Fake-job 'order task' scam kit follow-up: xplorahex[.]org, xplorahex[.]com and xplorapcp[.]com use the Xplora BG name (Oct 2026)
- Scam type: Scam
- Chain: EVM (Ethereum, BNB Chain, Base and other EVM chains)
- Project or site name: Xplora BG impersonation ('order task' fake-job scam kit)
- Incident date: 2026-10-25
- Reported: 2026-10-25
- Last updated: 2026-10-25
Follow-up to our report on the fake-job 'order task' scam kit running on 20 sites under real businesses' names (https://blockint.ai/c3?report=1d839b94-5457-4a10-b55e-169c81a256c2) and its correction (https://blockint.ai/c3?report=278930a5-6b2b-484f-b9fa-b9403f3b52fc). Three more sites serve the same kit under the name of Xplora BG, a digital agency in Sofia. Xplora BG's website warns that "The name and reputation of Xplora BG are being used without our permission by third parties in scam schemes." All three were live when checked on 2026-10-25 at 20:34 UTC. Domains: xplorahex[.]org,…
Other addresses in this report: 0x1d1066ba598736002651770502854cb7a3644d43, 0xe517872c34883981bd6873fd9b2cf0afdbf43706
Websites in this report: xplorahex.com, xplorapcp.com
Linked reports: Fake-job 'order task' scam kit on 20 sites using real brand names (inchcapedata[.]com, jellyfishhex[.]com, xplorappc[.]com and others), Oct 2026, Correction to fake-job 'order task' scam kit report (20 sites): they use real businesses' names, and the shared logo bucket was seen on 2026-10-21