pezkuwichain/phishing
1
Fork 0
mirror of https://github.com/pezkuwichain/phishing.git synced 2026-10-26 05:35:06 +00:00
Code Releases Activity
1,299 Commits 7 Branches 0 Tags
d59814d01fea5714f55da170f052114d4151ce5e
Commit Graph
64 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
michalisFr e42d3d216e Update all.json (#676) 
Added polkadotnetwork[.]org  BSC fake Polkadot
(Jaco check my DM on Element :D)
 2021-11-09 16:34:00 +02:00
michalisFr c499ca2421 Update all.json (#651) 
Added resolvewallet[.]co (seed stealer)
 2021-11-02 18:14:41 +02:00
michalisFr 0265e38de7 Update address.json (#650) 
Added address from instantwalletconnect[.]org (seed stealer) that received funds from a compromised account
 2021-11-02 17:19:24 +02:00
michalisFr 4a56778f47 Update all.json (#648) 
Added instantwalletconnect[.]org (seed stealer)
 2021-11-02 15:25:11 +02:00
michalisFr 9394c1a7ad Update address.json (#644) 
Added address for dotevent[.]live (suspended now)
 2021-11-01 13:18:31 +02:00
michalisFr fffc744760 Update all.json (#613) 
Added restoresync[.]com (seed stealer)
 2021-10-21 11:40:12 +03:00
michalisFr 965387e075 Update all.json (#612) 
Added securesynchronization[.]info seed stealer (suspended)
 2021-10-21 06:03:43 +03:00
michalisFr 323a74c68c Update address.json (#606) 
Added address from social engineering attack on LinkedIn and Telegram
 2021-10-19 12:19:23 +03:00
michalisFr 28ea002f51 Update all.json (#596) 
Added bitswapme[.]com fake trading site
 2021-10-15 12:00:12 +03:00
michalisFr 9b8ac683d8 Update all.json (#595) 
Added giveaway scam polkadotevent[.]com
 2021-10-14 20:08:39 +03:00
michalisFr ee4c8fa271 Update address.json (#594) 
Added address from polkadot event[.]com
 2021-10-14 20:04:20 +03:00
michalisFr 92a3344aa0 Update address.json (#588) 
Added address from dot-event[.]live
 2021-10-12 18:06:55 +03:00
michalisFr fe421979d8 Update all.json (#557) 
Added risedot[.]network, an investment pyramid scam. The owners have been arrested by Japanese police:
https://www.coindesk.com/markets/2018/11/15/police-arrest-8-over-alleged-68-million-crypto-pyramid-scheme-in-japan/
 2021-10-05 11:36:40 +03:00
michalisFr f8afde2a2d Update all.json (#515) 
Added three more seed stealers, same site:
accountsvalidator[.]com
accountvalidationpage[.]com
accountsvalidator[.]com
 2021-09-23 14:35:36 +03:00
michalisFr b09f71d0bf Update all.json (#516) 
Added yoroiwallets-connect[.]com, yoroiwallets[.]com (seed stealers)
 2021-09-23 12:25:56 +02:00
michalisFr 212ae1c69e Update all.json (#514) 
Added dappconnection[.]org
 2021-09-23 09:51:13 +02:00
michalisFr bc3fae0ba6 Update all.json (#474) 
Added connectvalidate[.]com (seed stealer)
 2021-08-30 12:39:57 +02:00
michalisFr 0466365a8b Update all.json (#437) 
Added polkadots-airdrop[.]live 
Giveaway scam, uses same address as others
 2021-08-04 23:15:38 +03:00
michalisFr 979816f4aa Update all.json (#435) 
Added polkadots-drop[.]com (giveaway scam). Using same address as other
 2021-08-02 11:48:52 +02:00
michalisFr be3f492906 Update all.json (#433) 
Added polkadots-airdrops[.]com
 2021-07-31 08:15:22 +02:00
michalisFr b7d09c2ee2 Update all.json (#434) 
Added polkadots-event[.]com (giveaway scam)
Address same as polkadots-airdrop.com
 2021-07-31 08:41:59 +03:00
michalisFr b9bbba475c Update all.json (#429) 
Added polkadots-bonus[.]com
 2021-07-30 13:50:08 +03:00
michalisFr 031d2c1a33 Update all.json (#421) 
Added polkadotcngiveaway[.]network and walletconnectdapps[.]tech
 2021-07-29 06:44:06 +02:00
michalisFr 4c4bc5b014 Update address.json (#422) 
Added address for polkadotcngiveaway[.]network
 2021-07-28 19:08:28 +03:00
michalisFr 00a856626e Update address.json (#418) 
Address for polkadot-wallet[.]org
 2021-07-22 17:45:10 +03:00
michalisFr 8cd2c41486 Update all.json (#419) 
Added binoeth[.]com (scam investment platform)
 2021-07-22 17:14:06 +03:00
michalisFr c570aa6896 Update address.json (#412) 
Added address from polkacompetition[.]network
 2021-07-18 12:39:33 +02:00
michalisFr 73d058e5e2 Update all.json (#411) 
Giveaway site polkacompetition[.]network
 2021-07-16 10:19:37 +03:00
michalisFr af6ac1b2c3 Update all.json (#403) 
Added polkadootnetwork[.]online, a scam investment site
 2021-07-07 16:35:31 +02:00
michalisFr 8e0ccc67bb Update address.json (#388) 
Added address from polkaeco-airdrops[.]org
 2021-06-23 14:58:25 +02:00
michalisFr ff1a7cf8c5 Update all.json (#381) 
Added ethx2xxevent[.]com, getxx2xbtcxx[.]com, giveaway2x[.]live (offline)

They are not doing DOT giveaways but they are promoting them in scam Polkadot digit channels
 2021-06-16 13:16:47 +02:00
michalisFr 12a4bec353 Update all.json (#379) 
Added polka-live[.]network
 2021-06-16 12:43:49 +02:00
michalisFr b5e05c31a9 Update address.json (#380) 
Added address for polka-live[.]network
 2021-06-16 12:43:19 +02:00
michalisFr 70cfac5815 Update all.json (#326) 
Added calimpolkadot[.]live, polkadotjs[.]org, polkado[.]network (proactively), wallet-connect-live[.]com (has Google warning banner)
 2021-05-13 15:30:16 +02:00
michalisFrandJaco 5d4d3b98a4 Update all.json (#315) 
* Update all.json

Added the specific page: daplatform[.]one/pc/#/subscribe/details/OOD and the domain daplatform[.]one

* Update all.json

Co-authored-by: Jaco <jacogr@gmail.com>

Co-authored-by: Jaco <jacogr@gmail.com>
 2021-05-10 11:17:11 +02:00
michalisFr e2e4f5aa42 Update address.json (#313) 
Added address 14VezybXdNSVoWLKN1HSae56WEV6AXrLY4HKEWjJ4Z7BegJd from dot-promo[.]com
 2021-05-10 11:22:41 +03:00
michalisFr c9a0a96c5d Update all.json (#312) 
Added dot-promo[.]com
 2021-05-10 11:08:39 +03:00
michalisFr e06067134d Update all.json (#308) 
Added btc2xbonus[.]site
 2021-05-09 07:14:42 +02:00
michalisFr d7b081f6d3 Update all.json (#302) 
Added kusama[.]us. Identical to the kusama site and promotes a "Kusama app"
 2021-05-05 19:37:23 +03:00
michalisFr 046ccc8275 Fix #299 (#300) 
Added the missing comma
 2021-05-05 14:30:30 +02:00
michalisFr 68e8dde636 Update all.json (#293) 
Added minaprotocol[.]limited
 2021-04-29 09:00:26 +03:00
michalisFr 53450fdfdb Update all.json (#277) 
Added:
coinrau[.]com (usual, fake exchange template we've seen before)
minaprotocols[.]tech (scam token sale)
mina[.]limited (another one, offline now)
winxcrypt[.]com (scam trading site)
 2021-04-22 14:01:27 +02:00
michalisFr a874ee8e5e Update all.json (#276) 
Also, parity[.]site, polkadot[.]money, polkadot[.]gg (all without content currently but scheduled for takedown by our partners)
 2021-04-21 14:13:14 +02:00
michalisFr 3c14f50f43 Update all.json (#275) 
Adding wallet-connect[.]cloud (already taken down)
 2021-04-21 14:06:46 +02:00
michalisFr e2d831ed20 Update address.json (#258) 
Added address 12HR9ciHKMmcs7MJhykPUEhSk7ssA1eu7VWZyoLqyZ1os4Uf associated with polkagiveaway[.]com
 2021-04-14 13:55:21 +02:00
michalisFr 6de10d5789 Update all.json (#252) 
Added bscpad[.]in

for https://bscpad[.]in/whitelist/polkadotwallet.html
 2021-04-13 19:03:32 +02:00
michalisFr 0ea72bf56f Update all.json (#251) 
Added 
polkadotchain[.]net
polkadotparachain[.]com
polkadottoken[.]org

from PR #243 pre-emptively
 2021-04-13 18:22:49 +03:00
michalisFr 91c5f1dea0 Update all.json (#248) 
Added dot-give[.]com
 2021-04-13 07:06:39 +02:00
michalisFr 9cf2d4c6df Update all.json (#247) 
Added polkagiveaway[.]com. Site is currently down but a user fell for it.

Also, oxy[.]dev which is copycat of a W3F grant recipient. The original project is oxydev.ir
 2021-04-12 13:59:17 +02:00
michalisFr 4e40fe2763 Update address.json (#245) 
Added address from blockfipro[.]com, scam trading platform
 2021-04-12 11:18:18 +02:00
michalisFr 1002a81fa1 Update all.json (#246) 2021-04-12 11:18:02 +02:00
michalisFr 84f98782d1 Update all.json (#228) 
Two more:
polkadotjs.online
polkadot-airdropevents.network
 2021-04-07 21:26:39 +03:00
michalisFr 02a5d9e4a8 Update all.json (#227) 
Another one: polkadot.casa

Some sort of investment fraud for bitcoin. I guess all bitcoin domains were taken.
 2021-04-07 21:25:51 +03:00
michalisFr 25b8af2c2a Update all.json (#226) 
Added 
- walletweb.net 
- wallets-validation.com
- walletconnectsupport.com
- walletconnect.buzz
- kusama.fund
- polkapool.live
- mynodeswallet.online
- walletconnects.support
- walletconnect.biz
- substrate.mobi
 2021-04-07 19:57:07 +03:00
michalisFr 8547dc23d3 Added wallets-connect[.]net (#209) 
Added wallets-connect[.]net 
Multi-wallet phishing site
 2021-04-02 07:24:51 +03:00
michalisFr 22a09c4532 Added 1sgexchange[.]com (#207) 
1sgexchange[.]com imitating 1sg stable coin and running a giveaway for DOT on TG (claimpolkadot[.]org)
 2021-04-01 15:19:18 +03:00
michalisFr e13ce8415f Update all.json (#197) 
Added p0lkadot[.]network. A wordpress site without any content atm
 2021-03-29 14:19:02 +02:00
michalisFr bdb4e7c123 Update address.json (#196) 
Added address 1qmaACn27JqK2hsg24n8AaptPtNqNMWKNXUvySnBuWzdQ8x for polkadot-autopool[.]com
 2021-03-29 14:18:32 +02:00
michalisFr 5c061412d1 Update all.json (#194) 
claimpolka.com
3xexchange.io
 2021-03-29 14:17:18 +02:00
michalisFr 360fd0a36e Update all.json (#185) 
Added polkadotbonus.com (from scam TG group)
 2021-03-24 12:02:23 +01:00
michalisFr d11cabe61f Update address.json (#182) 
Added an address for polkadot.deals
 2021-03-22 20:00:02 +01:00
michalisFr 06d057beec Update all.json (#175) 
Added domains
 2021-03-17 16:57:35 +01:00
michalisFr a586e47e6f Update all.json (#167) 
Added some more domains, although all of them are offline currently
 2021-03-11 19:38:36 +01:00
michalisFr 86f4b1915b Update address.json (#138) 
Address reported by a user. Ticket 3306.

User was using Trustwallet, which had some issues. He reached out to them on Twitter and got phished by an impersonator who got access to their seed phrase and emptied their wallet. This is the direct transaction from the user's wallet, as reported by them:
https://polkadot.subscan.io/extrinsic/0x8798dfd61aea0913c123b4ed87cd2b470b0c8eabcf12374e6590aaf7759afe9d
 2021-02-25 14:46:10 +01:00