Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block fake Vulcans (discord social engineering attack) #11692

Merged
merged 11 commits into from Feb 24, 2023
Merged

Block fake Vulcans (discord social engineering attack) #11692

merged 11 commits into from Feb 24, 2023

Conversation

dubstard
Copy link
Contributor

@dubstard dubstard commented Feb 24, 2023

image
image
image
image
image
image
image
image
image
image
image
image

    "1inch.web3-dexapp.online",
    "arb-drop.com",
    "aragon.cab",
    "arbitrumbrldge.com",
    "arbitrumlink.com",
    "arbitrurn-labs.com",
    "authvulcan.xyz",
    "azuki-bean.com",
    "balancerfi.workers.dev",
    "balancerprice.com",
    "balancerprice.org",
    "blockchainbets-airdrops.org",
    "bluri.co",
    "bridge-erbltrom.com",
    "bridgo-erbltram.com",
    "c0lnbasesupportupdate.imnubgkepi.buzz",
    "decentralnodemultichaindapp.online",
    "gigaswap-airdrope.org",
    "hhuuop.com",
    "kyc-walletcoinbase.serveirc.com",
    "lido.onl",
    "mellonfeased.000webhostapp.com",
    "metamask-verification-process.com",
    "metamask.appocean.mobi",
    "metamask.learnblockchain.today",
    "metamask4.repl.co",
    "metamaskapp.link",
    "metamasks.net",
    "metamasksupporttask.com",
    "officialtrustwallet.com",
    "pancakeswop.space",
    "pancakewalet.com",
    "pensive-meitner-298020.netlify.app",
    "rubic.claims",
    "sudoswapairdrops.org",
    "support-metamask-connect.com",
    "trustpadairdrop.net",
    "uniswaption.com",
    "vulcan-xyz-verify-a98db973kwl8xp1lz94.netlify.app",
    "vulcanauth.eu",
    "vulcanauth.net",
    "vulcanauthy.com",
    "vulcancaptcha.xyz",
    "vulcansauths.xyz",
    "vulcansbot.com",
    "vulcansupport.xyz",
    "vulcanverify.com",
    "web3-dexapp.online",
    "xn--rbitrum-owa.com",
    "xrpupdate.org",

```
	"1inch.web3-dexapp.online",
    "arb-drop.com",
    "arbitrumbrldge.com",
    "arbitrumlink.com",
    "arbitrurn-labs.com",
    "arbitrurn.io",
    "authvulcan.xyz",
    "azuki-bean.com",
    "balancerfi.workers.dev",
    "balancerprice.com",
    "balancerprice.org",
    "blockchainbets-airdrops.org",
    "bluri.co",
    "bridge-erbltrom.com",
    "bridgo-erbltram.com",
    "c0lnbasesupportupdate.imnubgkepi.buzz",
    "decentralnodemultichaindapp.online",
    "gigaswap-airdrope.org",
    "kyc-walletcoinbase.serveirc.com",
    "lido.onl",
    "mellonfeased.000webhostapp.com",
    "metamask-verification-process.com",
    "metamask.appocean.mobi",
    "metamask.learnblockchain.today",
    "metamask4.repl.co",
    "metamaskapp.link",
    "metamasks.net",
    "metamasksupporttask.com",
    "officialtrustwallet.com",
    "pancakeswop.space",
    "pancakewalet.com",
    "pensive-meitner-298020.netlify.app",
    "rubic.claims",
    "sudoswapairdrops.org",
    "support-metamask-connect.com",
    "trustpadairdrop.net",
    "uniswaption.com",
    "vulcan-xyz-verify-a98db973kwl8xp1lz94.netlify.app",
    "vulcanauth.eu",
    "vulcanauth.net",
    "vulcanauthy.com",
    "vulcancaptcha.xyz",
    "vulcansauths.xyz",
    "vulcansbot.com",
    "vulcansupport.xyz",
    "vulcanverify.com",
    "web3-dexapp.online",
    "xn--rbitrum-owa.com",
    "xrpupdate.org",
```
remove dupe, add fake ledger
remove duplicate `arbitrurn.io`
add `hhuuop.com`
Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove dupe, add fake ledger
remove duplicate arbitrurn.io
add hhuuop.com

block `aragon.cab`
Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

block aragon.cab
fake scam
image

block live-metemask.com
h/t Milan
Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

block live-metemask.com
h/t Milan

Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove FP uniswaption.com https://twitter.com/ChanceofXYZ/status/1457814825619243009
add defisyncprotocols.com
image

block `captchaverification.live`
Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

block captchaverification.live
image

remove weird sites
add
```
    "chattheres234.com",
    "cjmigcoisolutionmigratee.xyz",
```
Copy link
Contributor Author

@dubstard dubstard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

remove weird sites

balancerprice.org
balancerprice.com

image
no idea what are those
don't like them one bit

0xprice.org
acalaprice.com
alchemixusdprice.com
alchemixusdprice.org
alusdprice.org
ampprice.org
ankrprice.org
apenftprice.org
apeprice.org
arrrprice.com
arweaveprice.org
astarprice.org
astrprice.com
astrprice.org
atomprice.org
audioprice.org
audiusprice.com
audiusprice.org
balancerprice.org
balprice.com
balprice.org
basicattentionprice.org
batprice.com
batprice.org
bchprice.org
bitkubcoinprice.com
bitkubcoinprice.org
bittorrentprice.com
bittorrentprice.org
bsvprice.com
bsvprice.org
bttprice.org
cakeprice.org
caspernetworkprice.org
cdaiprice.com
ceekprice.org
ceeksmartvrprice.org
celoprice.org
cethprice.com
cetprice.org
chainprice.org
chromiaprice.com
chromiaprice.org
chrprice.org
chzprice.org
civicprice.org
ckbprice.com
ckbprice.org
coinexprice.org

I don't have proof right now so will leave them alone and block via another PR.
image
image

add

    "chattheres234.com",
    "cjmigcoisolutionmigratee.xyz",

h/t ecarlesi
https://twitter.com/ecarlesi/status/1628634037303537664
https://twitter.com/ecarlesi/status/1628679598979383298

Copy link
Collaborator

@AlexHerman1 AlexHerman1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@AlexHerman1 AlexHerman1 merged commit a30907e into MetaMask:main Feb 24, 2023
@dubstard dubstard deleted the patch-171 branch March 21, 2023 16:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants