New crypto scam in google (URL switch)

There's a new crypto scam on google

Scammers will buy an ad for a proper crypto website on google, with the proper URL

Then when users click on it they get sent to an ad network (http://kochava.com) to track the click, but that network redirects to a scam site instead!

The result is that on google's trusted interface you see the proper http://defillama.com domain, however when you click on it you get sent to a scam domain

By using ad networks that are either malicious or compromised they can switch the urls

Original source: https://twitter.com/0xngmi/status/1694360865154167289