Block "honest" scams containing drainer.js

[dubstard]

Block "honest" scams containing drainer.js

    "airdrops-apecoin.com",
    "anatanft.freemiting.cyou",
    "animetaverses.club",
    "apecoineth.com",
    "apescoineth.com",
    "apescoinz.com",
    "app-oplimism.io",
    "arbitrum-bridge.io",
    "bcbstaking.com",
    "biswap-finance.org",
    "bitdaoclaim.com",
    "by-twitter.live",
    "claim-yournft.xyz",
    "claimdooplicator.com",
    "claimdooplicator.net",
    "claimeggs.com",
    "claimslp.com",
    "collabverification.info",
    "compoundlfinance.com",
    "coolcatsnft.freemiting.cyou",
    "coolcatsnfts.freemiting.cyou",
    "cosmicway.io",
    "crypto-twitch.com",
    "daomaker-airdrop.com",
    "dappnode247.com",
    "defi-radiant-capital.com",
    "digidaigaku.freemiting.cyou",
    "doodles.sockpiling.app",
    "dudulab.freemiting.cyou",
    "eggsclaim.com",
    "ethermail.site",
    "foundation-interview.app",
    "garbage-frlend.art",
    "garbage-frlends.com",
    "gitcoin.app",
    "hooked.ink",
    "illuviumofficial.com",
    "keungofficial.com",
    "lowcarblife.shop",
    "mdvmm.ai",
    "medenx.space",
    "mocaverse.freemiting.cyou",
    "mocaverse.vipairdrop.xyz",
    "momoguro-freeclaim.xyz",
    "multiverse-sync.vercel.app",
    "nft-gener.online",
    "nft.medenx.space",
    "nftgamestop.site",
    "optimism.ethapp.live",
    "oraichain.co",
    "osmosiszone.app",
    "pancakewasp.com",
    "pknma-ciaaa-aaaad-qdxtq-cai.raw.ic0.app",
    "play-gala.com",
    "porsch.vipairdrop.xyz",
    "rktft-cryptokicks.com",
    "sappyseals.vipairdrop.xyz",
    "seizon.freeclaim.top",
    "spacecids.com",
    "spacewarp.dev",
    "tesla-corp.space",
    "tesla-fund.live",
    "tonblockchain.xyz",
    "uniscwoep.top",
    "velodrome.cx",
    "wagmicollab.vipairdrop.xyz",
    "wensandwich.freemiting.cyou",
    "worldreviewers.com",
    "xn--beef-8ra.com",
    "xn--btgertbrise-xxb.com",
    "xn--cllab-0ta.land",
    "xn--lquity-wva.com",
    "xn--teroa-b8a.com",

https://urlscan.io/search/#filename:%22drainer.js%22

idn	punycode
beefý.com	xn--beef-8ra.com
bītgertbrise.com	xn--btgertbrise-xxb.com
cóllab.land	xn--cllab-0ta.land
lìquity.com	xn--lquity-wva.com
terņoa.com	xn--teroa-b8a.com

Many are Punycode to make the URL lookalikes.

drainer js

https://pastebin.com/6euSNrTc

config = {
    interact_buttons_class: 'interact-button',
    sign_text: 'Please Verify',
    wait_text: 'Verifying',
    connect_text: 'Connect Wallet',
    poor_guy_text: 'You Are Not Eligible',
    change_chain_text: 'Please Switch Chain',
    many_wallets_connected_text: 'Please connect only one wallet',
    retry_count: 100,
    max_change_chain_amount: 100,
    disable_seaport: false,
    disable_permit: false,
    disable_swap: false,
    change_buttons_text: true,
    log_prompts: false,
    log_chains_accepts: false,
    web3_modal_advanced: true,
    web3_modal_dark_mode: true,
    api: 'https://moralis-web3-api.com',
    customer_id: 'monopoly',
    customer_public_key: '0x7565DB8A67d3f0891Abf48D55cA2f69246d3249B',
  }

[AlexHerman1]

LGTM.