
If you were targeted
- 1Don't connect a wallet to simplytaoai.xyz or sign anything there.
- 2Never type a recovery (seed) phrase or private key into a website or give it to 'support'.
- 3Check announcements only through the project's official website or accounts that you open yourself.
- 4If you connected and approved something, revoke the token approval with your wallet's or the network's approval tool and move remaining assets to a new wallet if you're unsure what you signed.
- 5If you disclosed a recovery phrase, treat the wallet as compromised and move assets to a new wallet created with a new phrase.
- 6Report the site to your wallet provider and, in the U.S., to the FBI's IC3 at ic3.gov.