Fact-check findings
What an automated fact-checker found when it re-read Fake GTA 6 Crypto Wallet Drainer Sites against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
partially supported
1 claimThe cited evidence supports part of the claim but not all of it.
- #7[partially supported][awaiting moderator]in the cited sources
“https://web.archive.org/web/20260919170653/https://u.today/xrp-treasury-firm-lands-30-million-raise-to-buy-more-xrp”
reviewerArchive link for the U.Today sourceThe archive snapshot URL points to an unrelated U.Today article (XRP treasury raise), not the GTA 6 piece. The live URL works. The archive_url field should be cleared or re-captured.
confirmed
6 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Nature of the Site and Deceptive Presentation
“Malwarebytes reported that a website presenting itself as a Grand Theft Auto 6 fan countdown page also advertises the sale of an alleged "leaked copy" of the unreleased Rockstar Games title, for $50 or 1 SOL.”
reviewerFake GTA 6 fan countdown page sells an alleged leaked copy for $50 or 1 SOL, with Nov 19 release date, PS5/Xbox, and footer contradicting the sales pitchMalwarebytes article matches section 0 details including footer, GTA IV error and platforms. - #2[confirmed][no action needed]in section: Dual-Chain Wallet Drainer Mechanism
“A second, larger script poses as a legitimate wallet-connection tool but is capable of targeting wallets across seven additional networks: Ethereum, Polygon, BNB Smart Chain, Avalanche, Arbitrum, Base, and Fantom.”
reviewerSolana inline drainer and seven-EVM-chain script (Ethereum, Polygon, BNB, Avalanche, Arbitrum, Base, Fantom)Chain list matches. - #3[confirmed][no action needed]in section: Alleged Drainer-as-a-Service Backend and Geofencing
“Malwarebytes also reported that the code contains a feature named "CIS_Protection" that checks a visitor's IP address against a list of Commonwealth of Independent States countries”
reviewerCIS_Protection geofencing with listed ten countries and operator ID fetched remotelyMatches. The redirect-to-blank-page detail was not separately confirmed from the fetch summary. - #4[confirmed][no action needed]in section: Identified Infrastructure and Wallet Addresses
“Malwarebytes identified two domains associated with the scheme: centrodigestionedellarapina[.]life and dasunerforschtelandamendederwelt[.]sbs, and published a Solana wallet address (21iWU6FJWJ9FKKz4Jek2CyTh2x1fqs5jawjrNgE3nHjN) linked to the scam.”
reviewerTwo domains and Solana wallet address identifiedMatches. The site's own front-end domain is not listed on the page. - #5[confirmed][no action needed]in the timeline
“2026-09-01”
reviewerMalwarebytes published research on 2026-09-01Date and author match. - #6[confirmed][no action needed]in the timeline
“Crypto-focused news outlets (U.Today, Tronweekly, COINOTAG, and others) republished and summarized the Malwarebytes findings, extending coverage of the scam to a broader crypto audience.”
reviewerCrypto outlets republished the findings in September 2026U.Today confirmed; the other two outlets appear in search results only.