Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block 104 scam URLs #11896

Merged
merged 3 commits into from Mar 10, 2023
Merged

Block 104 scam URLs #11896

merged 3 commits into from Mar 10, 2023

Conversation

dubstard
Copy link
Contributor

@dubstard dubstard commented Mar 10, 2023

Block 104 scam URLs.

    "airdrop.aptos-network.org",
    "airdrop.aptos-networks.org",
    "airdrop.zksync-labs.net",
    "aptos-network.org",
    "aptos-networks.org",
    "arbitrurn-lab.com",
    "arbitrurn-lab.org",
    "arbitrurn-labs.org",
    "arrbitrum.org",
    "assetretrivaldapps.cloud",
    "balancer-build.com",
    "balancer-defi.com",
    "balancer-defi.org",
    "balancer-defi.top",
    "balancer-defi.icu",
    "balancer-defi.buzz",
    "balancer-defi.co",
    "balancer-defi.monster",
    "balancer-info.com",
    "balancer-pool.top",
    "balancer-pool.icu",
    "balancer-pool.buzz",
    "balancer-pool.co",
    "balancer-pool.monster",
    "balancer-pools.top",
    "balancer-pools.icu",
    "balancer-pools.buzz",
    "balancer-pools.co",
    "balancer-pools.monster",
    "ci-coinbase.com",
    "coinbase-defiusdt.net",
    "coinbase-ethdefi.net",
    "coinbase-ggyy.xyz",
    "coinbase.sign2faverizon.com",
    "coinbase24.com",
    "coinbaseaccess.online",
    "coinbasebnb.com",
    "coinbasedao.com",
    "coinbasepro99.top",
    "coinbaseu.top",
    "coinpaxos.coinbasepro88.com",
    "dapp.wtktoken-airdrop.com",
    "wtktoken-airdrop.com",
    "ethereum2x.com",
    "hashkitconnect.com",
    "host-coinbase.com",
    "infoaccounts-coinbase.com",
    "layerzero-lab.com",
    "lido-ethereum.com",
    "coinbase.sessionsingin2878390285.cloud",
    "metamask-mint.com",
    "mint-shibadoge.com",
    "muniswap.com",
    "nft-blur.org",
    "nodeapplive.sbs",
    "nodelive.top",
    "nodelive.icu",
    "opensea-claim.sbs",
    "optimism-lab.app",
    "optimism-lab.com",
    "optimism-lab.info",
    "optimism-lab.org",
    "optimism-labs.app",
    "pancakeswapcode-com.algostage.com",
    "poloniex-exchange.com",
    "screenconnect.center",
    "secure-coinbase.ddns.net",
    "securedaptoolss.cogniix.com",
    "sushiswapcode-com.algostage.com",
    "the-bitcoin-methodapp-com.algostage.com",
    "the-bitsoft-360-ai-com.algostage.com",
    "the-bitsoft360-com-financial-marketsworld-com.algostage.com",
    "the-crypto-methodapp-com.algostage.com",
    "the-ethereum-code-2.com",
    "the-ethereum-profit-com.algostage.com",
    "the-ethereum-trader-app-net.algostage.com",
    "the-ethereumtrader-com.algostage.com",
    "thebitcoin-methodapp-net.algostage.com",
    "algostage.com",
    "thecrypto-exchange-com.algostage.com",
    "trust-wallet-banking.worldofficialonline.com",
    "trustwallet.erc-20.dreamhos.cyou",
    "unicoinbase.cn",
    "uniswap-exchange.online",
    "uniswap-exchange.store",
    "uniswap-exchange.tech",
    "uniswap-exchange.uk.com",
    "uniswap-v3.scroll.systems",
    "uniswap.autos",
    "uniswap.futbol",
    "uniswap.protocol-v2.org",
    "uniswap.xn--5tzm5g",
    "uniswap.xn--q9jyb4c",
    "uniswapv3-amm.com",
    "user96665-metamask.ddns.net",
    "vulcanauth.wtf",
    "walletpads.netlify.app",
    "wave-exchange.faipei.com",
    "wave-exchange.online",
    "www-aptoslabs.top",
    "www-aptoslabs.icu",
    "wwwkyc-metamask.serveblog.net",
    "zksync-labs.net",
    "zksync-labs.org",

(33 of which are conveniently hosted on the same less-than-honest 馃嚪馃嚭 IP address,

https://www.virustotal.com/gui/ip-address/5.8.11.73/relations

https://urlscan.io/ip/5.8.11.73/

airdrop.aptos-network.org
airdrop.aptos-networks.org
airdrop.arrbitrum.com
airdrop.optimism-labs.org
airdrop.zksync-labs.net
aptos-network.org
aptos-networks.org
arbitrurn-lab.com
arbitrurn-lab.net
arbitrurn-lab.org
arbitrurn-labs.org
arrbitrum.com
arrbitrum.net
arrbitrum.org
cpanel.www-aptoslabs.net
cpcalendars.www-aptoslabs.net
cpcontacts.www-aptoslabs.net
layerzero-lab.com
mail.www-aptoslabs.net
nft-blur.org
optimism-lab.com
optimism-lab.info
optimism-lab.org
optimism-labs.app
optimism-labs.org
screenconnect.center
webdisk.www-aptoslabs.net
webmail.www-aptoslabs.net
www-aptoslabs.com
www-aptoslabs.net
www-aptoslabs.org
zksync-labs.net
zksync-labs.org

Dealing with the so called "abuse teams" in such "service providers" is as efficient, as watching paint dry.

Block 104 scam URLs.

```
    "airdrop.aptos-network.org",
    "airdrop.aptos-networks.org",
    "airdrop.zksync-labs.net",
    "aptos-network.org",
    "aptos-networks.org",
    "arbitrurn-lab.com",
    "arbitrurn-lab.org",
    "arbitrurn-labs.org",
    "arrbitrum.org",
    "assetretrivaldapps.cloud",
    "balancer-build.com",
    "balancer-defi.com",
    "balancer-defi.org",
    "balancer-defi.top",
    "balancer-defi.icu",
    "balancer-defi.buzz",
    "balancer-defi.co",
    "balancer-defi.monster",
    "balancer-info.com",
    "balancer-pool.top",
    "balancer-pool.icu",
    "balancer-pool.buzz",
    "balancer-pool.co",
    "balancer-pool.monster",
    "balancer-pools.top",
    "balancer-pools.icu",
    "balancer-pools.buzz",
    "balancer-pools.co",
    "balancer-pools.monster",
    "ci-coinbase.com",
    "coinbase-defiusdt.net",
    "coinbase-ethdefi.net",
    "coinbase-ggyy.xyz",
    "coinbase.sign2faverizon.com",
    "coinbase24.com",
    "coinbaseaccess.online",
    "coinbasebnb.com",
    "coinbasedao.com",
    "coinbasepro99.top",
    "coinbaseu.top",
    "coinpaxos.coinbasepro88.com",
    "dapp.wtktoken-airdrop.com",
    "wtktoken-airdrop.com",
    "ethereum2x.com",
    "hashkitconnect.com",
    "host-coinbase.com",
    "infoaccounts-coinbase.com",
    "layerzero-lab.com",
    "lido-ethereum.com",
    "coinbase.sessionsingin2878390285.cloud",
    "metamask-mint.com",
    "mint-shibadoge.com",
    "muniswap.com",
    "nft-blur.org",
    "nodeapplive.sbs",
    "nodelive.top",
    "nodelive.icu",
    "opensea-claim.sbs",
    "optimism-lab.app",
    "optimism-lab.com",
    "optimism-lab.info",
    "optimism-lab.org",
    "optimism-labs.app",
    "pancakeswapcode-com.algostage.com",
    "poloniex-exchange.com",
    "screenconnect.center",
    "secure-coinbase.ddns.net",
    "securedaptoolss.cogniix.com",
    "sushiswapcode-com.algostage.com",
    "the-bitcoin-methodapp-com.algostage.com",
    "the-bitsoft-360-ai-com.algostage.com",
    "the-bitsoft360-com-financial-marketsworld-com.algostage.com",
    "the-crypto-methodapp-com.algostage.com",
    "the-ethereum-code-2.com",
    "the-ethereum-profit-com.algostage.com",
    "the-ethereum-trader-app-net.algostage.com",
    "the-ethereumtrader-com.algostage.com",
    "thebitcoin-methodapp-net.algostage.com",
    "algostage.com",
    "thecrypto-exchange-com.algostage.com",
    "trust-wallet-banking.worldofficialonline.com",
    "trustwallet.erc-20.dreamhos.cyou",
    "unicoinbase.cn",
    "uniswap-exchange.online",
    "uniswap-exchange.store",
    "uniswap-exchange.tech",
    "uniswap-exchange.uk.com",
    "uniswap-v3.scroll.systems",
    "uniswap.autos",
    "uniswap.futbol",
    "uniswap.protocol-v2.org",
    "uniswap.xn--5tzm5g",
    "uniswap.xn--q9jyb4c",
    "uniswapv3-amm.com",
    "user96665-metamask.ddns.net",
    "vulcanauth.wtf",
    "walletpads.netlify.app",
    "wave-exchange.faipei.com",
    "wave-exchange.online",
    "www-aptoslabs.top",
    "www-aptoslabs.icu",
    "wwwkyc-metamask.serveblog.net",
    "zksync-labs.net",
    "zksync-labs.org",
```

(33 of which are conveniently hosted on the same less-than-honest Russian 馃嚪馃嚭 IP address, how typical).
https://www.virustotal.com/gui/ip-address/5.8.11.73/relations
https://urlscan.io/ip/5.8.11.73/
```
airdrop.aptos-network.org
airdrop.aptos-networks.org
airdrop.arrbitrum.com
airdrop.optimism-labs.org
airdrop.zksync-labs.net
aptos-network.org
aptos-networks.org
arbitrurn-lab.com
arbitrurn-lab.net
arbitrurn-lab.org
arbitrurn-labs.org
arrbitrum.com
arrbitrum.net
arrbitrum.org
cpanel.www-aptoslabs.net
cpcalendars.www-aptoslabs.net
cpcontacts.www-aptoslabs.net
layerzero-lab.com
mail.www-aptoslabs.net
nft-blur.org
optimism-lab.com
optimism-lab.info
optimism-lab.org
optimism-labs.app
optimism-labs.org
screenconnect.center
webdisk.www-aptoslabs.net
webmail.www-aptoslabs.net
www-aptoslabs.com
www-aptoslabs.net
www-aptoslabs.org
zksync-labs.net
zksync-labs.org
```


Dealing with the so called "abuse teams" in such "service providers" is as efficient as watching paint dry would be more profitable than dealing with your support.
@dubstard dubstard changed the title Update config.json Block 104 scam URLs Mar 10, 2023
@409H 409H added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Mar 10, 2023
409H
409H previously approved these changes Mar 10, 2023
@409H 409H merged commit 806a133 into MetaMask:main Mar 10, 2023
7 checks passed
@dubstard dubstard deleted the patch-182 branch March 21, 2023 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocklist addition Issue or PR requesting addition of a domain to the blocklist
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants