Another user has lost a valuable Bored Ape to a phishing scheme that cost him nearly half a million dollars worth of NFTs.

The user known as JonnyUtah007 on Opensea and BunkerDumass on Twitter apparently made the mistake of interacting with a scam website after it was promoted by a verified account on Twitter that had been hijacked from a cricket executive in Nepal.

The scam website promised an airdrop.

But when BunkerDumass interacted with the website, they didn’t get free Ape Coin tokens. Instead, the transaction cost them Bored Ape #6330, Mutant Ape #22660, Gutter Cat #1060, a parcel of land on Decentraland and two Bored Ape Kennel Club dogs.

The hacker then very quickly sold nearly all of the NFTs, for a total of 145 Ether (US$456,000), before OpenSea could freeze the account. Ape #6330 sold for 102 Ether (US$320,000) and the Mutant Ape changed hands for 23.4 Ether (US$73,000).

The scam was first noted by @zachxbt, a noted on-chain detective and denouncer of scammy behaviour.

“Stop connecting your wallet & approving transactions on sketchy sites,” he wrote on Twitter.

Earlier this week someone lost even more due to a phishing scheme – three Bored Apes worth US$900,000, he added.

A verified Twitter account, BhawanaCAN, has been tagging hundreds or perhaps thousands of people (including this reporter) with spam replies promoting the dodgy website.

Bhawana Ghimire, the former chief executive of the Cricket Association of Nepal, wrote on Facebook that her Twitter account had been compromised and that she had reported it to Nepal Police Cyber Bureau.

Her Twitter account reverted to what was apparently its original version while this story was being written, but here is the earlier version.

BunkerDumass bought the Bored Ape eight months ago for 5.45 Ether.

OpenSea has now frozen some of the NFTs, but appears very unlikely he’ll be able to get any funds back.

According to Zapper, he still has a collection of NFTs worth US$207,000 and US$150,000 worth of crypto in his wallet.