pezkuwichain/phishing
1
0
Fork 0
mirror of https://github.com/pezkuwichain/phishing.git synced 2026-04-23 08:28:04 +00:00
Code Issues Packages Projects Releases Wiki Activity
475 Commits 1 Branch 0 Tags
faee123a5767913dcf2ff15df6b7e2e56efb087d
Commit Graph

119 Commits

Author SHA1 Message Date
Github Actions d60935e4cd [CI Skip] release/stable 0.6.77 
skip-checks: true
 2021-04-11 19:13:28 +00:00
Mich 2d0f0a7f84 Update all.json (#237) 
scam is not even set up yet
relatively high confidence this is ripe for blocking, based on where it is hosted.
(many other scams on the same IP)
 2021-04-11 07:44:48 +02:00
Github Actions 0c4b0e5f05 [CI Skip] release/stable 0.6.74 
skip-checks: true
 2021-04-09 19:05:39 +00:00
Mich 20a8921e16 Update all.json (#236) 
new bad url
also dodgy: polkadot-mixer[.]to
 2021-04-09 21:03:28 +02:00
Mich 3e3d63ce02 Update all.json (#235) 
Scam is not set up yet but based on where it i hosted adding in advance.
 2021-04-08 14:03:07 +02:00
Github Actions 1e8deae4e4 [CI Skip] release/stable 0.6.70 
skip-checks: true
 2021-04-08 07:10:04 +00:00
Mich 51efb16b2e Update all.json (#230) 
* Update all.json

2 more bad "polkastarter" URLs
Both share the same hoting IP via DNS A 185.104.45.68

* Update all.json

Co-authored-by: Jaco Greeff <jacogr@gmail.com>
 2021-04-08 09:07:46 +02:00
Github Actions 51a431116b [CI Skip] release/stable 0.6.69 
skip-checks: true
 2021-04-08 06:59:57 +00:00
Mich b7918c5dbf Update all.json (#231) 
Found one more, adding TLD only + full FQDN and the end URL they redirect users to to steal the mnemonic seed phrase.
 2021-04-08 08:57:50 +02:00
Github Actions 2f90d5bde4 [CI Skip] release/stable 0.6.68 
skip-checks: true
 2021-04-08 06:57:26 +00:00
Mich 3c7601959a Add new bad URL registered yesterday (#229) 
Domain: polkastarter.fund
Registrar: NameCheap, Inc.
Registered On: 2021-04-07

https://cdn.discordapp.com/attachments/807400385642889286/829465778566725662/Screenshot_2021-04-08_at_0.18.24.png
https://urlscan.io/result/7c6d1356-0331-47a4-b0f7-d3bfdf239468/
 2021-04-08 08:55:21 +02:00
Github Actions cd1c504b73 [CI Skip] release/stable 0.6.67 
skip-checks: true
 2021-04-07 18:28:51 +00:00
michalisFr 84f98782d1 Update all.json (#228) 
Two more:
polkadotjs.online
polkadot-airdropevents.network
 2021-04-07 21:26:39 +03:00
michalisFr 02a5d9e4a8 Update all.json (#227) 
Another one: polkadot.casa

Some sort of investment fraud for bitcoin. I guess all bitcoin domains were taken.
 2021-04-07 21:25:51 +03:00
Github Actions 379bb62a7b [CI Skip] release/stable 0.6.66 
skip-checks: true
 2021-04-07 16:59:11 +00:00
michalisFr 25b8af2c2a Update all.json (#226) 
Added 
- walletweb.net 
- wallets-validation.com
- walletconnectsupport.com
- walletconnect.buzz
- kusama.fund
- polkapool.live
- mynodeswallet.online
- walletconnects.support
- walletconnect.biz
- substrate.mobi
 2021-04-07 19:57:07 +03:00
Bill Laboon 762692c377 Add "Polkadoot" (#225) 
Definitely a scam, asks for Bitcoin wallet when signing up but due to name, I think it makes sense to add here
 2021-04-07 12:29:41 +02:00
Jaco Greeff 8dc6e8d0ec Add whitelist-network.com (#221) 2021-04-05 11:50:56 +02:00
Github Actions 58d098278b [CI Skip] release/stable 0.6.58 
skip-checks: true
 2021-04-04 09:39:20 +00:00
Mich 35d55d3cab Add new bad URL (#220) 
Known bad TLD, new subdomain.
 2021-04-04 12:37:16 +03:00
Github Actions c12f5db67d [CI Skip] release/stable 0.6.56 
skip-checks: true
 2021-04-03 05:05:44 +00:00
Mich 16aa695358 add new bad URL (#216) 
registered today
 2021-04-03 07:03:48 +02:00
Mich d0f0e37552 Add new bad URL (#213) 
polkadot-promo.net

advancedpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
goldpolkadot[.]com - "info@blockchain.st" 💁‍♂️😕
polkadot[.]casa/#top-widget1 - some sort of bitcoin ponzi, not related to DOT, ignoring
polkadotsevent[.]com - landing page, will monitor it
polkadot365[.]com - landing page, will monitor it
polkadotbank[.]com - "info@blockchain.st" 💁‍♂️😕
 2021-04-02 15:20:11 +03:00
Github Actions 1b713fe3a2 [CI Skip] release/stable 0.6.53 
skip-checks: true
 2021-04-02 04:50:19 +00:00
Jaco Greeff d03f92fba2 Update addr (as detected) (#212) 
* Update addr (as detected)

* Remove dupe
 2021-04-02 06:48:09 +02:00
Mich 36b2176f8c Add new bad URL (#211) 
Freshly registered. Scam is not yet set up.

Bad IP hosting many other phish.
https://www.virustotal.com/gui/ip-address/198.54.126.114/relations

Based on the registrar + bad IP combo = blocking in advance, no need to wait for scam to be setup.
 2021-04-02 06:47:32 +02:00
Mich 154752988b Add new wallet connect clones (#210) 
wallets-connect.net ➡ https://urlscan.io/result/e2fc43a1-a8ec-438a-a194-ee3f5bc62578/
walletbloksconnect.live ➡ https://urlscan.io/result/8eb53d9c-2a49-4a18-bde3-71580e23f215/
walletconnectbot.com ➡ https://urlscan.io/result/aadc4b34-7420-4a1b-aca1-0256bafd1c73/
xn--wlletconnect-cbb­.com ➡ https://urlscan.io/result/babc8cc6-c2c6-4c10-af2d-42c0b149bb8f/

Yesterday found those but trezor and uniswap dont support dot, so only adding the fake multi wallets.
 2021-04-02 07:26:05 +03:00
michalisFr 8547dc23d3 Added wallets-connect[.]net (#209) 
Added wallets-connect[.]net 
Multi-wallet phishing site
 2021-04-02 07:24:51 +03:00
michalisFr 22a09c4532 Added 1sgexchange[.]com (#207) 
1sgexchange[.]com imitating 1sg stable coin and running a giveaway for DOT on TG (claimpolkadot[.]org)
 2021-04-01 15:19:18 +03:00
Github Actions 34fac9a0b2 [CI Skip] release/stable 0.6.51 
skip-checks: true
 2021-03-30 17:07:58 +00:00
Mich 4364013951 Add new bad url (#206) 
Not necessarily polkadot phishing per se, more like rug pull / pump and dump token abusing the projects good name and image.
polkastarter.ai

Suspect bad "contract" 0x7b1Df8e80ce3F5AF35ed4B9c971916A7f62c847D
 2021-03-30 20:05:58 +03:00
Mich 6fbf01c939 add new bad URL (#204) 
claimpolkadot.org
Registered On:2021-03-30
 2021-03-30 17:20:59 +02:00
brettkolodny b0ea476e1e Update all.json (#200) 
* Update all.json

* Update all.json
 2021-03-30 08:41:25 +02:00
Github Actions e654304c5d [CI Skip] release/stable 0.6.46 
skip-checks: true
 2021-03-30 05:25:15 +00:00
Mich 42e36c0d92 Add new bad URL (#201) 
fake "wallet" stealing polkadot (and other) mnemonic seed phrase
 2021-03-30 08:23:16 +03:00
Github Actions 3e5b728c4f [CI Skip] release/stable 0.6.45 
skip-checks: true
 2021-03-29 16:29:41 +00:00
Mich f2ac488ccd Add new bad url (#199) 
Another day, another scam.
Domain: polkadot-bonus.live
Registrar: Hostinger, UAB
Registered On: 2021-03-28
 2021-03-29 19:27:14 +03:00
michalisFr e13ce8415f Update all.json (#197) 
Added p0lkadot[.]network. A wordpress site without any content atm
 2021-03-29 14:19:02 +02:00
Mich 5938a5f5d5 Update all.json (#195) 
Fake ICO
Instead of smart contract it is simply a wallet.
It is not a polkadot wallet though, erc20/eth, but due to the fact that it uses "polkastarter" and the purple dot branding adding for completeness.
 2021-03-29 14:18:08 +02:00
michalisFr 5c061412d1 Update all.json (#194) 
claimpolka.com
3xexchange.io
 2021-03-29 14:17:18 +02:00
Github Actions 20da194cc0 [CI Skip] release/stable 0.6.43 
skip-checks: true
 2021-03-29 09:32:04 +00:00
Mich 6e58e3d212 Update all.json (#193) 
Add new bad URL
Bogus token "0x6B39f494fb6c9b1193f9E0fBd2Ed3d9D2Be2b18f"
Fake sence of urgency - hurry only 40 minutes left until sale ends bla bla.

Bad wallet shared with nansen.
The same IP also hosts a fake UniSwap clone and so on.
 2021-03-29 12:29:51 +03:00
Mich 9cfc14e297 Add new bad URL (#191) 
Domain: polkadot-get.org
Registrar: Regional Network Information Center, JSC dba RU-CENTER
Registered On: 2021-03-16
scam wallet
1s3B8f5dJbtV4rVTZs1WNRpzKCUJWxK2zULErjmA52Do2SF
 2021-03-28 11:34:56 +02:00
Mich 85455c068d Add new bad URL (#190) 
polkadot-autopool[.]com 
Registered 2021-03-26
 2021-03-27 21:40:50 +01:00
Mich 1d00d40e94 Update all.json (#189) 
polkadot-bonus[.]org

Scam is not set up yet.
 2021-03-27 09:43:25 +01:00
Github Actions c3247177a4 [CI Skip] release/stable 0.6.39 
skip-checks: true
 2021-03-26 19:09:03 +00:00
Mich f081d9d283 add new bad url, just registered (#188) 
Pretty high confidence this is a future phish targeting polkadot, due to the deceptive domain name and bad IP used in numerous other scams historically.
Nuking in advance.
https://urlscan.io/ip/162.0.215.24
 2021-03-26 20:06:48 +01:00
Github Actions 6383496cc2 [CI Skip] release/stable 0.6.38 
skip-checks: true
 2021-03-26 15:15:14 +00:00
Mich 8ca11665a1 Add new bad URL (#187) 
Add new bad URL, registered today, on bad IP hosting only scams.
polkadot-airdrops.live [198.187.29.28]
Scam is not even set up yet.

Staying ahead of the scammers!
 2021-03-26 16:12:50 +01:00
Github Actions 061b5b5f9e [CI Skip] release/stable 0.6.37 
skip-checks: true
 2021-03-26 10:48:28 +00:00