Commit Graph
100 Commits
Author SHA1 Message Date
Mich 571e825525 Block hub-polkadot.com (#4343)
`
whois hub-polkadot.com | findstr "Creation Registrar:"
   Creation Date: 2024-03-20T14:00:45Z
   Registrar: NameSilo, LLC
Creation Date: 2024-03-20T07:00:00Z
`
2024-03-25 22:23:16 +01:00
Mich 0707cc1311 Block polkastater-login.com (#4044) 2023-11-18 18:40:26 +07:00
Mich 3f612ad45d block polkadot-rectifier.vercel.app (#4033)
block polkadot-rectifier.vercel.app
2023-11-11 22:32:43 +07:00
Mich 4a7ee9949c remove false positive metamask-snap-polkadot.pages.dev (#3969)
remove false positive metamask-snap-polkadot.pages.dev
https://github.com/MetaMask/eth-phishing-detect/pull/13752
this domain needs to be unblocked, it’s from ChainSafe, who is building the Polkadot Snap: metamask-snap-polkadot.pages.dev


Ping the Consensys (Metamask) team if you have any questions
Thanks
2023-10-07 10:40:17 +02:00
Mich d7ba6611aa block moonbeam-netvvork.com (#3947)
block `moonbeam-netvvork.com`
2023-10-01 10:14:39 +02:00
Mich 29a1d8fba9 block event-acala.network (#3875)
add scam `event-acala.network`
2023-09-08 08:31:19 +02:00
Mich 57b02a858b Block fake moonbeam and some other scams (#3539)
```
		"moonbeamnettwork.com",
		"y00ts-2.com",
		"psyopdexclaims.com",
		"veefriendsseries3.com",
		"keungz-claims.com",
		"ocm-claim.com",
```
2023-07-06 08:48:14 +02:00
Mich 21583069b8 Update all.json (#3506)
block drainers being promoted on twitter
2023-06-28 11:14:34 +02:00
Mich 11eaa5facb block rescue-ai.netlify.app (#3375)
* block `rescue-ai.netlify.app`

block `rescue-ai.netlify.app`

* fat finger json fix

fat finger json fix
2023-05-19 07:30:31 +02:00
Mich fc5dd74d3b block "dapps-activate.web.app", (#3369)
"dapps-activate.web.app",
2023-05-18 08:51:25 +02:00
Mich c90ad24319 Block WalletConnect "node sync" scams (#3319)
* Update all.json

"secure-defi.online",
https://urlscan.io/result/e97d87ad-27a0-466b-9c93-2f78c0a533fb/

http://multiversesyncon.vercel.app/
https://urlscan.io/result/f1c15d42-1ba5-4264-8add-49e4d8357203/

* Update all.json

"dapptestverification.com",
2023-05-03 10:26:24 +02:00
Mich 948d3242dd block realyork.online and airdrop-zksynsc.com (#3316)
block realyork.online and airdrop-zksynsc.com
2023-05-02 08:10:46 +02:00
Mich efa66b0888 Block scam "multipannel.site", (#3314)
Block scam "multipannel.site",
https://urlscan.io/result/8b6e8207-6b1d-45a3-9579-0e413a9d1adf/compare
2023-05-02 07:30:08 +02:00
Mich ec31283e31 Block 6 scam URLs (#3284)
blocks scams
```
		"dappscoinconnect.pages.dev",
		"whitelist-airdop.com",
		"fast-airdrops.com",
		"airdrop-live.xyz",
		"trustconnectuser.com", 
		"metadropcoinfree.com",
```
2023-04-22 10:51:40 +02:00
Mich 4fcf260b77 Block consensys.financial and meta-mask-official.com (#3282)
block scams
```
"consensys.financial",
"meta-mask-official.com",
```
2023-04-21 14:00:23 +02:00
Mich 643254bef0 block polkasttarters-ido.com (#3278)
block polkasttarters-ido.com
Hosted on Shiniru MY, IP 78.40.143.48

```
Malware and crypto crap
/everydayfeed.cfd
/huzokumap.com
/localinformation.online
/weare24px.club
/daily-time.website
/dailyfeed24.shop
/demergon-funds.com
/auto-eth.org
DHS US GOVT
/dhs-gov-esta.us
/dsa-assist.com

CANADA GOVT VISA
/eta-canadavisa.com

POSTBANK
/reparieren-de-postbank.live

BANK OF AMERICA
/secure-bankofamerica01e.com

VISA US GOVT
/usa-entry-esta.us
/visitnewzealand-eta.com
/govuk-theorydvsa.info
/evw-visa.com
```
2023-04-20 14:14:05 +02:00
Mich 38c8501259 Block polkastarted-home.com and whitelist-web3.com (#3180)
Both appear to be less than honest sites.
2023-03-24 15:51:44 +01:00
Mich 5eb2d3b5f6 block 3 misspelled ppolkastarter scams (#2936)
From the same hosting that brought you quality content, such as:
```
dapp-seedlfy.com
dapp-seedlfy.org
et7gtr5-icbc.app
guildofguaridnes.com
icbc10100auth.com
instanst.co
pay-secure.net
polkaqstarter.com
polkasaterter.com
polkasterater.com
polkastharter.com
polklastarter.com
seedfiy.com
seedfiy.org
seedlfy-fund.nl
seedlfy.nl
seedlfy.pl
sseedify.com
vps.nobula.net
www.dapp-seedlfy.com
www.guildofguaridnes.com
www.instanst.co
www.pay-secure.net
www.polkaqstarter.com
www.polkasaterter.com
www.polkasterater.com
www.polkastharter.com
www.seedfiy.com
www.seedfiy.org
www.seedlfy-fund.nl
www.seedlfy.nl
www.seedlfy.pl
www.sseedify.com
```
Trying to find a legitimate website here is as effective as pissing against a waterfall.
2023-02-09 09:37:04 +01:00
Mich 06ad98f00c Update all.json (#2794)
Block scams residing on the same IP as  `en-polkastarter.com` and `polkastatrer.com`
```
		"metmaxe.com",
		"en-metam.com",		
		"explore-opensese.com",
		"exploreopensea.com",
		"rocketpoal.com",
		"rocketpool-stake.com",
		"rocketpool-staking.com",
```
2023-01-12 17:25:19 +02:00
Mich 4a4a130b13 Block three scams spread on twitter (#2708)
```
"premium-poe.com", 
"x50.io", 
"theflokidrop.com",
```
2022-12-20 12:44:25 +07:00
Mich 0826536965 Block "polkastarter.space" and 2 other scams (#2701)
```
		"polkastarter.space",
		"blockchain-wallet-login.com",
		"balancer.holders-tokens.com",
		"holders-tokens.com",
```
2022-12-18 13:02:35 +02:00
Mich 2ad39bab91 block 27 scams, all on the same hosting (#2678)
Many scams, same IP.

Haven't you heard of 
```
118.107.246.54 (118.107.244.0/22)
AS 132825 ( Defense Australia Network ) 🇭🇰
```

In Hong Kong,  named "Defense Australia Network"
This is like me naming myself Jeff Bezos from Mars, so very believable.
https://www.maxmind.com/en/geoip2-precision-demo?ip_address=118.107.246.54

```
		"appcoachs.cn",
		"coin-base.org.cn",
		"coinbase-wallet.com.cn",
		"coinbase-wallet.org.cn",
		"coinbase-wallet.store",
		"coinbasewallet.com.cn",
		"en-telegram.com",
		"imtoken.org.cn",
		"kmyp.com.cn",
		"lmt0ken.cc",
		"lmt0ken.cn",
		"metamaskey.com",
		"metamaskwallet.com.cn",
		"okex.net.cn",
		"okx-app.cn",
		"shzhifeiji.com",
		"snso.com.cn",
		"t0kenp0cket.com",
		"t0kenp0cket.org.cn",
		"telegram-chian.org.cn",
		"telegram-zh.org.cn",
		"token-im.cc",
		"tokenpocket.net.cn",
		"trust-wallet.com.cn",
		"usdt-wallet.cn",
		"xmbtb.com",
		"zhifeijimx.com",
```
2022-12-12 07:57:10 +01:00
Mich 12137448be block polkastqrtter.com and polkastqrter.com (#2675)
fake BS,  the norm for this provider
```
polkastqrtter.com
polkastqrter.com
```
https://urlscan.io/result/c8d60b9a-fcc7-4452-b668-4c3431ccf4d8/
https://urlscan.io/result/b020ed14-4870-48d0-bb60-92ec7a85807f/
2022-12-11 12:17:13 +01:00
Mich 3ccdf2b0a2 Block discord account shops violating Discord ToS AUP (#2672)
Scammers are like cockroaches - you remove 5, 10 spawn and show up in discord.

How does this happen - eazy - they just buy more accounts to save them the hassle of registering and dealing with sim cards and so on.

How convenient.

There is a reason why Discord requires SMS 2FA upon registration of new accounts and shows account age - to protect from bots and spammers!

Those so called "services" circumvents this - by allowing anybody (scammers) to purchase pre-registered accounts accounts, possibly linked to temporary sim cards like `onlinesim.ru` or a similar quasi-legal service, again used mostly by crooks.

The bought accounts are then used to spam/ scam, and we don't want that.

Thus blocking those fake discords, as nobody but scammers need this "service" and this is not allowed by discord themselves.

Regarding "marketing" using unsolicited spam - this is also forbidden by Discord.

```
		"discord-acc.com",
		"top-discord.com",
		"accounts-markets.online",
		"discord-accounts.ru",
		"retriv-discount.ru",
```
2022-12-11 13:06:36 +07:00
Mich 43aed1e7bd block 4 polkastarter scams (#2664)
* block 4 polkastarter scams

* remove empty lines
2022-12-09 08:00:21 +02:00
Mich 72e9b43223 block scam webdappssynchronization.pages.dev (#2630)
block scam `webdappssynchronization.pages.dev`
2022-12-02 12:07:44 +07:00
Mich f7dc0d0fb5 Block 3 scams (#2612)
Warning, scam alert!
`balEncer.fi` (`E` instead of `A`)
`baIancer.fi` (`I` instead of `L`)
`https://twitter.com/baIencer/`  Fake Twitter profile - (I instead of L)

`curve-reward.fi` - imitation of `Curve.fi`
2022-11-27 14:57:01 +01:00
Mich 2680ab4c50 block "walletsrectification.network", (#2585)
Block "walletsrectification.network",
2022-11-18 10:02:44 +01:00
Mich 8fedb0adc7 block graphsupport.online (#2573) 2022-11-15 07:56:30 +01:00
Mich dea99ec73a block correctiondapps.com (#2567)
block 
```
"correctiondapps.com",
```
2022-11-14 11:30:17 +01:00
Mich a30e31ce90 Block "dappsupportlive.com", (#2558)
```
"dappsupportlive.com",
```
2022-11-11 12:46:10 +01:00
Mich 3d7c63d47b block two generic seed stealers (#2553)
```
"dappsolution.live",
"walletdapps-comect.com",
```
2022-11-10 07:36:58 +01:00
Mich a9b12a7b71 block scam wallet-fixers.netlify.app (#2525)
```
"wallet-fixers.netlify.app",
```
2022-11-04 11:45:51 +01:00
Mich afdc955dcd block 3 scams (#2522)
WalletConnect scam
```
		"blockchainresoverpanel.com",
```
Balancer scam
```
		"balancer.rest",
```
Uniswap scam
```
		"unlswap.me",
```
2022-11-04 09:03:41 +01:00
Mich 1c6346b1ff Update all.json (#2469)
Add ETH-KSM "mining" scam
```
ethereum-ksm.com
```

https://urlscan.io/result/7d56d800-5b18-4cd6-8787-5c143edd68c7/
2022-10-25 07:05:35 +02:00
Mich b8c7821064 Update all.json (#2464)
"dappsreauthenticator.web.app",
		"metamask-wallet-sync-103444.square.site",
2022-10-24 03:18:16 -07:00
Mich 3308280bf7 add two fake airdrops (#2457)
* add two fake airdrops

I checked the PRs and `airdrop.xn--aptosabs-xkb.com` and `polkadot-airdrop.com` were not blocked yet.

They are fresh.

* Update all.json

add one more
`polkadot-airdrop.com.hathor-airdrop.com`
2022-10-23 08:20:40 +02:00
Mich 47f96b045c Update all.json (#2416)
add
```
www.dapps.roziermerge.site/integrate-wallets.html
```
2022-10-13 15:29:53 +02:00
Mich a6f0d79c48 Update all.json (#2383)
add
"wallet-polkadot.com",

and all the dirty contents on the IP that hosts it.
all are various scams.

```
		"crazydefensehroes.com",
		"farmesworld.com",
		"idexns.com",
		"martian-wallet.com",
		"martian-wallets.com",
		"mega-lo.com",
		"mega-mz.com",
		"mega-zn.com",
		"megac-lo.com",
		"my-1passwards.com",
		"my-1passwcord.com",
		"my-1passworad.com",
		"my-1passworda.com",
		"my-1passwordc.com",
		"my-1passwordn.com",
		"my-1passwordr.com",
		"my-1passwords.com",
		"my-1passwordt.com",
		"my-1passworld.com",
		"my-1passworod.com",
		"my-1passworrd.com",
		"norcdpass.com",
		"nordaccounat.com",
		"nordaccounet.com",
		"nordapass.com",
		"nordcpass.com",
		"nordopass.com",
		"nordpassr.com",
		"nordrpass.com",
		"pcrivnote.com",
		"prcivnote.com",
		"protonmailcm.com",
		"protonmailcom.com",
		"spookysnwap.com",
		"tcrustwallet.com",
		"tnrustwallet.com",
		"trnustwallet.com",
		"tronlinckcs-wallet.com",
		"trunstwallet.com",
		"trusctwallet.com",
		"trustcwallet.com",
		"trustwallnet.com",
		"trustwallot.com",
		"trustwcallet.com",
		"trustwnallet.com",
		"vault-bitwarden.com",
		"vault-bitwardenr.com",
		"vault-bitwardens.com",
		"wallet-chainlink.com",
		"wallet-polkadot.com",
```

Password manager scams, MEGA scams, bitwarden, trust wallet and so on.
2022-10-07 08:44:04 +02:00
Mich 67357e2772 Update all.json (#2370)
add generic seed stealer 'dapps-encryptoken.pages.dev`
2022-10-05 08:38:51 +02:00
Mich 695b55019c Update all.json (#2287)
Add metamask "merge" event scams.
```
		"metamask.io.merge.2fast2serious.com",
		"metamask.io.merge.aceros-monterrey.com",
		"metamask.io.merge.actimaggroup.com",
		"metamask.io.merge.adeniyicreations.com",
		"metamask.io.merge.albio.tech",
		"metamask.io.merge.aldhiyaltd.com",
		"metamask.io.merge.alexcoteltee.net",
		"metamask.io.merge.alnashamatech.com",
		"metamask.io.merge.amarmultihospital.com",
		"metamask.io.merge.aqit.ma",
		"metamask.io.merge.artandcraftz.xyz",
		"metamask.io.merge.arthaoceanlight.com",
		"metamask.io.merge.atsonline.shop",
		"metamask.io.merge.aviraorganics.com",
		"metamask.io.merge.bestsoftit.com",
		"metamask.io.merge.bmofree.com",
		"metamask.io.merge.boldtranslation.com",
		"metamask.io.merge.btcscloudmining.com",
		"metamask.io.merge.camostory.com",
		"metamask.io.merge.checkmyscoresnow.com",
		"metamask.io.merge.clone.divinemedica.de",
		"metamask.io.merge.cmuch.mx",
		"metamask.io.merge.cosdelmar.com",
		"metamask.io.merge.coursemane.org",
		"metamask.io.merge.cripersrisespace.com",
		"metamask.io.merge.dartwavedelivery.com",
		"metamask.io.merge.deeventures.net",
		"metamask.io.merge.demmecare.xyz",
		"metamask.io.merge.dgcrecharge.com",
		"metamask.io.merge.dimensionaproyectistas.com",
		"metamask.io.merge.e-link.me",
		"metamask.io.merge.edesk.io",
		"metamask.io.merge.edeskoutsourcing.com",
		"metamask.io.merge.educadorxavier.com.br",
		"metamask.io.merge.educationalwriters.com",
		"metamask.io.merge.eiarash.ir",
		"metamask.io.merge.erasky.in",
		"metamask.io.merge.etringallery.com",
		"metamask.io.merge.evoitservices.com",
		"metamask.io.merge.fkg.moestopo.ac.id",
		"metamask.io.merge.freethingsblog.com",
		"metamask.io.merge.giletarm.xyz",
		"metamask.io.merge.go-getter.in",
		"metamask.io.merge.grafieindonesia.com",
		"metamask.io.merge.grandstyleent.com",
		"metamask.io.merge.gregtutors.com",
		"metamask.io.merge.groupegerminal.com",
		"metamask.io.merge.hotspotmassage.com",
		"metamask.io.merge.hpe-rpe.com",
		"metamask.io.merge.i-securepro.com",
		"metamask.io.merge.icedcoffeerecipes.xyz",
		"metamask.io.merge.iedi.edu.co",
		"metamask.io.merge.inetku.net.id",
		"metamask.io.merge.irbestsocial.ir",
		"metamask.io.merge.jantosamstore.xyz",
		"metamask.io.merge.kahfstudio.com",
		"metamask.io.merge.kilikmarket.com",
		"metamask.io.merge.kilikmarket.ir",
		"metamask.io.merge.labelmystuff.com",
		"metamask.io.merge.laboratorium.bnn.go.id",
		"metamask.io.merge.learnwithmizan.com",
		"metamask.io.merge.megsteven.com",
		"metamask.io.merge.miraclemiles.us",
		"metamask.io.merge.mirshus.moestopo.ac.id",
		"metamask.io.merge.mquranacademy.com",
		"metamask.io.merge.mskbusiness.com",
		"metamask.io.merge.msktranslation.com",
		"metamask.io.merge.nana20.com",
		"metamask.io.merge.nandawahyubi.my.id",
		"metamask.io.merge.nevibytes.com",
		"metamask.io.merge.nigercareinternational.com",
		"metamask.io.merge.nodechain.dev",
		"metamask.io.merge.noderon.com",
		"metamask.io.merge.okwcq.org",
		"metamask.io.merge.origraffes.com.br",
		"metamask.io.merge.p2pex.net",
		"metamask.io.merge.paporeto.net.br",
		"metamask.io.merge.parsix.com.br",
		"metamask.io.merge.pristinefoodsgh.com",
		"metamask.io.merge.rasattl.ir",
		"metamask.io.merge.regexbyte.com",
		"metamask.io.merge.rigeo.org",
		"metamask.io.merge.rione.co.id",
		"metamask.io.merge.rioneindonesia.com",
		"metamask.io.merge.ritujannat.com",
		"metamask.io.merge.romata-group.com",
		"metamask.io.merge.rslafrica.org",
		"metamask.io.merge.ruachclass.com",
		"metamask.io.merge.safi.ps",
		"metamask.io.merge.samadenterprise.com",
		"metamask.io.merge.senglobalmarket.com",
		"metamask.io.merge.sevensinnovations.com",
		"metamask.io.merge.shreesevenhillshospital.com",
		"metamask.io.merge.simbiosisdigital.com",
		"metamask.io.merge.simplyamazingidea.com",
		"metamask.io.merge.singhgroup-india.com",
		"metamask.io.merge.sunshinehealthcareltd.com",
		"metamask.io.merge.swift2track.org",
		"metamask.io.merge.thelifepeople.com",
		"metamask.io.merge.tigertiao.com",
		"metamask.io.merge.tradingescalonado.com",
		"metamask.io.merge.uni-smart.uk",
		"metamask.io.merge.universalshop.pro",
		"metamask.io.merge.westfordtb.com",
		"metamask.io.merge.wilsontoursafrica.com",
		"metamask.io.merge.yekshahr.ir",
```
2022-09-21 10:10:15 +02:00
Mich 75ec77f9a8 Update all.json (#2234)
* Update all.json

add
```
"poljkastarter.com", 
```

* Update all.json

add "polkqstqrtter.com", (same IP)
2022-09-09 09:20:40 +02:00
Mich 13b6d98b7d Update all.json (#2212)
add
```
"all-in-one-sync.com",
```
2022-09-07 03:59:57 -07:00
Mich a07bd05caa Update all.json (#2119)
I believe `mantanetworktoken.live` is a fake imitation of `manta.network`
2022-08-25 09:48:46 +02:00
Mich 60524c0cf6 Update all.json (#1851)
* Update all.json

```
		"lpbalancer.com",
		"uniclaimv2.com",
        "dapp-sync.netlify.app",

```
Fake "airdrop" liquidity provisioning scams - scammer drops fake token, user checks token name - it contains a bait URL - if the user signs an approval they get rekt.

"lpbalancer.com",
image
image
0xeDe11D3d5dd7D5454844f6f121cc106bF1144a45

Related to https://twitter.com/dubstard/status/1549414764459220993

"uniclaimv2.com",
image

Both those belong to the same organized e-crime syndicate that has balancerlp.com and also lpuniswap.com, v3lpuniswap.com. uniswaplp.org. lpuniswap.org, uniaward.org, unilp.org and univ3lp.org, which were already revoked due to abuse reports.

The same faith shall come to uniclaimv2.com and lpbalancer.com as well.

The scammers likely have dozens if not hundreds more domains prepared on standby.

* Update all.json

add "microdapps.xyz",
2022-07-20 09:22:47 +03:00
Mich 811a577d80 Update all.json (#1843)
"balancerlp.com",
		"aavereward.com",
		"multialignfix.com",
		"sync-debug.com",
		"smart-fixhub.live",
		"trustedpad.io",
		"web-synchronizer.cloud",
		"dappsprotocol.netlify.app",
		"phantomwebwallets.com",
2022-07-19 08:22:33 +03:00
Mich 5e90bc84f5 Update address.json (#1815)
Add scam wallet from fake giveaway `polkadot-bonus-network.42web.io` 
`14mTh8hbaoSoa2r2EBCFYssRjW4KQEGhkyg5Zz7LAiRpg3zg`
2022-07-15 09:14:38 +03:00
Mich 92987fdadb Update all.json (#1814)
* Update all.json

		"lpuniswap.com",
		"uniswaplp.org",
		"lpuniswap.org",
		"uniaward.org",
		"unilp.org,
		"univ3lp.org,

		"polkadot-bonus-network.42web.io",

* Update all.json

add missing closing double quotes
2022-07-15 09:14:03 +03:00
Mich 3164f30ecf Update all.json (#1808)
"v3lpuniswap.com",
		"easy-connect.xyz",
		"walletconnect-dapps.netlify.app",
		"main-netsmarttokens.co",
		"chainrectifier.online",
2022-07-14 08:50:25 +03:00
Mich c728d84e52 Update all.json (#1805)
* Update all.json

419 advance fee scam bulk nuke
Those scam website are a part of the 419 advance fee scams called “Bitcoin Revolution” and also some of them are imaginary exchanges with no liquidity.

If you open the site from France, it will give you a famous French person, like movie star or TV host who “got rich from bitcoin”.

There is a false sense of urgency to “invest”.

The goal is to find guidable users who want to get rich quick, based off the bogus “evidence” presented on the fake “bitcoin revolution” scam website.
They are baited to “invest.”

Their portfolio grows, until they try to withdraw, then all is lost.

Often scammers spam DMs in discord or twitter or telegram or other platforms and lure users into the bogus websites as if they won something.

Then in order to “withdraw” the bonus, users must first depost a “fee”.

This money is always lost forever, if you are gullible enough to believe that a random exchange registered 2 days ago in Russia will gift you Bitcoin or Ethereum.

Spoiler: they won’t!

tl;dr: You won FAKE money, but you must deposit REAL money for the so called FEEs.

This is how a spam message looks

```
🚀🚀🚀 Congratulations! 🚀🚀🚀

In case you got that notification
You are one of the winners of our charity draw

Due to high trading volume on our exchange, we want to announce the promotion in BTC, which was made by CryptoCratex with help of Kraken, we decided to attract new participants and help crypto society in this difficult time

💰 Your prize: 0.7 BTC
🔑 Your code : WIN111

1) Sign up to /cryptocratex[.]com
2) Go to exchange settings on the main page
3) Apply the promocode
4)Done, you can use your funds

⏳ You must withdraw received BTC in 7 days, otherwise, the application will be declined invalid.
🔴 Promocode can be used only once
If you have any questions, you can contact support
```


Here is a list of fake scams which I have shut down myself.

/acutetradingfx.online
/ak-traders.com
/alphaearning.com
/asotplatform.com
/atikotrade.com
/axiemining.com
/biggestlegaltradingsystem.co
/biggestminitrade.com
/billxoptions.com
/binarysystemtrading.com
/bitex-fxtrading.com
/bitminingtrading.co
/bitstarminin.co
/bitstocklivetrading.com
/briskminersfx.com
/capital-bittrade.online
/cmcmarketpro.com
/co-tradex.com
/coinindexmarket.com
/coinkin.org
/coinminers.info
/confxminitrade.co
/criptofaci.com
/cryptafarm.com
/cryptexprofit.com
/crypto-booster.biz
/crypto-tokenrecovery.com
/cryptofin.biz
/cryptogain-invest.xyz
/cryptonitepips.com
/cryptotriplelive.com
/cryptotrustfx.live
/cryptoxtmining.com
/crytfxpro.com
/cwaptrade.com
/dailygrowthinvestment.com
/dailyincome247.com
/digitalcoinasset.ltd
/digitalcryptofx.com
/dxfinance.net
/expertreliable.co
/financial-trading.ltd
/fincapitalbank.com
/forex-capitaltrading.com
/fundsgaterecovery.net
/fxcapitalxchange.cf
/fxinvestmentbot.com
/glenholdings.com
/globalpower.ltd
/goldbinaryoptiontrading.com
/goldenbridgeassets.com
/goldenbtc.net
/greenhillstrade-fx.com
/hexatradefx.com
/hotinvestnow.com
/idbnk.online
/imperialassets.co
/innovationgoldfx.com
/inteldigital.trade
/investbanque.com
/kontcoins.com
/legalbtcmining.org
/linuscointrade.net
/lunotradingcompany.com
/mega-forexchange.ltd
/metamask.io-verification.comconnect
/miningmarketpro.com
/mininings.com
/miracletradefx.com
/mullenfx.com
/net-wallets.com
/nexo-fx.com
/oandainvest.com
/octaglobalfx.com
/ofxglobaltrade.com
/optimalcointrade.com
/orion-tradings.com
/otc.eqibank.com
/otcex-investment.com
/paulgoldhunter.com
/paydragons.com
/pro-earners.com
/profitableoptionsfxinvestment.com
/profittextrade.com
/qantasfx.ltd
/revamp-traders.ltd
/robotmoney.net
/safebtcminings.com
/safecointrade.com
/safefxoption.com
/safefxoptions.com
/safemodetrading.com
/sbrokerforexpips.com
/securedverifiedoffice.com
/securefxtrade.org
/silverlinebank.org
/sinogoldlimited.com
/solariscapital.online
/standardcryptotraders.com
/stockmarketlabfx.net
/stockmartinc.com
/stockportfxtrade.com
/superfxtrading.co
/swiftlyxcapital.com
/tesla-exchange.ltd
/thegoldasset.org
/traderdesk.org
/tradestationfx247.com
/tradex-financial.com
/tradiine.com
/tronelakebank.com
/upsalefx.com
/vitexlimited.com
/safeedgetrade.com

gonna remove any dupes after the CI/CD auto parse does the heavy lifting for me.

* Update all.json

Trim spaces
     +   "coinkin.org ",
    +   "cryptonitepips.com ",
    +   "revamp-traders.ltd ",
    +   "robotmoney.net ",
	
Remove dupes
	
	-   "asotplatform.com",
    -   "capital-bittrade.online",
    -   "crypto-tokenrecovery.com",
    -   "cryptoxtmining.com",
    -   "dailygrowthinvestment.com",
    -   "digitalcryptofx.com",
    -   "fundsgaterecovery.net",
    -   "kontcoins.com",
    -   "legalbtcmining.org",
    -   "linuscointrade.net",
    -   "mininings.com",
    -   "oandainvest.com",
    -   "ofxglobaltrade.com",
    -   "optimalcointrade.com",
    -   "paulgoldhunter.com",
    -   "safebtcminings.com",
    -   "safecointrade.com",
    -   "safemodetrading.com",
    -   "securefxtrade.org",
    -   "tradex-financial.com",

Fix 
	
"io-verification.com",
2022-07-13 10:06:47 +02:00
Mich 8cba81c8ed Update all.json (#1796)
"myspotrecovery.xyz",
		"uniswaplp.com",
2022-07-11 21:04:39 +02:00
Mich 345e1ef23b Update all.json (#1784)
"websynchronizationvalidator.pages.dev",
		"myroninwallet.io",
		"cryptoresolve.net",
		"tether.to.epgr.org",
2022-07-08 21:48:02 -07:00
Mich f7aa65aeb3 Update all.json (#1732)
"smartdapp.herokuapp.com",
2022-07-01 07:41:08 +03:00
Mich b3be31ea94 Update all.json (#1730) 2022-06-30 06:56:35 +03:00
Mich 89795dca5f Update all.json (#1715)
"cryptosupport-base.com",
		"bestcrypto-platform.com",
		"pexacrypto.com",
		"mint-liquidity.sbs",
		"step-bin.com",
2022-06-24 07:45:29 +03:00
Mich 3b095662fc Update all.json (#1711)
"waconnect.online",
"walletprotocolserver.com",
"webextensionsfix.tech",
2022-06-23 08:57:15 +02:00
Mich 5286f53ce6 Update all.json (#1696)
"fixallerror.org",
		"tknvldi.online",
		"earn-crypto-trustapp.online",
2022-06-20 09:55:54 +03:00
Mich 6eeb0d41ce Update all.json (#1669)
I don't think this has anything to do with polkadot, apart from misuse of the logo and brand infringement in order to instill trust in users.

"dotminer.net",
https://urlscan.io/result/c78965d2-2eec-43f5-b629-c796278c268e/

https://urlscan.io/search/#hash%3Afbc691ccb0971b50fff9b6091f16274e7af9204fe4c98c5a88a5b1b0b5322bf4 - more scams of the same type
%random coin% + "miner" = fake BSC smart contract that possibly drains any assets found in the victim user's metamask, upon signing an approval
2022-06-13 11:18:40 +03:00
Mich 7bd5cf635f Update all.json (#1666)
"activationsaccess.com",
		"anchorprotocolsapp.com",
		"app.fixedapps.net",
		"app.importvalidator.org",
		"app.myappslinked.com",
		"app.securedappsnet.com",
		"fixmyerrorissues.com",
		"myappslinked.com",
		"securedappsnet.com",
		"stepn.activationsaccess.com",
		"swiftsolutionsapp.com",

All on the same IP.
Same DNS (OwnRegistrar 🚽) and Hosting AliDNS 😴 💤

I have alerted the MY CIRT team to take all those with one swift swoop, lmao, bye.
2022-06-13 08:31:40 +03:00
Mich ff23ed3493 Update all.json (#1663)
"mneumonicactivator.com",
"online-uniswap.tech",
2022-06-12 08:14:14 +03:00
Mich 0a2b8951a2 Update all.json (#1662)
"bsccoin.live", - Fake metamask targeting users based in China
                "tokenpecket.vip", - Fake TockenPocket
		"dapconn.net", - Fake multiwallet stealer (no polkadot explicitly, but it has "others")
2022-06-11 12:48:05 +03:00
Mich 27d26ec737 Update all.json (#1624)
"polkabridge-giveaway.com",
2022-06-01 10:10:12 +03:00
Mich b4f23384d1 Update all.json (#1616)
"defi-landchains.com",
		"dapps.multichaincnet.online",
		"multichaincnet.online",
		"zonefix.net",
		"validatedappsonline.live",
		"dappsoption.xyz",
		"lmsolveit.link",
		"pointconnect.site",
2022-05-29 23:14:21 -07:00
Mich 9c485913fb Update all.json (#1613)
"apps-syncs.org",
		"app-wallets.ml",
		"chain-node.org",
		"dappcryptostore.com",
		"encryptodapps.pages.dev",
		"kusama.lida.finance",
		"lida.finance",
		"mainnet-migrate.online",
		"metamask-recovery.info",
		"metamask-recovery.net",
		"metamask-update-v2.com",
		"metamask.io-downloadproductwallettokens.io-vebsite.xyz",
		"metamask.io-downloadproductwallettokenssk.jo-website.xyz",
		"metamaskondemand.com",
		"metamaskweb.org",
		"metamusk.app-wallets.ml",
		"nodes-connect.com",
		"opensea-nft-offers.com",
		"opensea-verificationprocess.com",
		"pancakeswap-dapps.com",
		"secure-opensea-x03.com",
		"solutioncoiinmsmartteconnet.live",
		"stepend.art",
		"support-opansea.io",
		"tokenimtu.top",
		"updatingmyopensea.com",
		"wallet.metamaskweb.org",
		"x0384-open-sea-recover.com",
2022-05-29 04:54:19 -07:00
Mich 66e69bea75 Update all.json (#1593)
* Update all.json

		"ismetamask.io",
		"metamask-verify-procedure.com",
		"metamask.io.wallet-identification.softsayo.com",
		"metamask.recovery-web.io",
		"recovery-web.io",
		"metamask02.com",
		"metamasksecure.org",
		"myconnectwalletdapp.online",

* Update all.json

remove `bridge.hertzswap.net` (no bad content...yet)

add more scams, same IP

* Update all.json

add "defi-token.my.id",

* Update all.json

remove duplicate  "babydogenfft.online",
2022-05-19 22:16:12 -07:00
Mich 20ed27eb33 Update all.json (#1591)
"dev-walconnect.pantheonsite.io",
		"walluserconnect.web.app",
		"trust-walle.com",
		"trconnect.uk",
		"xn--spooky-swp-p4a.finance",
2022-05-19 17:05:03 +03:00
Mich 7c84a61df7 Update all.json (#1590)
"app-magiceden-app.ml",
"bogged-finance.digital",
"dappexplorer.live",
"magicden.digital",
"meta-sea.club",
"node.dappexplorer.live",
"usdt2022.cam",
2022-05-18 23:56:25 -07:00
Mich f75f07e2b6 Update all.json (#1588)
* Update all.json

"app-synscsrectify.com",
"apprectifysyncs.com",
"atowalletconnect.tax",
"cloudlesstoken.sbs",
"dappstool-sync.com",
"defibridgelive.online",
"download-m.com",
"im-token.toys",
"imetamask.xyz",
"imtoken-cn.fyi",
"imtoken-cn.run",
"imtoken-en.one",
"imtoken-en.run",
"imtoken-q8.com",
"imtokena.info",
"integral-dexs-bridge.com",
"linkconnectwallet.com",
"lrnrtoken.xyz",
"lrntoken.xyz",
"lunadogetoken.online",
"lunamoontoken.com",
"lunatamatoken.com",
"luntoken.xyz",
"metamasks.online",
"mint-unlockable.online",
"mydefidapps.com",
"mydefiwalletconnect.com",
"nlunatoken.com",
"rectifyv2finance.com",
"secureddappsprotocol.net",
"slunatoken.com",
"slunatoken.online",
"support-metamask.space",
"to-web.site",
"tokeniam.top",
"tokeniim.top",
"tokenpaeket.com",
"wallet.thetatoken.trade",
"thetatoken.trade",
"walletsextension.com",

* Update all.json

    +   "download-m.com",
    +   "metamasks.online",
    +   "secureddappsprotocol.net",
    +   "support-metamask.space",
2022-05-18 23:09:46 -07:00
Mich 706c6da36d Update all.json (#1584)
"walletfixhub.weebly.com",
		"balancerr.finance",
		"download-m.com",
		"daoapprestore.com",
		"balancer-flnance.com",
2022-05-18 20:06:20 +03:00
Mich 5647ddb664 Update all.json (#1582)
one xyz, one plesk page and one netlify
```
"s.getfixed-mainet.xyz",
"getfixed-mainet.xyz",
"dwallets.netlify.app",
"verify-trustwallet.179-43-154-180.plesk.page",
```

h/t iamdeadlyxyz and malware hunter team
2022-05-18 17:42:05 +07:00
Mich d07dbc6298 Update all.json (#1581)
* Update all.json

"dapps-validation.co",
"meta-extension.net",
"stepn.engineer",
"appregistry.live",
"onlininfo.link",
"metamasf.net",

(h/t Cindy | serv.eth team)

* Update all.json

"confirmpage.metamaskwalletverification.com",
"dappethereum.fun",
"dappethereum.online",
"dappethereum.xyz",
"dapps-validation.co",
"finance-v2-liquidity-swap.site",
"io.support-metamask.space",
"metamask-kycverif.com",
"metamask.cash",
"metamask.com.vn",
"metamask.io.cikgutekansiap.com",
"metamask.io.wallet-identification.divu.cl",
"metamask.io.wallet-identification.rwatelier.com",
"metamask.login.update.for.suspended.wallet.samirtomb.com",
"metamaske-extension.hmongtimes.com",
"metamaskwalletverification.com",
"sms.tokenconnectprotocol.com",
"support-metamask.space",
"tokenconnectprotocol.com",
"verify.walletsync.online",
"walletsync.online",

* Update all.json

remove dupes
    +   "dapps-validation.co", (added twice by mistake)
    +   "metamask.cash",
    +   "metamaskwalletverification.com",
    +   "tokenconnectprotocol.com",

* Update all.json

add "dexchainpad.site",

* Update all.json


		"globaltokenswap.com",
		"nfttrader.io-0xd8bcfffbf8dc67353cd0739f4f2ad487c657d5b0.trade", 
		"io-0xd8bcfffbf8dc67353cd0739f4f2ad487c657d5b0.trade",
		"insuredapplite.co",

* Update all.json

add

"tokeniam.xyz",
"poligom.club",

✅Ready for review
2022-05-18 11:00:56 +02:00
Mich 8b8c86df92 Update all.json (#1580)
* Update all.json

"apetoken-usser.online",
"bridge-coinbase.com",
"contactmetamasklive.report",
"dappauto.xyz",
"dappsconnectcrypto.com",
"dappwalletconnect.xyz",
"dapwalletsconnect.com",
"deeplinkbridge-verify.online",
"ethdapp88.xyz",
"ethdapp90.xyz",
"ethdapp92.xyz",
"ethdapp93.xyz",
"ethdapp94.xyz",
"ethdapp95.xyz",
"ethdapp96.xyz",
"ethdapp97.xyz",
"giveaway-flokiversetoken.com",
"im-tokenx.xyz",
"im-tokenz.xyz",
"imttoken.icu",
"metamask.secure.login.energykn.com",
"metamaskotas.com",
"metamasks.online",
"metamaskverifykey.com",
"metamaskwalet.net",
"my-token.online",
"secuwallets.com",
"theden-token.com",
"tokenapp.ltd",
"tokenpocket.green",
"tokenprocket.club",
"toknptoken.com",
"trx-dapp.xyz",
"trxdapp55.xyz",
"trxdapp59.xyz",
"trxdapp60.xyz",
"trxdapp62.xyz",
"verifytokenid.com",
"waletdirect.com",
"walletconnectapp.info",
"walletsbts.com",
"web3-waletconnect.com",
"kavatoken.online",
"metamask.wallet-account.com",
"wallet-account.com",
"mtokenbulgaria.com",
"swap-bsc.tokentool.club",
"tokentool.club",
"tokenpoket.club",
"watch2buy.commetamask.io.account.verification.update",

* Update all.json

"chainvalidation.live",
"dapp.ethereumbest.shop",
"ethereumbest.shop",
"dappai.net",
"dappauto.xyz",
"dappfixed.com",
"dappsconnection.firebaseapp.com",
"dappsconnection.web.app",
"dappssynch.win",
"dappssynch.win",
"dapptools.tech",
"dappvalidate-plum.vercel.app",
"imeoken.com",
"livechatmetasupport.live",
"metamasf.vip",
"tokenpocket.coach",
"tokenqcoket.pro",
"walletconnect.179-43-154-180.plesk.page",

* Update all.json

Remove duplicates
    -   "dappssynch.win",
    -   "dappauto.xyz",
    -   "dappai.net",
    -   "dappfixed.com",
    -   "dappsconnection.firebaseapp.com",
    -   "dappsconnection.web.app",
    -   "dappssynch.win",
    -   "dapptools.tech",

* Update all.json

found this in the source of the scams, blocking those as well retrospectively
```
  <!-- Mirrored from dappsolution.one/ by HTTrack Website Copier/3.x [XR&CO'2014], Fri, 24 Dec 2021 22:03:02 GMT -->

  <!-- Mirrored from mintconnectpad.online/ by HTTrack Website Copier/3.x [XR&CO'2014], Thu, 30 Dec 2021 18:07:55 GMT -->
```

* Update all.json

		"web3.coinnodes.xyz",
		"coinnodes.xyz",
		"defi-tron.xyz",
		"enconnect.online",

* Update all.json

"webpolygonwallet.website",
"webwalletpolygon.website",
"polygon-web.space",
"polygonweb.space",
"webpolygon-matic.com",

(h/t bunny for those)

* Update all.json
2022-05-17 10:40:20 +02:00
Mich d566a34a08 Update all.json (#1577)
* Update all.json

"apibridgnetwork.org",
"click-connect.info",
"dapps-binanceprogram.space",
"decenterland.tech",
"dipfix.live",
"mainnetsetup.org",
"mainnetsetup.orgsync",
"marketplaceaxinfinity.club",
"metamask-nft.io",
"metamask.metacube.online",
"metamaskzendesk.com",
"nodevalidators.org",
"pockchain.net",
"polkadot.one",
"polkadotnetwork.io",
"sec-tool.net",
"secureddappsprotocol.net",
"thepolkadot.org",
"validate-link.net",
"vault-linkingserver.live",
"vitalik-etherx2.net",
"walletsrectification.online",
"walletwhitelistvalidate.com",

* Update all.json

Remove dupes
```
"metamask-nft.io",
"nodevalidators.org",
```

* Update all.json

remove non URL
```
"mainnetsetup.orgsync",
```

* Update all.json

"airswallets.com",
		"clientswcrectify.com",
		"collablandwalletconnect.xyz",
		"dapp3-usdc.xyz",
		"dappauthenticator.net",
		"dapptools.tech",
		"defivalidatedapp.com",
		"evidenceconnectwonder.xyz",
		"imtokent.pro",
		"itokenapp-stonne.com",
		"metamaskwalletverification.com",
		"metamaskwebconnect.netlify.app",
		"rectifycavity.top",
		"sync-dapps.net",
		"the-bridgechain.com",
		"tokenmigrationio.xyz",

* Update all.json

remove torrent tracker, TV page or whatever this is
```
		"polkadot.one",
```
2022-05-16 02:28:36 -07:00
Mich 4d2be87d60 Update all.json (#1574)
"connectwallet.space",
		"daapsynclink.info",
		"dapp-minings.com",
		"dapps-sync.xyz",
		"dappsynch.xyz",
		"fixtokengiveaway.online",
		"imtoken-9n.xyz",
		"imtoken-fn.xyz",
		"imtoken-m8.xyz",
		"imviptoken.com",
		"online-metamask.info",
		"rectifyconnect.com",
		"securedappnetwork.net",
		"token-stake.com",
		"tokenfixprotocol.com",
		"tokenpket.com",
		"tokenv.life",
		"usdtdoublers.club",
		"w-imtoken.com",
		"wallet-token.net",
		"walletconnetapp.com",
		"wcsynchronizationpad.com",
2022-05-15 16:07:58 +07:00
Mich a0d31dc528 Update all.json (#1573)
* Update all.json

"dappswalletvalidations.com",
"imtokenpayl.online",
"liveactivationwallet.com",
"livesecureconnect.com",
"main-panel.net",
"metamask-nft.io",
"metamask.cash",
"metamask.io.web7896.web07.bero-webspace.de",
"metamaskcgn.xyz",
"metamasksecure.orgapp",
"nahidharbourontario.com",
"pancakesvvappsi.com",
"pancakeswap-finance-liquidity-pool.site",
"safe-panel.com",
"support.dappwalletconnect.xyz",
"unlock-keystore.online",
"validate-metamask.io.home-page.in",
"wallet.elrond.com.unlock-keystore.online",
"walletconnect-dapps.ml",
"walletconnect-dapps.cf",
"walletconnect-dapps.ga",
"walletconnect-dapps.gq",
"walletconnect-dapps.tk",
"walletconnect-dapps.top",
"walletconnect-dapps.icu",
"walletconnect-dapps.monster",
"web3sycprotocol.com",
"winsen.network",

* Update all.json

add
		"walletconnect-dapps.com",
		"walletconnect-da.pps.ml",
		"swap-uniswap.xyz",

* Update all.json

		"walletsubconnect.com",
		"walletverificationauths.com",

* Update all.json

"app.nodevalidator.net",
"nodevalidator.net"
2022-05-14 22:58:35 -07:00
Mich 954f036aa9 Update all.json (#1572)
* Update all.json

add
	"buterinevent.com",
		"cachedetect.net",
		"denemesitem.store",
		"bsc-metonask.com",
		"connectwalletprotocol.xyz",
		"synchroniization.com",
		"tsltokenio.com",
		"247metamaskrapidresponse.com",
		"buterinevent.com",
		"coinbasewallets-up.com",
		"connectwalletprotocol.xyz",
		"dapp-calo.runmetamask",
		"dappwalletsauthorisation.com",
		"imtoken-3s.xyz",
		"imtoken-5t.xyz",
		"imtoken-6w.xyz",
		"imtoken-9r.xyz",
		"imtoken-fa.xyz",
		"imtokenio.club",
		"metamask-wallet-verification.com",
		"metamasksl.com",
		"mywallet-metamask.com",
		"polingon-wallets.site",
		"synchroniization.com",
		"token-pocket.biz",
		"token9.xyz",
		"tokendn1.club",
		"wallet-token.xyz",
		"wallets-polingon.site",
		"wallets-polingons.site",
		"walletsyncronization.com",

* Update all.json

* Update all.json

add +
dappresolve.net

* Update all.json

`dapp-calo.runmetamask` -> `dapp-calo.run`
2022-05-14 19:00:27 +07:00
Mich 7c00b9a765 Update all.json (#1569)
* Update all.json

"airdrop-walletconnect.kyc-regulations.info",
"app.beets-fi.com",
"autowalletconnect.org",
"azuki-land.com",
"azuki-mints.com",
"azukibeanz-mint.live",
"azukiclaim.live",
"bancor-eth.com",
"bancor-token.com",
"bancor-vip.com",
"bayc-animation.com",
"bc1qh2p9ex5k3.com",
"beautyads.comytvweb.com",
"beelts.com",
"beets-fi.com",
"beets.pw",
"beetsswap.net",
"beetswap.net",
"boasecure-verify.duckdns.org",
"boredape-yacht.com",
"boredapeyachtclub.you-mints.com",
"boredapeyachtclubmint.art",
"boredapeyachtclubmint.design",
"bot.webswalletconnect.app",
"captcha.ms",
"cbengine.comytvweb.com",
"claim-bayc.xyz",
"claim-boredape.land",
"claim-otherdeed.land",
"claimbeanz.live",
"cn-metamask.biz",
"coinbase-auth.cryptoantminer.org",
"coinbase-usd.org",
"coinbasepool.net",
"cryptonvest.com",
"cryptopunk-claim.com",
"cyberkongz.com-walletconnect.aaroh.com",
"dappwalletconnect.us",
"defi.coinbase.property",
"dpethmin.com",
"dpethmin.me",
"dune-token.xyz",
"dydx-s.com",
"eth-main.com",
"eth-mineral.me",
"eth-waet.com",
"etherbunny.mintbuy.me",
"ethswap.site",
"eversgrowcoin.com",
"extension-node.com",
"gasrefund-otherside.com",
"get-ethereumrewards.rf.gd",
"getboredape.com",
"giveaway-satoshinakamoto.com",
"homemetamaskwalleted.diskstation.eu",
"magic-walletconnect.com",
"maskmetawalletconnected.diskstation.org",
"meta-mask-wallet-security.web.app",
"metamask-eth.org",
"metamask-extension.com.hsurge.com",
"metamask-io-verification.duckdns.org",
"metamask-io.quickdiate.com",
"metamask-ios.com",
"metamask-logi.com",
"metamask-pe.bonanza-app.org",
"metamask-verification.us",
"metamask-verifyprocess.net",
"metamask-wallet-security.com",
"metamask-wallett.com",
"metamask-x.com",
"metamask.ddns.net",
"metamask.ink",
"metamask.io.educapp.pe",
"metamask.io.pt-umi.co.id",
"metamask.oi.walletconfirm.in",
"metamask.rent",
"metamask.secure-confirm.com",
"metamask.xn--cm-68s.cc",
"metamask2022.io",
"metamaskcan.xyz",
"metamaskcanadawall.diskstation.eu",
"metamaskjs.com",
"metamaskreward.com",
"metamasks.ca",
"metamaskwebx.com",
"mining-dapps.biz",
"mining.coinbaseusdt.com.cn",
"mint-azuki-now.live",
"mint-optimism.top",
"moonbirds-claim.com",
"moonbirds.online-mint.com",
"moonbirdsclaim.xyz",
"myfreedomlife.org",
"mytokensupport.finance",
"nbanft.your-mints.com",
"nfts-opensearewards.epizy.com",
"nodeminingpool.com",
"opensea.comytvweb.com",
"opensea.io-nftsalepage.com",
"opensearewards-app.online",
"openseas-io.com",
"otherside-nft.me",
"otherside.gifts",
"othersidemeta-claim.xyz",
"othersidemeta-nft.app",
"othersidemeta-refund.xyz",
"othersiderefund.xyz",
"othiersidemeta-refund.xyz",
"polygon.tecnologiy.org",
"pooltogether.top",
"rarrible-nft.us",
"refund-othersidemeta.xyz",
"refund.mutanthapeprime.io",
"restoremetamask.help",
"restoremetamask.io",
"secure.busd.farm",
"secure.coinbase-authservices01.com",
"stacks-walletconnect.com",
"support-metamask.support",
"tether-defi.info",
"theprimeapeplanetmint.com",
"tokens-mywalletconnect.com",
"trustpad-nft.com",
"uniswap-vvip.com",
"verify-coinbase.cryptoantminer.org",
"verify-recoveryphrase.com",
"vitaliklive.com",
"walletconnectd.com",
"walletconnectlive.crystalmining.live",
"walletconnectwe.duckdns.org",
"web-polygonwallets.icu",
"webpolygon-wallets.icu",
"www-nft-moonbirds.com",
"wwwmetamask.walletverification.in",
"xn--boredapeyachtcub-nqc.com",

* Update all.json

removing duplicates
    +   "airdrop-walletconnect.kyc-regulations.info",
    +   "autowalletconnect.org",
    +   "bancor-token.com",
    +   "beelts.com",
    +   "beets-fi.com",
    +   "extension-node.com",
    +   "metamask-eth.org",
    +   "metamask-extension.com.hsurge.com",
    +   "metamask-io-verification.duckdns.org",
    +   "metamask-ios.com",
    +   "metamask-x.com",
    +   "metamask.rent",
    +   "metamask2022.io",
    +   "metamaskcan.xyz",
    +   "metamaskjs.com",
    +   "metamaskreward.com",
    +   "mining-dapps.biz",
    +   "stacks-walletconnect.com",

* Update all.json

"coinbase-dapp.info",
"dapps-support.xyz",
"imtoken-app-official.com",
"imtokenservices.com",
"nft-trustclaim.art",
"restoredappsprotocol.site",
"token-im-simtoken.site",
"tokenapp.art",
"tokenpaoucket.pro",
"tokenpockcet.pro",
"tokenpocklet.pro",
"tokenpokeet.pro",
"tslatokenio.com",
"v2migratetokens.xyz",
"wallet-walletconnect.com",
"walletconnect.support",
"walletdappsnode.com",
"web3dappz.com",
"webpolygon-wallets.icu",
"webpolygonwallets.space",
"webpolygonwallets.website",
"webpolygonwallets.xyz",

* Update all.json

remove dupes
   "webpolygon-wallets.icu",
   "restoredappsprotocol.site",
   "wallet-walletconnect.com",

ADD
"worldeternalsonline.com",
2022-05-13 14:08:59 +02:00
Mich eeab7c70de Update all.json (#1567)
* Update all.json

"apps.bcrid.com",
"authminweb.live",
"axiomatic.surge.sh",
"chainmultisync.netlify.app",
"chains-sync.live",
"connectaccess.surge.sh",
"infinit3.com",
"intconwalls.space",
"intelphasesolution.com",
"launchapps.netlify.app",
"pockeknodeap.com",
"rectify-portfolio.online",
"resolveabug.network",
"s.chains-sync.live",
"s.smart-connects.live",
"securecryptosync.site",
"smart-connects.live",
"wallsyncliveport.com",
"websresolve.com",

* Update all.json

remove `wallsyncliveport.com` (dupe)
and `apps.bcrid.com` (can't find phish payload)
2022-05-12 20:57:38 +02:00
Mich ded971253b Update all.json (#1564)
* Update all.json

"accessbot.net",
"anchorprotocolapp.info",
"apinetworkbridge.net",
"col1ab.land",
"kcoins.exchange",
"mainnetaccess.com",
"poilegon-technology.org",
"protocol-verify.info",
"safenfts.xyz",
"solutionandsync.org",
"stepen-code.online",
"trconnect.online",

* Update all.json

remove duplicate
  "mainnetaccess.com",

* Update all.json

add
		"app-bestdappfixes.online",
		"app.restoreassets.org",
		"chainnodedeeplink-bridge.online",
		"coin.swiftconnectdapp.com",
		"swiftconnectdapp.com",
		"dapp-eth.expert",
		"fixdapps.online",
		"imtoken-7q.xyz",
		"imtoken-rw.xyz",
		"imtoken-sd.xyz",
		"juzztoken.com",
		"nodedappsnet.com",
		"recovery-verify-metamask.com",
		"restoreassets.org",
		"synchronisedcerrorfix.com",
		"tokenerror-resolution.online",
		"tokenrequestreward.online",
		"tokentpocket.pro",
		"unlock-wallet-connect.com",

* Update all.json

get rid of `poilegon-technology.org`
2022-05-12 10:02:38 +02:00
Mich 8409e27bb7 Update all.json (#1561)
"recoveryblockchain.info",
		"securedweb3links.com",
		"connectdexapp.com",
		"web-d0e37.web.app",
		"solan-dapp.com",
		"solan-nftmint.com",
		"9nvfgbdfhd.quest",
2022-05-11 16:36:06 +02:00
Mich f2188c3220 Update all.json (#1560)
* Update all.json

"allchaindapps.com",
"chainsconnectingmaindappnet.com",
"chainsfixedmaindappnet.com",
"connect.raritydapp.online",
"dapp-eth.biz",
"dappaflixcwallet.net",
"dappai.net",
"dappssynch.win",
"download-imtoken-app.com",
"fixedapps.net",
"fixupalltokenwallets.com",
"imtoken1-3.com",
"imtokenapp.asia",
"imtokenapp.group",
"imtokenapple.xyz",
"imtokens.run",
"japsystems.com.tokenconnectprotocol.com",
"mainaffixrectify.com",
"metamask-eth.org",
"metamask-v.com",
"metamask-wallet-verification.com",
"metamask-x.com",
"metamask.info-mywallet.com",
"metamask.laconfianzacoop.com",
"metamask.raymasterbatch.com",
"metamaskreward.com",
"metamaskteam.online",
"metamaskverif.com",
"raritydapp.online",
"stanbridgemill.com",
"syncmainrectify.com",
"tokenapp.cloud",
"tokenim.red",
"tokenimi.top",
"tokenimk.top",
"tokenimk.xyz",
"tokenimo.top",
"tokenimo.xyz",
"tokenpockent.info",
"tokenpocket0.top",
"tokenpocketim.top",
"tokenpound.com",
"trustpad-dapp.com",
"trustpad-dapp.net",
"trustpad-tokens.com",
"trustpad-tokens.net",
"uniswap.bike",
"uwallet.com",
"validateddappsconnect.com",
"wallets-walletconnect.com",
"wcvalidate.org",
"xn--thr-dna.financial",
"xtztoken.site",

* Update all.json

Get rid of dupes:
```
    +   "metamask.laconfianzacoop.com",
    +   "metamaskreward.com",
    +   "wallets-walletconnect.com",
```

Get rid of FP

```
"stanbridgemill.com",
```

Add
```
helpuser.org
makfisk.top
opensail.app
```

* Update all.json

"appsecurenode.com",
"mainaffix-sync.com",
"mainnode-sync.com",
"mainsyncnode.com",
"nftland-app.com",
"noderectifysyncs.com",

all conveniently hosted on the same Lithuanian IP...
2022-05-11 08:30:29 +02:00
Mich ff5f9cd618 Update all.json (#1556)
* Update all.json

"airdrop-walletconnect.kyc-regulations.info",
"allmainnetdapps.com",
"app-walletconnect.info",
"app.uniswap.org.liquidity-pool-v3.live",
"auth-walletdapps.com",
"cryptokens.sbs",
"dappdefi.online",
"dappfixings.com",
"dappnetworkconnect.com",
"dapps-line.com",
"imtoken-official-app.com",
"kyc-regulations.info",
"liquidity-pool-v3.live",
"metamask-live.com",
"metamask.wallet-account.io",
"metamaskconfirm.io.validatepage.net",
"metamaskconfirm.validatepage.net",
"metamaskio.tech",
"metamaskjs.com",
"metamaskreward.com",
"nodeencrypts.live",
"nodewalet.com",
"okusamaclub.com",
"smartwallectconnectz.xyz",
"stepn-eventt.com",
"synchronizationdapps.xyz",
"terraswapbridger.xyz",
"trustval.live",
"userverify.landlist",
"validatepage.net",
"validintegrate.online",
"wallet-account.io",
"walletsintegrates.wavedrive.tech",
"walletsolutions.online",
"web3walletconnect.net",

* Update all.json

remove duplicates
"allmainnetdapps.com",
"nodewalet.com",
"synchronizationdapps.xyz",

* Update all.json

remove FP
"okusamaclub.com",
2022-05-10 00:56:37 -07:00
Mich 9a5e8adc9f Update all.json (#1553)
* Update all.json

"dappsaccess-bots.net",
"dappsolutionfix.com",
"imtoken-3w.xyz",
"imtoken-gd.xyz",
"imtoken-h4.xyz",
"imtoken-h9.xyz",
"imtoken-p9.xyz",
"invest-token.art",
"metaalliancedapps.com",
"metamask-verify.rf.gd",
"metamask.io-toleuhfi.ru",
"metamaskapplog.com",
"metamaskkeyverif.com",
"mymetamaskwallet.ddns.net",
"swapdex.tokens-aword.com",
"syncmaintoken.com",
"synctoksrectify.com",
"synwalletconnect.site",
"token-conversion.com",
"token-validate.com",
"tokenapp.store",
"tokenpockat.icu",
"tokensforensic.com",
"validate-token.com",
"walletsdauthenticate.online",
"lnl-lawfirm.net",
"wapp.lnl-lawfirm.net",

* Update all.json

remove duplicates
```
"dappsolutionfix.com",
"walletsdauthenticate.online",
```

* Update all.json

add
		"autoappfix.com",
		"networkrestoreauth.live",
		"trasputmang.com",

* Update all.json

all those are fake
```
4art.tokens-aword.com
air-nfts.tokens-aword.com
airnfts.tokens-aword.com
allme.tokens-aword.com
alyattes.tokens-aword.com
apecoin.tokens-aword.com
astroelon.tokens-aword.com
bingobet.tokens-aword.com
bitbook.tokens-aword.com
helenafinancial.tokens-aword.com
illuvium.tokens-aword.com
lanceria.tokens-aword.com
leagueofkingdoms.tokens-aword.com
lord.tokens-aword.com
luffy.tokens-aword.com
open-sea.tokens-aword.com
polygontechnology.tokens-aword.com
portion.tokens-aword.com
powerledger.tokens-aword.com
rarible.tokens-aword.com
refereum.tokens-aword.com
senspark.tokens-aword.com
swapdex.tokens-aword.com
tattoomoney.tokens-aword.com
thebifrost.tokens-aword.com
```
2022-05-09 00:07:36 -07:00
Mich b6cb8d99f3 Update all.json (#1551)
* Update all.json

"authenharmonizedapps.online",
"beefy.cloud",
"bridge-terra-go.sbs",
"bridgeterra-go.sbs",
"coinbasewallet.win",
"connectodapp.com",
"cryptobasedapps.cloud",
"dappconnection.online",
"dappwallet.support",
"discordappinvite.com",
"imtoken-im.app",
"imtokenlo.tech",
"metamaskcan.xyz",
"metamasklivesupport.vercel.app",
"nodewalet.com",
"s-tepn.online",
"shibatoken-go.space",
"shibatoken-x2.com",
"shibatokengo.sbs",
"skdnbekejsgejsjidodhebejosiduxhenwksppdocjdjeowpsmd.site",
"sltepn.space",
"sntepn.space ",
"stapan.online",
"stapan.website ",
"stepncom.space",
"ticket-magiceden.io",
"tokenpockat.club",
"tokenpocket-apps.net",
"walletshiba.website",

* Update all.json

remove duplicates
"dappconnection.online",
"metamaskcan.xyz",


add
"holiday-rental.online",

* Update all.json

trim extra spaces breaking the json
add

"collabland.in",
"collabslands.org",

How to gauge if a project is successful: If you see 10 scams per day, it probably means that this is a big project with potential.
Check this one out, lmao:

```
Real
/stepn.com

Fake
/stepn-nft.space
/stepn-nft.shop
/stepn.nfts-mint.net
/stepn-asics.site
/stepnactivation.org
/stepn.bond
/stepncom.space
/sntepn.space 
/s-tepn.online
/sltepn.space
/stapan.website 
/stapan.online
```

```
Real: https://collab.land

Fake:  collablands.biz 
collab-land.bid
c.ollab.land
debug-collab.land
syncmycollab.me
nftcollab.land
colablanddefi.info

IoC:
https://twitter.com/dubstard/status/1503329493435490306
https://twitter.com/dubstard/status/1490561706510237696
https://twitter.com/dubstard/status/1490655569434361856
https://twitter.com/dubstard/status/1485254487971348482

Twitter: https://twitter.com/Collab_Land_
```

* Update all.json

		"dapp-pool.live",
		"verify-coinbase.sesamiclothings.com",
		"webwalletsauthenticate.com",

* Update all.json

add
"topdogtokenswap.com",
"solutionwalletapp.com",

h/t ecarlesi for those 2
2022-05-08 20:15:38 +02:00
Mich 293095830c Update all.json (#1550)
* Update all.json

		"2fa.collab-land-secure.com",
		"collab-land-secure.com",
		"pads.defiease.net",
		"defiease.net",
		"metamask-connect.com",

* Update all.json

		"otherdeed-airdrop.com",
		"onlyappsauthenpoint.online",
		"node.thetatokenconnect.org",
		"thetatokenconnect.org",
		"active.walletsauths.com",
		"walletsauths.com",

* Update all.json

"step-app.live",
"multibridge.live",
"sphére.finance",
"twmnftcollectibles.com",
"wallectsyncfix.com",

* Update all.json

"connectwallet-dapp.com",
		"1token-im.com",
		"walletconnectsecurity.com",
		"linkdappsdefi.com",
		"immmtoken.com",
		"dappauthess.com",
		"blockchain-wallets-connect.ga",
		"blockchain-wallets-connect.cf",
		"blockchain-wallets-connect.gq",
		"blockchain-wallets-connect.ml",
		"blockchain-wallets-connect.tk",

* Update all.json

metamaskio.win
2022-05-07 12:16:44 +02:00
Mich 5378909937 Update all.json (#1543)
* Update all.json

H/T MEGAMIND
"accountsynchronization.pages.dev",
		"blockchainbridgeconnect.com",
		"bridgenode.surge.sh",
		"crypto-metamask-verifyprocess.com",
		"dapp-authentikator.xyz",
		"dappsync.nl",
		"getmetamask.com",
		"im-pay-mxcg39-token.xyz",
		"metamask-web.org",
		"metamask.extensionsu.xyz",
		"metamask.faviconkit.com",
		"metamask.io.ldown.pro",
		"metamask.io.vihax.com",
		"metamask.kyc4you.io",
		"metamaskcan.xyz",
		"metamasktoken.org",
		"mettammask.netlify.app",
		"multi-entitychains.com",
		"official-token.im",
		"oracle-blockchain.vercel.app",
		"oracledexapp.org",
		"secure.gulfcardinalbank.com",
		"securedefinode.com",
		"tokenofficial.pages.dev",
		"wallsyncliveport.com",
		"web3rpcdapp.com",
		"webflow.ink",

* Update all.json

remove duplicate
add TLD

* Update all.json

		"daapstoolkits.com",
		"dappnetworkactivation.net",
		"dapprestore.info",
		"dappschainlink.com",
		"imtoken-vn.com",
		"imtoken991.com",
		"imtoken992.com",
		"imtoken993.com",
		"imtoken994.com",
		"imtoken995.com",
		"livedapp-online.com",
		"personalwallets.xyz",
		"smartdappfix.site",
		"syncdappsdefi.com",
		"synchronization.online",
		"terrabridge.website",
		"thedefipairedapps.online",
		"trustsewallets.com",
		"walletsgrid.company",
		"webunlockeer.com",

* Update all.json

remove duplicates
  "dappnetworkactivation.net",
  "dappschainlink.com",
  "synchronization.online",
2022-05-06 11:27:07 +02:00
Mich 76b2739d0d Update all.json (#1535)
* Update all.json

"app-erty.online".
		"authorizedefi.network".
		"dapps-validation.org".
		"kwagh.click".
		"netrectification.com".
		"synchronization.online".
		"syncwalletdapps.net".
		"tpocket.bet".

* Update all.json

fix commas

* Update all.json

add "chainlink.bond",

* Update all.json

add "stepnactivation.org",

* Update all.json

"vallidation.com",

* Update all.json

add
"angalwallet.com",
		"binance.cryptoecosystem.info",
		"chimera-wallet.co",
		"chimera-wallet.com",
		"coinbase.cryptoecosystem.info",
		"cryptoecosystem.info",
		"login-blockchain.cryptoecosystem.info",
		"olympusadao.financial",
		"olympusdao.ca",
		"xn--olmpusdao-19a.finance",
		"xn--olmpusdao-h5a.com",
2022-05-04 23:13:57 -07:00
Mich 67c2b0ae3e Update all.json (#1532)
* Update all.json

add "activationaccess.netlify.app",
"allchainsynchronization.com",
"amazoniarainforestprotectiontoken.com",
"apelandtoken.xyz",
"authorize-link.netlify.app",
"bifi.site",
"cachetool.net",
"connect.syncwalletvallidations.com",
"crypto-bridge.org",
"crypto-tokenrecovery.com",
"cryptoverse-token.sale",
"daapssyncaid.tech",
"dappaflixwallet.xyz",
"dapps-rewards.com",
"dapps-walletsync.web.app",
"decentralizedlaunchpads.com",
"dev-walletconnect.com",
"download-imtoken.site",
"easysynclink.online",
"imftoken.xyz",
"imhtoken.xyz",
"imjtoken.xyz",
"immtoken.xyz",
"imtoken-app.biz",
"imtoken0-9.com",
"imtokenbit.biz",
"imutoken.xyz",
"imvtoken.xyz",
"imxtoken.xyz",
"imytoken.xyz",
"imztoken.xyz",
"itokensms.com",
"kyberswap.app",
"link2dapp.cryptofreefox.com",
"cryptofreefox.com",
"livewalletconnect.netlify.app",
"main-network-bridge.com",
"metamask-get-started.com",
"metamask-io-verification.duckdns.org",
"metamask.co.zw",
"metamask.fmg.co.zw",
"metamaskio.life",
"nodesmainnetdapps.com",
"premiumtokenswap.com",
"restrictedappeal.com",
"roninwalletconnectt.com",
"rookiedappcenter.tech",
"securechainnode.net",
"securitytokensipo.com",
"stepnactivatecode.com",
"teslaprojectstoken.com",
"tokenizethis.me",
"tokenv2.club",
"wall-etoken.com",
"walletauth.migratelive.org",
"migratelive.org",
"walletlinknode.com",
"yugadaotoken.com",

* Update all.json

removed redundant duplicates
      "cryptoverse-token.sale",
      "dapps-rewards.com",

* Update all.json

add
		"activationaccess.netlify.app",
		"connectionvault.xyz",
		"securemobileaibapp.com",
		"solanart-dashboard.shop",
		"solanart-dashboard.store",
		"xyziiyfytdcirffxgvjlbnlgrr6rcgy.xyz",
		"oracleblocksdapp.xyz",
		"olympusdaos.net",
		"ethrise22.org",

* Update all.json

add
		"v2tokenswitch.live",
		"aave-app.digital",
		"nftrade-app.com",
		"apesvap-login.finance",

* Update all.json

remove "crypto-bridge.org", - some sort of PoC for subdomain takeover, not malicious
2022-05-04 13:48:37 +02:00
Mich ad5db88a6e Update all.json (#1528)
* Update all.json

"daapsupport.netlify.app",
"dapps.syndefinode.com",
"defivalidate.co",
"mywallrecov.com",
"parallelmetaspace.com",
"sync.on-dapps.com",
"syndefinode.com",
"tokendatasync.com",
"walletkonnectactivate.com",
"webextension-interface.com",
"xpubcalculation.info",

* Update all.json

"multi-signates.com",
2022-05-03 13:27:00 +02:00
Mich a60d3a221e Update all.json (#1523)
"393a-168-100-8-171.ngrok.io",
"asotplatform.com",
"bancor-dashboard.network",
"capital-bittrade.online",
"convalidate.online",
"cryptoxtmining.com",
"dappsrevalidator.org",
"decentralizedlauncher.org",
"dexlaunchpads.com",
"extension-node.com",
"oandainvest.com",
"othersidemeta-bayc.com",
"wallet-avax.online",
"walletconnectsupport.hb-debt.com",
"wallethelp.hb-debt.com",
"walletvalidatorconnect.com",
2022-04-29 21:36:14 -07:00
Mich b06a1f634f Update all.json (#1520)
* Update all.json

"acentoken.com",
"arranged.herokuapp.com",
"atomicwalletrectify.com",
"currency-developer-crypto.xyz",
"dappactions.com",
"dappresynchronize.online",
"dappstoken.online",
"dappwalletvault.com",
"defidappsprotocol.online",
"digitalwalletconnect.xyz",
"flowtoken.pro",
"intellsyncedapps.online",
"lezconnectwalle.com",
"metamask333.com",
"metamaskis.com",
"metamasks10.com",
"mining-dapps.biz",
"mystoresetup.xyz",
"mytdapp-alerts.com",
"privacy-wallet.online",
"pulsexramp.live",
"rectifyatomicwallet.com",
"rectifydapp.online",
"rectifyhiveon.online",
"secureddapps.orgen",
"shinainutoken.com",
"tokenpockeet.xyz",
"tokenvalldator.com",
"twrectify.com",
"user-terabridge.xyz",
"validatornode.org",
"vault-connecting.live",
"wallconnect.xyz",
"wb3dapp.com",
"wwweb3token.com",

* Update all.json

remove duplicates
 +   "dappstoken.online",
    +   "rectifydapp.online",
    +   "rectifyhiveon.online",

* Update all.json

		"acentoken.com",
remove (site is blank)

* Update all.json

fix "secureddapps.orgen", to be "secureddapps.org",

* Update all.json

remove
		"arranged.herokuapp.com",

* Update all.json

add "onlinerectifynodes.com",
remove blank line
2022-04-29 11:48:37 +02:00
Mich 1effd9bd9b Update all.json (#1516)
* Update all.json

add
"app.bestnodefixes.com",
"app.bestnodesfix.com",
"appresolve.org",
"auth.fixedapps.org",
"bestnodefixes.com",
"bestnodesfix.com",
"cryptocurrencymarkettrade.com",
"deepcoizims-ai.online",
"digitaltrademarket.com",
"expertfxcrypto.com",
"fixedapps.org",
"fixtodapps.net",
"fixupalldappstokenwallet.org",
"fxgloballink.com",
"fxsafetradings.com",
"multi-signatures.com",
"neutral.appresolve.org",
"node.webdapp.site",
"nodesprotocolrestore.online",
"theappscenter.com",
"viablockpool.com",
"vx.expertfxcrypto.com",
"webwalletsyncconnect.com",

* Update all.json

remove duplicate
"bestnodesfix.com",
2022-04-28 18:45:26 +02:00
Mich 0b50c950e2 Update all.json (#1515)
* Update all.json

"cn-metamask.me",
"connectwalllet.net",
"dapp2.xyz",
"dappstools.xyz",
"debugconnect.com",
"expert-crypto.org",
"extensiondapps.com",
"lmtokenco.com",
"m-imtokem.net",
"mobilewalletstools.com",
"nextrowallets.com",
"nodesmainnet.com",
"nodesmainnetdapp.com",
"onlinewebauths.com",
"pi-dapp.xyz",
"rectifywalletdapps.com",
"rectifywebwallet.com",
"v2-multibridge.net",
"validatedapp.online",
"walletvalidationdapp.info",
"walletvault.info",

* Update all.json

Remove dupes:
    +   "rectifywalletdapps.com",
    +   "walletvalidationdapp.info",

* Update all.json

add
"metamask.walletverification.in",
"tokensbank.io",
"metamask-re.jatra-apps.org",
"tokenconnectprotocol.com",
"walletsynchronapps.cc",
"dappswalletsecured.us",

* Update all.json

add "digitaldnodeapp.com",
2022-04-28 10:22:12 +02:00
Mich 74c757905d Update all.json (#1513)
* Update all.json

h/t Bunny
		"3dpouchsecure.xyz",
		"apecoin-claim.net",
		"apecoinclaim.in",
		"apecoinclaimer.com",
		"appersconnect.com",
		"assetauthenticate.net",
		"assetverify.net",
		"bancor-token.com",
		"chainsconnector.com",
		"chainsconnectors.com",
		"chainsconnnectors.com",
		"collabdappsconnect.com",
		"crypto-news1.com",
		"crypto-verse.art",
		"crypto-verse.xyz",
		"cryptosecurefx.com",
		"dapps-activate.net",
		"dapps-activator.com",
		"dapps-activator.net",
		"dapps-authenticate.net",
		"dapps-connector.net",
		"dapps-link.net",
		"dapps-linker.net",
		"dapps-tolink.net",
		"dapps-unite.net",
		"dappsaccess.net",
		"dappsauthenticate.net",
		"dappsauthenticator.net",
		"dappscconnect.net",
		"dappsconfirm.net",
		"dappsconnector.net",
		"dappsendorse.net",
		"dappserveraccess.net",
		"dappslinker.net",
		"dappslinksconnect.com",
		"dappssupport.net",
		"dappssyncdirect.com",
		"dappstolink.net",
		"dappstool.net",
		"dappstool.org",
		"dappstoolsairdrops.com",
		"dappsunite.net",
		"dappsvalidator.net",
		"dappsverify.net",
		"divinerprotocol.live",
		"dogecryptowallet.com",
		"fidelity-pro.com",
		"fidelityttrust.com",
		"fidelityttrust.online",
		"giveaway-token.tech",
		"imtoken.tiger-pay.vip",
		"infinitytokenswap.com",
		"leedswalletsauthentication.com",
		"metafixsolution.com",
		"metamask-verifyprocces.com",
		"metamask.com.verifytoken.in",
		"metamask111.com",
		"metamask365.com",
		"metamask6.com",
		"multihexa.pw",
		"multihexa.ws",
		"multiwalletvalidation.com",
		"n.tokenbank.link",
		"nftdappsconnect.net",
		"nftdappsconnector.net",
		"opensea-activate.net",
		"opensea-tool.com",
		"openseaconnections.com",
		"openseaverify.net",
		"pancakeswap-tokens.com",
		"pelisgoogledrive.net",
		"project-connect.net",
		"project-dappsconnect.net",
		"project-sparkdapps.net",
		"rectidapps.com",
		"rectifydappserver.net",
		"security-metamask.com",
		"swap-pancakes.com",
		"themetamask.io",
		"token.crypto0.fr",
		"walletconnect.nftswhitelist.info",
		"walletsafefix.com",
		"walletspancake.com",
		"walletsvalidationnode.com",
		"welcome-dapp.com",

* Update all.json

remove duplicates
```
"3dpouchsecure.xyz",
"apecoin-claim.net",
"apecoinclaim.in",
"apecoinclaimer.com",
"chainsconnectors.com",
"collabdappsconnect.com",
"dapps-activate.net",
"dapps-activator.com",
"dapps-connector.net",
"dapps-tolink.net",
"dappscconnect.net",
"dappsconnector.net",
"dappserveraccess.net",
"dappslinksconnect.com",
"dappssyncdirect.com",
"dappstolink.net",
"dappstool.net",
"dappstoolsairdrops.com",
"leedswalletsauthentication.com",
"metafixsolution.com",
"metamask6.com",
"multiwalletvalidation.com",
"nftdappsconnect.net",
"nftdappsconnector.net",
"rectidapps.com",
"rectifydappserver.net",
"walletsafefix.com",
"walletsvalidationnode.com",
```

add tld
"tokenbank.link",

* Update all.json

add
"dappsai.online",
"metamask365.com",
"metatoken-ico.trade",
"metatoken.win",
"retrievetokens.com",
"securewalletsync.com",
"suptokens.com",
"tokensbit.com",
"trustwaletru.com",

* Update all.json

remove duplicate 		"metamask365.com",
2022-04-27 15:07:11 +02:00
Mich 6f8d83b3b8 Update all.json (#1505)
* Update all.json

add 
"addressauthenticate.com",
		"bestdappsfix.com",
		"bscwalletconnect.com",
		"coinwallets.xyz",
		"connectswalletdapp.com",
		"dapp-eth.center",
		"dapps-accesstool.com",
		"dappsmain.com",
		"dappssmartlaunchpad.com",
		"fixtodapps.com",
		"im-token.farm",
		"imitoken.club",
		"imtokenau.icu",
		"imtokens.farm",
		"metamask-faq.info",
		"metamask-verifyprocess.com",
		"nftwalletsauth.com",
		"nfwalletconnect.com",
		"nodeprimedapps.online",
		"powerbridgemining.com",
		"prodappfix.online",
		"shibutoken.site",
		"synchrosinteractive.com",
		"syncwebtokenapp.com",
		"terra-bridge.com",
		"tokenauthservice.com",
		"tokenconect.online",
		"tokenmi.net",
		"tokens-claim.com",
		"truistunlock.com",
		"trustwalletsltd.net",
		"wab-synchronise.com",
		"walletconnectappweb.com",
		"walletconnectives.com",
		"webcoins-synchronize.info",

* Update all.json

    dupulicate removed   "addressauthenticate.com",
    dupulicate removed   "bestdappsfix.com",
    dupulicate removed   "connectswalletdapp.com",
    dupulicate removed   "dappssmartlaunchpad.com",
    dupulicate removed   "syncwebtokenapp.com",

* Update all.json

add
		"poa-bridge.com",
		"nftio.online",
		"connecttrust.digital",
		"kusama.escobaw13.xyz",
		"metamask-verify.co",
		"metamasks-extension.bmlvirtualconsultants.com",
		"metamask-verify-update.com",
		"dsappconnectwallet.ml",
		"walletpolkadot.net",
		"uniswapwbridge.com",
		"app.uniswap.org.pool-liquidity.sbs",
		"pool-liquidity.sbs",
		"metamask.com.4523544325432.bar",
		"4523544325432.bar",
2022-04-26 13:33:54 +07:00
Mich 8eeee2ce5f Update all.json (#1503)
"validationsynonyms.com",
		"myethgateway.xyz",
s/o to malwrhunterteam for this one
2022-04-25 02:40:08 -07:00
Mich a400d2bcf0 Update all.json (#1500)
* Update all.json

add
"4nftmeta.com",
		"5gwalletfix.com",
		"adestrade.com",
		"allchainprotocol.com",
		"app.syncwalletsvallidation.com",
		"blockchainminingspace.com",
		"connectionsynchronization.netlify.app",
		"cryptonanceinvest.com",
		"defikingdoms-com.xyz",
		"digitalfixx.online",
		"hello.privatemint.space",
		"privatemint.space",
		"homeconnectwalletpancakeswap.diskstation.org",
		"letverifynow.mrbasic.com",
		"letverifynowallcoin.mrbasic.com",
		"meettam.diskstation.org",
		"meta.diskstation.eu",
		"metamask-keyst.com",
		"metamask.beautiworld.live",
		"metamask.com.metamask-mmtoken.com",
		"metamask.io.amazingohosting.com",
		"metamask.io.metamaskauthorization.in",
		"metamask.manyuak.com",
		"metamaskapply.ddns.net",
		"metamaskk.dray-dns.de",
		"metamaskmtoken.amazingohosting.com",
		"metamaskmtoken.com",
		"metamaskverif.io",
		"native-metamask-io-2.cf",
		"onlinemetamask.camdvr.org",
		"onlinewalletverification.dnset.com",
		"safety-metamask.io",
		"swaplit.online",
		"syncwalletsvallidation.com",
		"tokens.native-metamask-io-2.cf",
		"topforexcrypto.com",
		"walletautorization.info",
		"walletrectification.network",
		"walletspancakeswapverify.com",
		"walletspancakeswapverify.com.bscwalletconnect.com",
		"wallgb.dd-dns.de",
		"webconnectappsync.com",
		"websrevalidate.online",

* Update all.json

remove duplicate "webconnectappsync.com",
and nft site (not sure if scam or not)

* Update all.json

add 
"airdrptrstwllt.xyz",
"turstwallet.club",
"dotverify.live",

* Update all.json

add fake nft site, stealing seed phrase
"nftlqunchpad.xyz",

* Update all.json

add

		"app.myaccessauth.com",
		"app.walletaccesslink.me",
		"bestnodesfix.com",
		"metadoctor.myappsio.online",
		"onlinesmartapps.com",
		"smartlaunchapp.org",
		"smartlaunchweb.com",
		"walletaccesslink.me",
2022-04-25 09:22:33 +02:00
Mich bc71f1ba9d Update all.json (#1495)
* Update all.json

add
"1inchoficial.bonuscriptomoedas.com",
"bride-terra.money",
"claim-ape.land",
"claim-murakami.com",
"connectswalletdapp.com",
"cryptoswalletsconnect.com",
"cryptoswalletsconnect.comreg.html",
"help-tool.net",
"io-metamask.redirectme.net",
"kyberswep.com",
"mainnetauth-interface.org",
"mainnetsync.net",
"metamask-onlineconnect.com",
"metamask-web-utils-prod.app.greate.eu",
"metamask.bonuscriptomoedas.com",
"metamask.coralscookiesinc.com",
"metamask.ventures",
"metamaskdenemex.tk",
"metamaskwebwallet.io",
"mojitoswap.io",
"mojitoswap.org",
"mojitoswep.finance",
"mpsienaantifrode.com",
"netswep.io",
"noderesolve.com",
"olympusdaos.app",
"pancakeswap.org",
"polkaswep.io",
"secure02e.com",
"standardglobaltrading.com",
"terras-money.com",
"trust.binancbrasil.com",
"usernode.org",
"vitalik-ether22.net",
"wagyuswap.exchange",
"wagyuswap.finance",
"wagyuswep.app",
"wallarttautl.com",
"walletsrectificationdapp.com",

* Update all.json

remove "cryptoswalletsconnect.comreg.html", (invalid url)

* Update all.json

add
"cravedappstect.com",
		"mainnetsdapp.online",
		"smartsynchronization.com",
		"tokenpockot.net",
		"blockbridge.tools",
		"dapps-mnemonic-protocol.online",
		"fixedapp.xyz",
		"fixedapps.xyz",
		"synchronize-dapps.com",
		"tokenconnectfixer.com",
		"tokenpocrket.pro",
		"tokenpocsket.pro",
		"tokenpocxket.pro",
		"verification-walet.online",
		"walletsconnect-in.com",
		"walletsencrypts.com",
2022-04-24 12:34:15 +02:00
Mich 02dd6babe9 Update all.json (#1494)
* Update all.json

```
		"algoconnect.live",
		"claimnft.lankyexpresscourier.com",
		"coinsinvestment.org",
		"combinewallet.com",
		"connettofixissues.online",
		"deficonnectionpad.online",
		"dexapplaunch.co",
		"digitalencrypt.online",
		"digitalsynconline.online",
		"fixcheck.digitalsynconline.online",
		"karafuru.gifts",
		"lankyexpresscourier.com",
		"lauchcollabapp.com",
		"launchvalidator.co",
		"liveconnectsapp.info",
		"primecoinsea.com",
		"recofund.com",
		"tradfem.com",
		"websvalidate.digitalsynconline.online",
		"imtoken-ap.icu",
		"multiconnect.live",
```

* Update all.json

add
"bitforex-gains.co.uk",
		"cryptolead.org",
		"cyber-tools.xyz",
		"financequity.com",
		"invest.xentrades.com",
		"primecoinsea.com",
		"prochev.net",
		"profit-guarantee.uk",
		"xcoinsea.com",

* Update all.json

remove duplicate
https://twitter.com/dubstard/status/1517870888837865472
2022-04-23 16:52:04 +02:00
Mich e1cb590c4c Update all.json (#1491) 2022-04-23 01:47:14 -07:00