pezkuwichain/phishing
1
0
Fork 0
mirror of https://github.com/pezkuwichain/phishing.git synced 2026-04-23 02:38:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,548 Commits 1 Branch 0 Tags
8a2ceb8a4e75bcc2c6560ef4513f2bfba418ca37
Commit Graph

5358 Commits

Author SHA1 Message Date
Github Actions cd1c504b73 [CI Skip] release/stable 0.6.67 
skip-checks: true
 2021-04-07 18:28:51 +00:00
michalisFr 84f98782d1 Update all.json (#228) 
Two more:
polkadotjs.online
polkadot-airdropevents.network
 2021-04-07 21:26:39 +03:00
michalisFr 02a5d9e4a8 Update all.json (#227) 
Another one: polkadot.casa

Some sort of investment fraud for bitcoin. I guess all bitcoin domains were taken.
 2021-04-07 21:25:51 +03:00
Github Actions 379bb62a7b [CI Skip] release/stable 0.6.66 
skip-checks: true
 2021-04-07 16:59:11 +00:00
michalisFr 25b8af2c2a Update all.json (#226) 
Added 
- walletweb.net 
- wallets-validation.com
- walletconnectsupport.com
- walletconnect.buzz
- kusama.fund
- polkapool.live
- mynodeswallet.online
- walletconnects.support
- walletconnect.biz
- substrate.mobi
 2021-04-07 19:57:07 +03:00
Bill Laboon 762692c377 Add "Polkadoot" (#225) 
Definitely a scam, asks for Bitcoin wallet when signing up but due to name, I think it makes sense to add here
 2021-04-07 12:29:41 +02:00
Jaco Greeff 8dc6e8d0ec Add whitelist-network.com (#221) 2021-04-05 11:50:56 +02:00
Github Actions 58d098278b [CI Skip] release/stable 0.6.58 
skip-checks: true
 2021-04-04 09:39:20 +00:00
Mich 35d55d3cab Add new bad URL (#220) 
Known bad TLD, new subdomain.
 2021-04-04 12:37:16 +03:00
Github Actions c12f5db67d [CI Skip] release/stable 0.6.56 
skip-checks: true
 2021-04-03 05:05:44 +00:00
Mich 16aa695358 add new bad URL (#216) 
registered today
 2021-04-03 07:03:48 +02:00
Mich d0f0e37552 Add new bad URL (#213) 
polkadot-promo.net

advancedpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
goldpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
polkadot[.]casa/#top-widget1 - some sort of bitcoin ponzi, not related to DOT, ignoring
polkadotsevent[.]com - landing page, will monitor it
polkadot365[.]com - landing page, will monitor it
polkadotbank[.]com - "info@blockchain.st" 💁‍♂️😕
 2021-04-02 15:20:11 +03:00
Github Actions 1b713fe3a2 [CI Skip] release/stable 0.6.53 
skip-checks: true
 2021-04-02 04:50:19 +00:00
Jaco Greeff d03f92fba2 Update addr (as detected) (#212) 
* Update addr (as detected)

* Remove dupe
 2021-04-02 06:48:09 +02:00
Mich 36b2176f8c Add new bad URL (#211) 
Freshly registered. Scam is not yet set up.

Bad IP hosting many other phish.
https://www.virustotal.com/gui/ip-address/198.54.126.114/relations

Based on the registrar + bad IP combo = blocking in advance, no need to wait for scam to be setup.
 2021-04-02 06:47:32 +02:00
Mich 154752988b Add new wallet connect clones (#210) 
wallets-connect.net ➡ https://urlscan.io/result/e2fc43a1-a8ec-438a-a194-ee3f5bc62578/
walletbloksconnect.live ➡ https://urlscan.io/result/8eb53d9c-2a49-4a18-bde3-71580e23f215/
walletconnectbot.com ➡ https://urlscan.io/result/aadc4b34-7420-4a1b-aca1-0256bafd1c73/
xn--wlletconnect-cbb­.com ➡ https://urlscan.io/result/babc8cc6-c2c6-4c10-af2d-42c0b149bb8f/

Yesterday found those but trezor and uniswap dont support dot, so only adding the fake multi wallets.
 2021-04-02 07:26:05 +03:00
michalisFr 8547dc23d3 Added wallets-connect[.]net (#209) 
Added wallets-connect[.]net 
Multi-wallet phishing site
 2021-04-02 07:24:51 +03:00
michalisFr 22a09c4532 Added 1sgexchange[.]com (#207) 
1sgexchange[.]com imitating 1sg stable coin and running a giveaway for DOT on TG (claimpolkadot[.]org)
 2021-04-01 15:19:18 +03:00
Github Actions 34fac9a0b2 [CI Skip] release/stable 0.6.51 
skip-checks: true
 2021-03-30 17:07:58 +00:00
Mich 4364013951 Add new bad url (#206) 
Not necessarily polkadot phishing per se, more like rug pull / pump and dump token abusing the projects good name and image.
polkastarter.ai

Suspect bad "contract" 0x7b1Df8e80ce3F5AF35ed4B9c971916A7f62c847D
 2021-03-30 20:05:58 +03:00
Mich 6fbf01c939 add new bad URL (#204) 
claimpolkadot.org
Registered On:2021-03-30
 2021-03-30 17:20:59 +02:00
brettkolodny b0ea476e1e Update all.json (#200) 
* Update all.json

* Update all.json
 2021-03-30 08:41:25 +02:00
Github Actions e654304c5d [CI Skip] release/stable 0.6.46 
skip-checks: true
 2021-03-30 05:25:15 +00:00
Mich 42e36c0d92 Add new bad URL (#201) 
fake "wallet" stealing polkadot (and other) mnemonic seed phrase
 2021-03-30 08:23:16 +03:00
Github Actions 3e5b728c4f [CI Skip] release/stable 0.6.45 
skip-checks: true
 2021-03-29 16:29:41 +00:00
Mich f2ac488ccd Add new bad url (#199) 
Another day, another scam.
Domain: polkadot-bonus.live
Registrar: Hostinger, UAB
Registered On: 2021-03-28
 2021-03-29 19:27:14 +03:00
michalisFr e13ce8415f Update all.json (#197) 
Added p0lkadot[.]network. A wordpress site without any content atm
 2021-03-29 14:19:02 +02:00
Mich 5938a5f5d5 Update all.json (#195) 
Fake ICO
Instead of smart contract it is simply a wallet.
It is not a polkadot wallet though, erc20/eth, but due to the fact that it uses "polkastarter" and the purple dot branding adding for completeness.
 2021-03-29 14:18:08 +02:00
michalisFr 5c061412d1 Update all.json (#194) 
claimpolka.com
3xexchange.io
 2021-03-29 14:17:18 +02:00
Github Actions 20da194cc0 [CI Skip] release/stable 0.6.43 
skip-checks: true
 2021-03-29 09:32:04 +00:00
Mich 6e58e3d212 Update all.json (#193) 
Add new bad URL
Bogus token "0x6B39f494fb6c9b1193f9E0fBd2Ed3d9D2Be2b18f"
Fake sence of urgency - hurry only 40 minutes left until sale ends bla bla.

Bad wallet shared with nansen.
The same IP also hosts a fake UniSwap clone and so on.
 2021-03-29 12:29:51 +03:00
Mich 9cfc14e297 Add new bad URL (#191) 
Domain: polkadot-get.org
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registered On: 2021-03-16
scam wallet
1s3B8f5dJbtV4rVTZs1WNRpzKCUJWxK2zULErjmA52Do2SF
 2021-03-28 11:34:56 +02:00
Mich 85455c068d Add new bad URL (#190) 
polkadot-autopool[.]com 
Registered 2021-03-26
 2021-03-27 21:40:50 +01:00
Mich 1d00d40e94 Update all.json (#189) 
polkadot-bonus[.]org

Scam is not set up yet.
 2021-03-27 09:43:25 +01:00
Github Actions c3247177a4 [CI Skip] release/stable 0.6.39 
skip-checks: true
 2021-03-26 19:09:03 +00:00
Mich f081d9d283 add new bad url, just registered (#188) 
Pretty high confidence this is a future phish targeting polkadot, due to the deceptive domain name and bad IP used in numerous other scams historically.
Nuking in advance.
https://urlscan.io/ip/162.0.215.24
 2021-03-26 20:06:48 +01:00
Github Actions 6383496cc2 [CI Skip] release/stable 0.6.38 
skip-checks: true
 2021-03-26 15:15:14 +00:00
Mich 8ca11665a1 Add new bad URL (#187) 
Add new bad URL, registered today, on bad IP hosting only scams.
polkadot-airdrops.live [198.187.29.28]
Scam is not even set up yet.

Staying ahead of the scammers!
 2021-03-26 16:12:50 +01:00
Github Actions 061b5b5f9e [CI Skip] release/stable 0.6.37 
skip-checks: true
 2021-03-26 10:48:28 +00:00
Mich dbbd6e36d6 Update all.json (#186) 
Added new bad URL

Resolve-ASN "polkadot-online.com"
IPAddress: 198.23.156.170
ASNumber: 36352
ASPrefix: 198.23.156.0/22
Locale: US
Description : AS-COLOCROSSING, US
whois "polkadot-online.com" | Findstr "Registrar: date"
Updated Date: 2021-03-25T18:30:00Z
Registrar: OwnRegistrar, Inc.
Get-CertTransparencyInfo "polkadot-online.com" -ErrorAction SilentlyContinue | findstr issuer
issuer_ca_id: 183267
issuer_name: C=US, O=Let's Encrypt, CN=R3
 2021-03-26 11:46:20 +01:00
michalisFr 360fd0a36e Update all.json (#185) 
Added polkadotbonus.com (from scam TG group)
 2021-03-24 12:02:23 +01:00
Mich f1e1bef3d7 add new bad url (#184) 
spotted new bad URL
Domain name: IDO-POLKASTARTER.COM
Registrar URL: http://www.namecheap.com
Creation Date: 2021-03-19T13:38:37.00Z

Registrar: NAMECHEAP INC
 2021-03-23 14:25:05 +01:00
Github Actions fc931a09be [CI Skip] release/stable 0.6.32 
skip-checks: true
 2021-03-22 13:32:34 +00:00
Mich a8a48b3fa7 Update all.json (#180) 
adding freshly registered (today) polkadot-airdropevent[.]network - on the same IP there is also a fake wallet stealing mnemonic seed - 

2021-03-22 connectionwallet.live
2021-03-22 connectionwallet-link.live
 2021-03-22 14:30:33 +01:00
Jaco Greeff d08c707638 Dedupe non-address entries (#178) 2021-03-20 09:17:17 +01:00
Jaco Greeff e976e62222 Block top-level domains (#177) 2021-03-20 09:11:27 +01:00
Jaco Greeff 80f67d717b polkadot.activebonus.live (#176) 
* polkadot.activebonus.live

* Addresses
 2021-03-20 08:55:47 +01:00
Github Actions d26f64ab9b [CI Skip] release/stable 0.6.27 
skip-checks: true
 2021-03-17 16:00:02 +00:00
michalisFr 06d057beec Update all.json (#175) 
Added domains
 2021-03-17 16:57:35 +01:00
Github Actions bdbe0eb350 [CI Skip] release/stable 0.6.26 
skip-checks: true
 2021-03-17 07:57:10 +00:00