pezkuwichain/phishing
1
0
Fork 0
mirror of https://github.com/pezkuwichain/phishing.git synced 2026-04-23 08:28:04 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,532 Commits 1 Branch 0 Tags
8672f4e819b898aec6defc28bc4e127cf74d00a7
Commit Graph

7532 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jaco Greeff 52e759b0f9 Additional addresses to cron chgeck (#217) 2021-04-03 07:15:44 +02:00
Github Actions c12f5db67d [CI Skip] release/stable 0.6.56 
skip-checks: true
 2021-04-03 05:05:44 +00:00
Mich 16aa695358 add new bad URL (#216) 
registered today
 2021-04-03 07:03:48 +02:00
Github Actions cf8fcdc3d7 [CI Skip] release/stable 0.6.55 
skip-checks: true
 2021-04-02 19:27:33 +00:00
Jaco Greeff b492f34a62 Additional addresses via cron (#215) 2021-04-02 21:25:36 +02:00
Github Actions 9fb9d1bb07 [CI Skip] release/stable 0.6.54 
skip-checks: true
 2021-04-02 12:22:13 +00:00
Mich d0f0e37552 Add new bad URL (#213) 
polkadot-promo.net

advancedpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
goldpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
polkadot[.]casa/#top-widget1 - some sort of bitcoin ponzi, not related to DOT, ignoring
polkadotsevent[.]com - landing page, will monitor it
polkadot365[.]com - landing page, will monitor it
polkadotbank[.]com - "info@blockchain.st" 💁‍♂️😕
 2021-04-02 15:20:11 +03:00
Github Actions 1b713fe3a2 [CI Skip] release/stable 0.6.53 
skip-checks: true
 2021-04-02 04:50:19 +00:00
Jaco Greeff d03f92fba2 Update addr (as detected) (#212) 
* Update addr (as detected)

* Remove dupe
 2021-04-02 06:48:09 +02:00
Mich 36b2176f8c Add new bad URL (#211) 
Freshly registered. Scam is not yet set up.

Bad IP hosting many other phish.
https://www.virustotal.com/gui/ip-address/198.54.126.114/relations

Based on the registrar + bad IP combo = blocking in advance, no need to wait for scam to be setup.
 2021-04-02 06:47:32 +02:00
Mich 154752988b Add new wallet connect clones (#210) 
wallets-connect.net ➡ https://urlscan.io/result/e2fc43a1-a8ec-438a-a194-ee3f5bc62578/
walletbloksconnect.live ➡ https://urlscan.io/result/8eb53d9c-2a49-4a18-bde3-71580e23f215/
walletconnectbot.com ➡ https://urlscan.io/result/aadc4b34-7420-4a1b-aca1-0256bafd1c73/
xn--wlletconnect-cbb­.com ➡ https://urlscan.io/result/babc8cc6-c2c6-4c10-af2d-42c0b149bb8f/

Yesterday found those but trezor and uniswap dont support dot, so only adding the fake multi wallets.
 2021-04-02 07:26:05 +03:00
michalisFr 8547dc23d3 Added wallets-connect[.]net (#209) 
Added wallets-connect[.]net 
Multi-wallet phishing site
 2021-04-02 07:24:51 +03:00
Github Actions d40098d8ae [CI Skip] release/stable 0.6.52 
skip-checks: true
 2021-04-01 12:21:31 +00:00
michalisFr 22a09c4532 Added 1sgexchange[.]com (#207) 
1sgexchange[.]com imitating 1sg stable coin and running a giveaway for DOT on TG (claimpolkadot[.]org)
 2021-04-01 15:19:18 +03:00
Github Actions 34fac9a0b2 [CI Skip] release/stable 0.6.51 
skip-checks: true
 2021-03-30 17:07:58 +00:00
Mich 4364013951 Add new bad url (#206) 
Not necessarily polkadot phishing per se, more like rug pull / pump and dump token abusing the projects good name and image.
polkastarter.ai

Suspect bad "contract" 0x7b1Df8e80ce3F5AF35ed4B9c971916A7f62c847D
 2021-03-30 20:05:58 +03:00
Github Actions c69641e75d [CI Skip] release/stable 0.6.50 
skip-checks: true
 2021-03-30 15:26:47 +00:00
Jaco Greeff 10f26cd7c8 Additional addresses (#205) 2021-03-30 17:24:48 +02:00
Github Actions d93515fead [CI Skip] release/stable 0.6.49 
skip-checks: true
 2021-03-30 15:22:51 +00:00
Mich 6fbf01c939 add new bad URL (#204) 
claimpolkadot.org
Registered On:2021-03-30
 2021-03-30 17:20:59 +02:00
Github Actions bf92635273 [CI Skip] release/stable 0.6.48 
skip-checks: true
 2021-03-30 07:04:06 +00:00
Jaco Greeff a5213bced4 Additional cron address checks (#202) 2021-03-30 09:01:55 +02:00
Github Actions 23139859da [CI Skip] release/stable 0.6.47 
skip-checks: true
 2021-03-30 06:43:33 +00:00
brettkolodny b0ea476e1e Update all.json (#200) 
* Update all.json

* Update all.json
 2021-03-30 08:41:25 +02:00
Github Actions e654304c5d [CI Skip] release/stable 0.6.46 
skip-checks: true
 2021-03-30 05:25:15 +00:00
Mich 42e36c0d92 Add new bad URL (#201) 
fake "wallet" stealing polkadot (and other) mnemonic seed phrase
 2021-03-30 08:23:16 +03:00
Github Actions 3e5b728c4f [CI Skip] release/stable 0.6.45 
skip-checks: true
 2021-03-29 16:29:41 +00:00
Mich f2ac488ccd Add new bad url (#199) 
Another day, another scam.
Domain: polkadot-bonus.live
Registrar: Hostinger, UAB
Registered On: 2021-03-28
 2021-03-29 19:27:14 +03:00
Github Actions e91b03bba2 [CI Skip] release/stable 0.6.44 
skip-checks: true
 2021-03-29 12:21:04 +00:00
michalisFr e13ce8415f Update all.json (#197) 
Added p0lkadot[.]network. A wordpress site without any content atm
 2021-03-29 14:19:02 +02:00
michalisFr bdb4e7c123 Update address.json (#196) 
Added address 1qmaACn27JqK2hsg24n8AaptPtNqNMWKNXUvySnBuWzdQ8x for polkadot-autopool[.]com
 2021-03-29 14:18:32 +02:00
Mich 5938a5f5d5 Update all.json (#195) 
Fake ICO
Instead of smart contract it is simply a wallet.
It is not a polkadot wallet though, erc20/eth, but due to the fact that it uses "polkastarter" and the purple dot branding adding for completeness.
 2021-03-29 14:18:08 +02:00
michalisFr 5c061412d1 Update all.json (#194) 
claimpolka.com
3xexchange.io
 2021-03-29 14:17:18 +02:00
Github Actions 20da194cc0 [CI Skip] release/stable 0.6.43 
skip-checks: true
 2021-03-29 09:32:04 +00:00
Mich 6e58e3d212 Update all.json (#193) 
Add new bad URL
Bogus token "0x6B39f494fb6c9b1193f9E0fBd2Ed3d9D2Be2b18f"
Fake sence of urgency - hurry only 40 minutes left until sale ends bla bla.

Bad wallet shared with nansen.
The same IP also hosts a fake UniSwap clone and so on.
 2021-03-29 12:29:51 +03:00
Github Actions 7fd988681f [CI Skip] release/stable 0.6.42 
skip-checks: true
 2021-03-28 09:37:05 +00:00
Mich 9cfc14e297 Add new bad URL (#191) 
Domain: polkadot-get.org
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registered On: 2021-03-16
scam wallet
1s3B8f5dJbtV4rVTZs1WNRpzKCUJWxK2zULErjmA52Do2SF
 2021-03-28 11:34:56 +02:00
Github Actions b619f8c849 [CI Skip] release/stable 0.6.41 
skip-checks: true
 2021-03-27 20:43:07 +00:00
Mich 85455c068d Add new bad URL (#190) 
polkadot-autopool[.]com 
Registered 2021-03-26
 2021-03-27 21:40:50 +01:00
Github Actions 7d9adcfd0b [CI Skip] release/stable 0.6.40 
skip-checks: true
 2021-03-27 08:45:35 +00:00
Mich 1d00d40e94 Update all.json (#189) 
polkadot-bonus[.]org

Scam is not set up yet.
 2021-03-27 09:43:25 +01:00
Github Actions c3247177a4 [CI Skip] release/stable 0.6.39 
skip-checks: true
 2021-03-26 19:09:03 +00:00
Mich f081d9d283 add new bad url, just registered (#188) 
Pretty high confidence this is a future phish targeting polkadot, due to the deceptive domain name and bad IP used in numerous other scams historically.
Nuking in advance.
https://urlscan.io/ip/162.0.215.24
 2021-03-26 20:06:48 +01:00
Github Actions 6383496cc2 [CI Skip] release/stable 0.6.38 
skip-checks: true
 2021-03-26 15:15:14 +00:00
Mich 8ca11665a1 Add new bad URL (#187) 
Add new bad URL, registered today, on bad IP hosting only scams.
polkadot-airdrops.live [198.187.29.28]
Scam is not even set up yet.

Staying ahead of the scammers!
 2021-03-26 16:12:50 +01:00
Github Actions 061b5b5f9e [CI Skip] release/stable 0.6.37 
skip-checks: true
 2021-03-26 10:48:28 +00:00
Mich dbbd6e36d6 Update all.json (#186) 
Added new bad URL

Resolve-ASN "polkadot-online.com"
IPAddress: 198.23.156.170
ASNumber: 36352
ASPrefix: 198.23.156.0/22
Locale: US
Description : AS-COLOCROSSING, US
whois "polkadot-online.com" | Findstr "Registrar: date"
Updated Date: 2021-03-25T18:30:00Z
Registrar: OwnRegistrar, Inc.
Get-CertTransparencyInfo "polkadot-online.com" -ErrorAction SilentlyContinue | findstr issuer
issuer_ca_id: 183267
issuer_name: C=US, O=Let's Encrypt, CN=R3
 2021-03-26 11:46:20 +01:00
Github Actions a7cf166dfe [CI Skip] release/stable 0.6.36 
skip-checks: true
 2021-03-24 11:04:29 +00:00
michalisFr 360fd0a36e Update all.json (#185) 
Added polkadotbonus.com (from scam TG group)
 2021-03-24 12:02:23 +01:00
Github Actions 369cd39b9c [CI Skip] release/stable 0.6.35 
skip-checks: true
 2021-03-23 13:27:25 +00:00