From ddd509afa934327ebf2dc929a2e4729fbe653ef8 Mon Sep 17 00:00:00 2001
From: Mich <49607867+dubstard@users.noreply.github.com>
Date: Wed, 15 Sep 2021 08:59:16 +0300
Subject: [PATCH] Update all.json (#498)

No evident bad content yet (have not tried fuzzing nor subdomain scans), blacklisting in advance simply based on where it is "hosted"
DDOS Guard DDNS Passthrough reverse proxy, not actual hosting) I can bet what it will host even before they have spun it up.
It would most likely be a RemcosRAT or NetWireRAT posing as "mandatory update".

Then they spam the discord and social media channels
"hey, install the New Mandatory polkadot y'all"

A few examples:

https://twitter.com/dubstard/status/1374804489367080968
https://twitter.com/dubstard/status/1371554138757206030
https://twitter.com/dubstard/status/1385658148032323584
---
 all.json | 1 +
 1 file changed, 1 insertion(+)

diff --git a/all.json b/all.json
index 446522600..aa3f148ac 100644
--- a/all.json
+++ b/all.json
@@ -217,6 +217,7 @@
     "finance-swap-liquidity-v2.site",
     "finance-swap-v2-liquidity.site",
     "get-dot.me",
+    "get-polkadot.net",
     "getblockchain.digital",
     "getcoinwallet.com",
     "getmusk.top",