Cómo opera la estafa.
El dominio contribute-status.im está construido para asemejarse a un portal oficial de Status Network, un reconocido proyecto de mensajería y wallet sobre Ethereum que opera bajo status.im. El prefijo "contribute-" combinado con el TLD .im imita un mecanismo legítimo de participación, una ronda de contribución, un panel de staking o un evento de distribución de tokens, lo que confiere al sitio una afiliación implícita que en realidad no posee.
Por lo general, las víctimas son dirigidas al dominio mediante publicaciones en redes sociales o anuncios en plataformas de mensajería, donde se les indica que conecten una wallet no custodial o depositen tokens a cambio de una recompensa o asignación prometida. El sitio captura las firmas de la wallet o ejecuta transacciones de aprobación que otorgan al operador el control sobre los activos. El parecido con el espacio de nombres de un proyecto legítimo reduce el escrutinio que las víctimas aplican antes de autorizar una transacción.
La falla se hace evidente cuando la recompensa esperada no se materializa o cuando una wallet queda vaciada poco después de la interacción. Los intentos de contactar al proyecto auténtico no obtienen ningún reconocimiento del portal. Para entonces, el dominio suele estar fuera de línea o redirigiendo a otro lugar, sin dejar canal de soporte, operador identificado ni contraparte recuperable más allá de una dirección de wallet de destino.
Banderas rojas que documentamos.
- 01Domain engineered to impersonate a legitimate project’s namespaceThe construction of contribute-status.im, pairing a community-participation prefix with the .im TLD, is designed to be visually indistinguishable from an official Status Network sub-brand. Legitimate projects do not route contribution or staking activity through lookalike domains.
- 02Blacklist listing with no corresponding authorised registrationCryptoScamDB flagged this domain as a confirmed-scam entry in its public blacklist. No announcement or endorsement from the genuine Status Network project has been documented, confirming the domain has no authorised affiliation.
- 03Approval-phishing pattern consistent with wallet-draining operationsPortals of this type routinely request ERC-20 approval transactions. A single approval signature can grant an operator unlimited access to specific token balances, with victims unaware until well after the interaction.
- 04No identified operator, legal entity, or support channelOperations built on impersonation infrastructure typically have no named team, no registered entity, and no support mechanism. The absence of any accountable party is a structural feature that limits recourse once assets are transferred.
- 05Short-lifecycle infrastructure signals opportunistic deploymentDomains of this architecture are routinely deployed for brief campaigns timed around token events or airdrops, then abandoned. Rapid deactivation after extraction is consistent with coordinated phishing activity rather than any legitimate service.
Lo que puedes hacer ahora.
Open a free 24-hour case assessment with CryptoLeek +
Tell us what happened. A senior analyst reads your file within 24 hours and replies with an honest yes/no/conditional on recovery. The assessment is free. If we cannot recover the funds we say so plainly, including which (free) regulator channel you should use instead. If we accept the case, we open a numbered case file and issue a written quote for a flat investigation retainer before any work begins, scoped to case complexity, the jurisdictions involved, and the on-chain trail.
Trace your funds on-chain with our analysts +
We trace stolen crypto across BTC, ETH, EVM L2s, Solana, Tron, and major stablecoins using the same toolchain as regulators and tier-1 exchange compliance teams. The output is a forensic report anchored to specific transaction hashes and block heights, the evidence that exchanges, payment processors, and counsel actually act on. Recovery starts here.
Recover with counsel where civil action makes sense +
Where the trace lands in a jurisdiction with cooperative banks and courts, we coordinate with bar-licensed counsel in our 40+ jurisdiction network for civil action and asset-freezing orders (Mareva-style). Counsel bill you directly; the CryptoLeek investigation retainer is independent of counsel fees. The outcome is funds released back to your nominated wallet or bank account.