Block 266 scam URLs #12053
Merged
Block 266 scam URLs #12053
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Block 266 scam URLs
```
"0xaltcoin.com",
"1291swisscoins.com",
"1inch-cryptoair.com",
"1inch-drop.top",
"1inch.logininister.fun",
"247cointrading.com",
"24coin-swap.com",
"24coinbet.icu",
"acecoins.pro",
"advicecoins.com",
"affordcoins.com",
"afraidcoins.com",
"afterallcoin.com",
"afterallcoins.com",
"aftertherecoins.com",
"airdrop-app.uniswapp.org.unirswap.cloud",
"app1inchswap.fun",
"app1inchswap.pw",
"app1inchswap.site",
"appsushiswaps.com",
"autocryptominer.net",
"bakeryswaps-1inch.com",
"binanceer.top",
"binancer.space",
"binanceus.art",
"bitnemo.com",
"blockchainhelpdesks.com",
"bnbkraken.com",
"challenge-coinbaseservices.online",
"circle-finance.com",
"circleswap.exchange",
"claim-intem.duckdns.org",
"claim-optimism.com",
"claimcryptogpt.site",
"claims-stablecoin.com",
"cloudfxcoin.com",
"coin-trix.com",
"coin579.com",
"coin599.com",
"coin9master.com",
"coinbase-eth.buzz",
"coinbase-login-forgot-passwords.dynamic-dns.net",
"coinbase-promo.xyz",
"coinbasenc.com",
"coinbee.buzz",
"coindexta.com",
"coinemeta.com",
"coinfylimited.live.metamark-crypto.co",
"coinness-goods.ink",
"coinness-goods.online",
"coinness-goods.shop",
"coinness-goods.site",
"coinness-goods.store",
"coinness-goods.today",
"coinness-goods.xyz",
"coinness-help.cfd",
"coinness-help.online",
"coinness-help.shop",
"coinness-help.store",
"coinness-help.website",
"coinness-help.xyz",
"coinness-notice.cyou",
"coinness-notice.icu",
"coinness-notice.online",
"coinness-notice.site",
"coinness-notice.store",
"coinness-notice.xyz",
"coinness-pr.bond",
"coinness-pr.cfd",
"coinness-pr.click",
"coinness-pr.homes",
"coinness-pr.icu",
"coinness-pr.sbs",
"coinness-pr.xyz",
"coinness.bond",
"coinness.cfd",
"coinness.click",
"coinness.cyou",
"coinness.homes",
"coinness.ink",
"coinness.online",
"coinness.sbs",
"coinness.shop",
"coinreaders-alarm.cfd",
"coinreaders-alarm.click",
"coinreaders-alarm.live",
"coinreaders-alarm.pro",
"coinreaders-alarm.sbs",
"coinreaders-alarm.site",
"coinreaders-alarm.store",
"coinreaders-alarm.today",
"coinreaders-alarm.xyz",
"coinreaders-info.live",
"coinreaders-info.online",
"coinreaders-info.pro",
"coinreaders-info.site",
"coinreaders-info.today",
"coinreaders-info.top",
"coinreaders-info.website",
"coinreaders-info.xyz",
"coinreaders-notice.cfd",
"coinreaders-notice.info",
"coinreaders-notice.online",
"coinreaders-notice.pro",
"coinreaders-notice.sbs",
"coinreaders-notice.website",
"coinreaders-notice.xyz",
"coinreaders-report.click",
"coinreaders-report.cloud",
"coinreaders-report.live",
"coinreaders-report.online",
"coinreaders-report.pro",
"coinreaders-report.site",
"coinreaders-report.world",
"coinreaders-report.xyz",
"coinreaders.info",
"coinreaders.ink",
"coinreaders.online",
"coinreaders.pro",
"coinreaders.site",
"coinreaders.today",
"coinreaders.top",
"coinreaders.website",
"coinreaders.xyz",
"coinsbaes.com",
"coinsbalancer.com",
"coinsbasemarket.com",
"coinsbaseus.com",
"coinswitch01.com",
"cointahmin.com",
"cointamp.com",
"cointechapp.online",
"cointelegraph-post.art",
"cointelegraph-post.biz",
"cointelegraph-post.cfd",
"cointelegraph-post.shop",
"cointelegraph-post.world",
"cointelegraph-post.xyz",
"cointerelle.com",
"cointr-pro.com",
"coinvaluecheck.com",
"coinvaluetoday.com",
"coinvaulters.com",
"coinventure.pro",
"coinvoleting.info",
"coinx-financial.ltd",
"coldcoin-crypto.com",
"connect.https-web3-1inch.io",
"continentaldividefilm.com",
"coresbinancefx.com",
"corporategovernancechatgpt.com",
"corporategovernancegpt.com",
"cryptgete.com",
"crypto-balancer.world",
"cryptocoinsmixer.com",
"cryptominermerch.org",
"cryptominernode.com",
"curcumycontagotas.fun",
"czbinance.xyz",
"defi-oasis.app",
"defi23.com",
"defi27.com",
"defi29.com",
"defi33.com",
"defivalor.com",
"del-coins.com",
"delvincoin.com",
"dsdcoin.vip",
"ethereumtrust.global",
"exodus-wallet.dbxtools.in",
"flashcoin.trade",
"fullmining.xyz",
"globalcoin-ark.com",
"globalmineralco.com",
"globalmineralmaroc.com",
"gramcoinstrade.com",
"hexcoin.win",
"icedoutcoinflip.xyz",
"idmining.site",
"instaminingpool.com",
"intrexmining.com",
"irricoin.com",
"jogosdefi.com",
"keycoinsonline.com",
"kraken-coin.top",
"kraken-darknet-onion.info",
"kraken-darknet-tor.info",
"kraken-market.info",
"kraken-marketplace.info",
"krakendarknet.biz",
"lcoinex-hoome.site",
"lidomining.net",
"lk-coinbase.xyz",
"lmvucverification.work.gd",
"login2-customer-coinbase.com",
"metamask-info.com",
"metamask-pro.com",
"metamask-v.liliadayspa.com",
"metamask-web3.live",
"metamask1.cc",
"metamasks.store",
"metamaskwap.com",
"minerlab.org",
"minersppe.com",
"mingukcoin.com",
"miningfarms.xyz",
"miningtrades.top",
"mn-coinbase.com",
"ms-coinbase.xyz",
"myminingtrade.top",
"now-coinbase.com",
"oceantradefinance.com",
"onecoinsign.com",
"onepiececoin.wtf",
"ordinalminer.com",
"ordinalsminer.com",
"pancakeswap.finances.plumbersinwhitchurchcardiff.com",
"paycellcoin.com",
"paycellcoin.online",
"paycellcoin.site",
"paymecoin.org",
"paysellcoin.com",
"paysellcoin.online",
"portmining.com",
"pr70coins.com",
"punkcoinus.com",
"punkcoinyes.com",
"richcoins.net",
"safcoinc.com",
"sardine-metamask-test.sardine.biz",
"savvy-payments.com",
"seedfarm-mining.com",
"seedify-claiming.pl",
"signin-coinbase-dashboard.cloud",
"stablecoinlimited.com",
"techbinance.com",
"thedevsnft.live",
"trade.pancakeswap-live.site",
"tradecoinsfx.org",
"tradex-coin.com",
"trustwallet.7136.webhost-03.my-host.network",
"unicoin-mining.com",
"uniswap.dapp.soulwallet.io",
"uniswap.v2-7.org",
"uniswap.v2-connect.org",
"uniswap2.0x00.site",
"uniswapv3.thechun.dev",
"ur-coinbase.xyz",
"usdtdefimining.online",
"usdtdefimining.shop",
"usdtdefimining.store",
"v-wallet-graph.cf",
"vl-coinbase.xyz",
"walletdapps.host20.uk",
"wuebit.com",
"wvw-app-ledger.com",
"wvw-profile-cex-io.com",
"wvw-trezorr-exchange.com",
"wvw-trezzor-loggin.com",
"wvw-trezzor-wallets.com",
"wvw-trezzor-walletts.com",
"www-exodus-wallet.coderlite.com",
"wwwcoinpayz.xyz",
"xn--kpa-ethereum-4ib.se",
"xrp-coin.top",
"xuniswap.io",
```
dubstard
requested review from
a team,
409H,
AlexHerman1,
trn1ty,
ethphishingmaintainer1000,
tayvano,
samczsun,
deshvin and
tarballqc
as code owners
|
|
|
not sure how it went from +266 to +41,622 −41,357 the numbers match, sans dupes/fixed conflicts, but why is the array juggling around |
409H
approved these changes
Mar 22, 2023
409H
added a commit
to gytis2/eth-phishing-detect
that referenced
this pull request
Mar 22, 2023
…ng-domain * origin/main: Block 266 scam URLs (MetaMask#12053) add phishing domain to blacklist (MetaMask#12057) removing sites from blocklist [5] (MetaMask#12039) Main master merge (MetaMask#12056) add phishing domain to blacklist (MetaMask#12044)
legobeat
pushed a commit
that referenced
this pull request
Mar 27, 2023
* Block 266 scam URLs
Block 266 scam URLs
```
"0xaltcoin.com",
"1291swisscoins.com",
"1inch-cryptoair.com",
"1inch-drop.top",
"1inch.logininister.fun",
"247cointrading.com",
"24coin-swap.com",
"24coinbet.icu",
"acecoins.pro",
"advicecoins.com",
"affordcoins.com",
"afraidcoins.com",
"afterallcoin.com",
"afterallcoins.com",
"aftertherecoins.com",
"airdrop-app.uniswapp.org.unirswap.cloud",
"app1inchswap.fun",
"app1inchswap.pw",
"app1inchswap.site",
"appsushiswaps.com",
"autocryptominer.net",
"bakeryswaps-1inch.com",
"binanceer.top",
"binancer.space",
"binanceus.art",
"bitnemo.com",
"blockchainhelpdesks.com",
"bnbkraken.com",
"challenge-coinbaseservices.online",
"circle-finance.com",
"circleswap.exchange",
"claim-intem.duckdns.org",
"claim-optimism.com",
"claimcryptogpt.site",
"claims-stablecoin.com",
"cloudfxcoin.com",
"coin-trix.com",
"coin579.com",
"coin599.com",
"coin9master.com",
"coinbase-eth.buzz",
"coinbase-login-forgot-passwords.dynamic-dns.net",
"coinbase-promo.xyz",
"coinbasenc.com",
"coinbee.buzz",
"coindexta.com",
"coinemeta.com",
"coinfylimited.live.metamark-crypto.co",
"coinness-goods.ink",
"coinness-goods.online",
"coinness-goods.shop",
"coinness-goods.site",
"coinness-goods.store",
"coinness-goods.today",
"coinness-goods.xyz",
"coinness-help.cfd",
"coinness-help.online",
"coinness-help.shop",
"coinness-help.store",
"coinness-help.website",
"coinness-help.xyz",
"coinness-notice.cyou",
"coinness-notice.icu",
"coinness-notice.online",
"coinness-notice.site",
"coinness-notice.store",
"coinness-notice.xyz",
"coinness-pr.bond",
"coinness-pr.cfd",
"coinness-pr.click",
"coinness-pr.homes",
"coinness-pr.icu",
"coinness-pr.sbs",
"coinness-pr.xyz",
"coinness.bond",
"coinness.cfd",
"coinness.click",
"coinness.cyou",
"coinness.homes",
"coinness.ink",
"coinness.online",
"coinness.sbs",
"coinness.shop",
"coinreaders-alarm.cfd",
"coinreaders-alarm.click",
"coinreaders-alarm.live",
"coinreaders-alarm.pro",
"coinreaders-alarm.sbs",
"coinreaders-alarm.site",
"coinreaders-alarm.store",
"coinreaders-alarm.today",
"coinreaders-alarm.xyz",
"coinreaders-info.live",
"coinreaders-info.online",
"coinreaders-info.pro",
"coinreaders-info.site",
"coinreaders-info.today",
"coinreaders-info.top",
"coinreaders-info.website",
"coinreaders-info.xyz",
"coinreaders-notice.cfd",
"coinreaders-notice.info",
"coinreaders-notice.online",
"coinreaders-notice.pro",
"coinreaders-notice.sbs",
"coinreaders-notice.website",
"coinreaders-notice.xyz",
"coinreaders-report.click",
"coinreaders-report.cloud",
"coinreaders-report.live",
"coinreaders-report.online",
"coinreaders-report.pro",
"coinreaders-report.site",
"coinreaders-report.world",
"coinreaders-report.xyz",
"coinreaders.info",
"coinreaders.ink",
"coinreaders.online",
"coinreaders.pro",
"coinreaders.site",
"coinreaders.today",
"coinreaders.top",
"coinreaders.website",
"coinreaders.xyz",
"coinsbaes.com",
"coinsbalancer.com",
"coinsbasemarket.com",
"coinsbaseus.com",
"coinswitch01.com",
"cointahmin.com",
"cointamp.com",
"cointechapp.online",
"cointelegraph-post.art",
"cointelegraph-post.biz",
"cointelegraph-post.cfd",
"cointelegraph-post.shop",
"cointelegraph-post.world",
"cointelegraph-post.xyz",
"cointerelle.com",
"cointr-pro.com",
"coinvaluecheck.com",
"coinvaluetoday.com",
"coinvaulters.com",
"coinventure.pro",
"coinvoleting.info",
"coinx-financial.ltd",
"coldcoin-crypto.com",
"connect.https-web3-1inch.io",
"continentaldividefilm.com",
"coresbinancefx.com",
"corporategovernancechatgpt.com",
"corporategovernancegpt.com",
"cryptgete.com",
"crypto-balancer.world",
"cryptocoinsmixer.com",
"cryptominermerch.org",
"cryptominernode.com",
"curcumycontagotas.fun",
"czbinance.xyz",
"defi-oasis.app",
"defi23.com",
"defi27.com",
"defi29.com",
"defi33.com",
"defivalor.com",
"del-coins.com",
"delvincoin.com",
"dsdcoin.vip",
"ethereumtrust.global",
"exodus-wallet.dbxtools.in",
"flashcoin.trade",
"fullmining.xyz",
"globalcoin-ark.com",
"globalmineralco.com",
"globalmineralmaroc.com",
"gramcoinstrade.com",
"hexcoin.win",
"icedoutcoinflip.xyz",
"idmining.site",
"instaminingpool.com",
"intrexmining.com",
"irricoin.com",
"jogosdefi.com",
"keycoinsonline.com",
"kraken-coin.top",
"kraken-darknet-onion.info",
"kraken-darknet-tor.info",
"kraken-market.info",
"kraken-marketplace.info",
"krakendarknet.biz",
"lcoinex-hoome.site",
"lidomining.net",
"lk-coinbase.xyz",
"lmvucverification.work.gd",
"login2-customer-coinbase.com",
"metamask-info.com",
"metamask-pro.com",
"metamask-v.liliadayspa.com",
"metamask-web3.live",
"metamask1.cc",
"metamasks.store",
"metamaskwap.com",
"minerlab.org",
"minersppe.com",
"mingukcoin.com",
"miningfarms.xyz",
"miningtrades.top",
"mn-coinbase.com",
"ms-coinbase.xyz",
"myminingtrade.top",
"now-coinbase.com",
"oceantradefinance.com",
"onecoinsign.com",
"onepiececoin.wtf",
"ordinalminer.com",
"ordinalsminer.com",
"pancakeswap.finances.plumbersinwhitchurchcardiff.com",
"paycellcoin.com",
"paycellcoin.online",
"paycellcoin.site",
"paymecoin.org",
"paysellcoin.com",
"paysellcoin.online",
"portmining.com",
"pr70coins.com",
"punkcoinus.com",
"punkcoinyes.com",
"richcoins.net",
"safcoinc.com",
"sardine-metamask-test.sardine.biz",
"savvy-payments.com",
"seedfarm-mining.com",
"seedify-claiming.pl",
"signin-coinbase-dashboard.cloud",
"stablecoinlimited.com",
"techbinance.com",
"thedevsnft.live",
"trade.pancakeswap-live.site",
"tradecoinsfx.org",
"tradex-coin.com",
"trustwallet.7136.webhost-03.my-host.network",
"unicoin-mining.com",
"uniswap.dapp.soulwallet.io",
"uniswap.v2-7.org",
"uniswap.v2-connect.org",
"uniswap2.0x00.site",
"uniswapv3.thechun.dev",
"ur-coinbase.xyz",
"usdtdefimining.online",
"usdtdefimining.shop",
"usdtdefimining.store",
"v-wallet-graph.cf",
"vl-coinbase.xyz",
"walletdapps.host20.uk",
"wuebit.com",
"wvw-app-ledger.com",
"wvw-profile-cex-io.com",
"wvw-trezorr-exchange.com",
"wvw-trezzor-loggin.com",
"wvw-trezzor-wallets.com",
"wvw-trezzor-walletts.com",
"www-exodus-wallet.coderlite.com",
"wwwcoinpayz.xyz",
"xn--kpa-ethereum-4ib.se",
"xrp-coin.top",
"xuniswap.io",
```
* Remove duplicates
---------
Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM>
409H
added a commit
that referenced
this pull request
Apr 25, 2023
* add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add scams targeting arbitrum, optimism, layerzero, sui, zapper, and zetachain * Scams 20230425 * Remove duplicates * Fix CI --------- Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
Apr 25, 2023
* add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * remove shortner * merge * Update config.json * Update config.json --------- Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
Apr 27, 2023
* add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add altidentifer.com to the blacklist * Merge branch 'main' of https://github.com/MetaMask/eth-phishing-detect removing dupe --------- Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
May 5, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
May 12, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
409H
added a commit
that referenced
this pull request
May 18, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
May 23, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
409H
added a commit
that referenced
this pull request
Jun 5, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
Jun 14, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
Jun 27, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
deshvin
added a commit
that referenced
this pull request
Nov 12, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
AlexHerman1
added a commit
that referenced
this pull request
Nov 27, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
deshvin
added a commit
that referenced
this pull request
Dec 19, 2023
* Add new phishing domains (#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (#12017) * Add Phishing Sites to Blocklist [20] (#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12025) * Add scams targetting Arbitrum (#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (#12044) * Main master merge (#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru #11969 ninedao.club #11962 coinpal.eu #12035 bbrc.io #12028 bonker.io #12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (#12063) * Add scams targetting Arbitrum (#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json #11997 #12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (#12010) blocklist remove: wallet.discord-acc.ru #11942 ltcminer.com #12001 allowlist add: etherscam.wtf #11970 metamick.online #12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (#12086) * add 160 scam urls (#12083) * Add scams targetting Arbitrum (#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (#12102) * Allowlist metarisk.com (#12106) (#12107) * Add new phishing domains (#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (#12128) * enseth.domains (#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (#12136) * Add scams targetting Arbitrum (#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (#12160) * allowlist: add launchpad.ethereum.org (#12173) * Add scams targetting Arbitrum and Vela (#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (#12180) * test: verify that every fuzzylist entry is also in allowlist (#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (#12220) added in 41c8a74 * block 93 scam urls (#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist * Add phishing url to blacklist * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
sime
added a commit
to sime/eth-phishing-detect
that referenced
this pull request
Jan 6, 2024
* Add new phishing domains (MetaMask#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (MetaMask#12017) * Add Phishing Sites to Blocklist [20] (MetaMask#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (MetaMask#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (MetaMask#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (MetaMask#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (MetaMask#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (MetaMask#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (MetaMask#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (MetaMask#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12025) * Add scams targetting Arbitrum (MetaMask#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (MetaMask#12044) * Main master merge (MetaMask#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (MetaMask#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru MetaMask#11969 ninedao.club MetaMask#11962 coinpal.eu MetaMask#12035 bbrc.io MetaMask#12028 bonker.io MetaMask#12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (MetaMask#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (MetaMask#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (MetaMask#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12063) * Add scams targetting Arbitrum (MetaMask#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (MetaMask#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (MetaMask#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (MetaMask#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (MetaMask#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (MetaMask#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (MetaMask#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (MetaMask#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json MetaMask#11997 MetaMask#12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (MetaMask#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (MetaMask#12010) blocklist remove: wallet.discord-acc.ru MetaMask#11942 ltcminer.com MetaMask#12001 allowlist add: etherscam.wtf MetaMask#11970 metamick.online MetaMask#12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (MetaMask#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (MetaMask#12086) * add 160 scam urls (MetaMask#12083) * Add scams targetting Arbitrum (MetaMask#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (MetaMask#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (MetaMask#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (MetaMask#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (MetaMask#12102) * Allowlist metarisk.com (MetaMask#12106) (MetaMask#12107) * Add new phishing domains (MetaMask#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (MetaMask#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (MetaMask#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (MetaMask#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (MetaMask#12128) * enseth.domains (MetaMask#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (MetaMask#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (MetaMask#12136) * Add scams targetting Arbitrum (MetaMask#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (MetaMask#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (MetaMask#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (MetaMask#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (MetaMask#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (MetaMask#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (MetaMask#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (MetaMask#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (MetaMask#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (MetaMask#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (MetaMask#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (MetaMask#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (MetaMask#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (MetaMask#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (MetaMask#12160) * allowlist: add launchpad.ethereum.org (MetaMask#12173) * Add scams targetting Arbitrum and Vela (MetaMask#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (MetaMask#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (MetaMask#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (MetaMask#12180) * test: verify that every fuzzylist entry is also in allowlist (MetaMask#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (MetaMask#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (MetaMask#12220) added in 41c8a74 * block 93 scam urls (MetaMask#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (MetaMask#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (MetaMask#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
sime
added a commit
to sime/eth-phishing-detect
that referenced
this pull request
Jan 6, 2024
* Add new phishing domains (MetaMask#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (MetaMask#12017) * Add Phishing Sites to Blocklist [20] (MetaMask#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (MetaMask#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (MetaMask#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (MetaMask#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (MetaMask#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (MetaMask#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (MetaMask#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (MetaMask#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12025) * Add scams targetting Arbitrum (MetaMask#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (MetaMask#12044) * Main master merge (MetaMask#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (MetaMask#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru MetaMask#11969 ninedao.club MetaMask#11962 coinpal.eu MetaMask#12035 bbrc.io MetaMask#12028 bonker.io MetaMask#12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (MetaMask#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (MetaMask#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (MetaMask#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12063) * Add scams targetting Arbitrum (MetaMask#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (MetaMask#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (MetaMask#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (MetaMask#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (MetaMask#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (MetaMask#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (MetaMask#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (MetaMask#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json MetaMask#11997 MetaMask#12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (MetaMask#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (MetaMask#12010) blocklist remove: wallet.discord-acc.ru MetaMask#11942 ltcminer.com MetaMask#12001 allowlist add: etherscam.wtf MetaMask#11970 metamick.online MetaMask#12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (MetaMask#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (MetaMask#12086) * add 160 scam urls (MetaMask#12083) * Add scams targetting Arbitrum (MetaMask#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (MetaMask#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (MetaMask#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (MetaMask#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (MetaMask#12102) * Allowlist metarisk.com (MetaMask#12106) (MetaMask#12107) * Add new phishing domains (MetaMask#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (MetaMask#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (MetaMask#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (MetaMask#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (MetaMask#12128) * enseth.domains (MetaMask#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (MetaMask#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (MetaMask#12136) * Add scams targetting Arbitrum (MetaMask#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (MetaMask#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (MetaMask#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (MetaMask#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (MetaMask#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (MetaMask#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (MetaMask#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (MetaMask#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (MetaMask#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (MetaMask#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (MetaMask#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (MetaMask#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (MetaMask#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (MetaMask#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (MetaMask#12160) * allowlist: add launchpad.ethereum.org (MetaMask#12173) * Add scams targetting Arbitrum and Vela (MetaMask#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (MetaMask#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (MetaMask#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (MetaMask#12180) * test: verify that every fuzzylist entry is also in allowlist (MetaMask#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (MetaMask#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (MetaMask#12220) added in 41c8a74 * block 93 scam urls (MetaMask#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (MetaMask#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (MetaMask#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
sime
added a commit
to sime/eth-phishing-detect
that referenced
this pull request
Jan 6, 2024
* Add new phishing domains (MetaMask#9598) * Add Uniswap phishing domains * Add Uniswap phishing domain * Add revoke.cash phishing domain * Add fake OTC swap site * Add new Meta World P2E domain * Add new Super Seed Game domain * Add revoke.cash phishing domain * Add new Xeonus Wallet domain * remove duplicate xn--revok-r51b.cash * Add new Xeonus Wallet domain; add new FTX phishing domains * Add new phishing domains * remove duplicate xeowallet.com * Add new Meta World/1935 World domain * Add new Squirrels Flow domain * removing dupes * removing dupe * Add new fake OTC swap site * Add new Meta World/1935 World phishing domain Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * remove non merged files * Add phishing url to blacklist * Add phishing urls to blacklist * Add more phishing urls * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add more phishing urls * Add phishing url to blacklist * Add phishing urls to blacklist * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add phishing urls to blacklist * Add phishing url to blacklist * Add more phishing urls * Add more phishing urls * removing dupe * Add more phishing urls * Add phishing urls to blacklist * Update config.json * Update config.json * Add more phishing urls * fixing punctuation error * removing dupe * add phishing domain to blacklist (MetaMask#12017) * Add Phishing Sites to Blocklist [20] (MetaMask#12023) 1012276, 1013027 7c6086a5-aed8-466e-b451-4442ae2550e8 -- "zyber-swap.com", "liquityprotocol.co", "pangolinexhange-help.com", "bakeryswap-main.com", "www81.coin-conect.online", "www21.coin-conect.online", "balancer.platform-user.com", "balancer-fi.signin-users.com", "accounts-coin.com", "betashibarium.com", "500xpad.top", "openzsseaio.in", "zyber-swap-dex.com", "open-ocean-economy.com", "bonker.io", "bluutopia.vipairdrop.xyz", "hey-mint.github.io", "frontalape.com", "gabotao.com", "etherc.org", * Block 212 scam URLs (MetaMask#12022) * Block 222 scam URLs ``` "1inch-crypto.com", "1inch-drop.com", "1inch.exchange.blazingblade.pk", "1inch.logininister.site", "account.metamask.io.produsenkawatbronjong.com", "accounthelper-coinbase.com", "accountresolvesapp.webflow.io", "aipadtech.pages.dev", "airdrop.erredj.duckdns.org", "airdropsalertdapp.com", "airdropsalerts-dapp.com", "aplxaz.com", "app-txidcontract.com", "app.blurswaps.com", "app.blurswaps.uk", "apskca.com", "arbitums-foundation.com", "aribtrum.foundation", "artbitrum.com", "ascuuhzx.com", "asijxal.com", "asijxaz.com", "asixca.com", "asokxa.com", "asoxkasl.com", "aspxlzasl.com", "aszlxspwa.com", "ausdux.com", "autoswapgallery.tech", "avouch-sync.info", "axopksaz.com", "azpoaz.com", "balancers.pro", "bbrc.io", "beeemmiigrate.xyz", "bhbjkkl.com", "bjokabc.com", "blockbug.live", "blur-marketplace.io", "blurswaps.com", "blurswaps.uk", "centrecosistem.store", "claim.usdc.repl.co", "clyptogpt.com", "coinbanko.club", "coinbase.com-help.id", "coinbase.computersarehard.com", "coinbase.sercurecoins.com", "coinbase24.com", "coinbase63.com", "coinbase649.zendesk.com", "coinbase9370.zendesk.com", "coinbasecashgiveaway.finance.blog", "coinbasecz.com", "coinbasetransactions.org", "connectionapprovals.com", "connectrectify.site", "coompound.org", "coumpound.com", "cryptokey.site", "cryptolink.live", "cryptospad.io", "cspodfxzkl.com", "dallebitbridge.xyz", "dapp-to-connect.netlify.app", "dappsfix.pages.dev", "dappsfortune.netlify.app", "defiapess.xyz", "deficonnect.cloud", "diofiodp.com", "dsodkca.com", "duishak.com", "eth-app.site", "ethereum-launchpad.xyz", "ethereum-merge.cloud", "exchange.pancakeswap.finances.informecruzonline.com.br", "exchange.pancakeswap.finances.snk-iq.com", "fgjxkap.com", "firstreplycus.online", "fixwallet.app", "foundation-arbitrum.xyz", "freeblur.com", "geminionusdc.com", "giogoij.com", "giveaway-claim-rewards.com", "globalapps.site", "hasndja.com", "incoinbasese.com", "infocusdesign.ca", "ixizox.com", "jdkop.com", "jfjxoal.com", "jlkmklhbl.com", "kyc.account.metamask.io.produsenkawatbronjong.com", "ledger.live-newupdates.com", "lido.bio", "liveprotocols.net", "ljsdklsd.com", "logcoinbaseauth.com", "login-auth-coinbase.com", "login-coinbase.biz", "login-coinbase.ltd", "login-coinbase.net", "login-confirmation-coinbase.com", "login-financial-coinbase.com", "login-manage-coinbase.com", "login-myaccount-coinbase.com", "login-withdrawal-coinbase.com", "login.coinbase.authsecurefund2579923573.com", "maingatesync.co", "mainnethubapis.live", "mainnetnetworks.org", "metamask-protect.com", "metamask-protect.net", "metamask-verifyprotocol.net", "metamask.co.zw", "metamask.fmg.co.zw", "metamask.io.merge.artandcraftz.xyz", "metamask.io.produsenkawatbronjong.com", "metamask.nordgroup.io", "metamask.productions", "metamask1.cc", "metamask1.io", "metamaskupgrade.online", "metamassk.app", "mmetawallet.dynip.online", "multichain-app.netlify.app", "muskcryptos.net", "newmetamask.io", "nws-hazssfhjwqwz.com", "ooapsza.com", "oweidop.com", "pancakeswap.finances.informecruzonline.com.br", "pancakeswap.finances.snk-iq.com", "pancakeswap.finances.plumbersinpontyclunrhonddacynontaff.com", "pancakeswapcode.financialmarketsworld.com", "pancakeswapinc.com", "pancakeswapsdefi.com", "pancakeswapv3.finance", "pay.metamassk.app", "pkapksla.com", "produsenkawatbronjong.com", "projectrxnegade.com", "projectsnetfix.com", "protocoldapps.firebaseapp.com", "protocoldapps.web.app", "rapidrectifier.online", "recovery-coinbase.info", "redirect.ocoinbase.com", "repairvault.onrender.com", "salskjkjcaas.com", "sc-coinbase.com", "secure-coinbase.net", "secure-exodus.com", "secure-manage-coinbase.com", "secure-signin-page-colnbase-01.cleansite.us", "secure-signin-page-colnbase-02.cleansite.info", "secure2-coinbase.info", "secure2-financial-coinbase.com", "securecryptodefi.com", "service-metamask.io", "shsaza.com", "signin-coinbase.biz", "signin-coinbase.net", "signs-repo.com", "soliditywork.pages.dev", "sonar-watch.com", "sonarwwatch.com", "sterlingcaptcha.tech", "swapredirect.online", "system.join-guild.info", "the-bitcointrendapp.financialmarketsworld.com", "the-bitcointrendapp.newfinancialmarketworld.com", "thecrypto-nftcorpltd.com", "theprojectmainnet.live", "tokenconnects.network", "tradingsignalsdirectlt.com", "trustappaidofficials.trustedappaid.store", "trustwallet-connect.econtablesegui.online", "trustwallet.com.verifycation.required.sgldesign.com.au", "uniswap-2.org", "uniswap-on-ic.xyz", "uniswap-system.com", "uniswap.v2-6.org", "uniswapgpt.com", "upgrademetamask.tech", "usdc.claimz.repl.co", "usdc.holdings", "vault-metamask.com", "verify-coinbase.biz", "verify-coinbase.info", "verify.trutswallet.com.permnit.xyz", "verify.trutswallet.com.yousee-dkis.click", "vgvjapx.com", "vlaunchconnect.com", "vuiciso.com", "walletconnecthub.com", "wcdapps.pages.dev", "web.vaultnet.site", "web3sdk.io", "wencoinbase.com", "weodpsokql.com", "withdrawal2-coinbase.com", "withdrawalhistory-coinbase.com", "www-exchange-gemini.com", "x-coinbase.info", "xaozlasa.com", "xasoiz.com", "xaspoic.com", "xaszoxias.com", "xdaxdaae.com", "xjaoz.com", "xjoaksl.com", "xn--optmsm-6va.net", "xoaplasz.com", "xzxzla.com", "yearnfi.dapp-web3.com", "yearnfi.web3dapp.org", "zerobeings.app", "zoapoxka.com", "zoapska.com", "zxsiaskd.com", ``` * remove dupes remove dupes ``` "1inch.exchange.blazingblade.pk" "aipadtech.pages.dev" "app.blurswaps.com" "app.blurswaps.uk" "aribtrum.foundation" "blur-marketplace.io" "blurswaps.com" "blurswaps.uk" "coinbanko.club" "coinbase24.com" "coinbasecashgiveaway.finance.blog" "ethereum-merge.cloud" "geminionusdc.com" "metamask.co.zw" "metamask.fmg.co.zw" "metamask.io.merge.artandcraftz.xyz" "metamask.io.produsenkawatbronjong.com" "metamask.nordgroup.io" "metamask.productions" "metamask1.io" "newmetamask.io" "pancakeswapcode.financialmarketsworld.com" "protocoldapps.web.app" "service-metamask.io" "signs-repo.com" "the-bitcointrendapp.financialmarketsworld.com" "the-bitcointrendapp.newfinancialmarketworld.com" "trustwallet.com.verifycation.required.sgldesign.com.au" "uniswap-on-ic.xyz" "web3sdk.io" ``` * block metamask-uniswap.web.app block "metamask-uniswap.web.app", h/t malwrhunterteam (https://twitter.com/malwrhunterteam) * add more scams @ 91.235.116.231 scams ``` "live-newupdates.com", "ref-7472829.com", "profile96.com", "dapps.manualbridgevalidate.online", "metamask.io-1s2r.io-srt777.cloud", "metamask-verify.com-0x9.xyz", "com-0x9.xyz", "io-srt777.cloud", "manualbridgevalidate.online", "online-verifylogauth.com", "bdogedefi.com", "chatgpt4token.com.bdogedefi.com", "chatgpt4token.com", ``` * block neutra.netlify.app block neutra.netlify.app --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230321 (MetaMask#12024) * Scams 20230321 * Removed duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add scams targeting Arbitrum and Optimism (MetaMask#12019) * add scams targeting Arbitrum and Optimism * add scams targeting Arbitrum * add scams targeting Arbitrum * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230320 (MetaMask#12011) * Scams 20230320 * Scams 20230320 * Fix file * Removed duplicate --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing domain to blocklist (MetaMask#12006) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Domains to Blocklist [2] (MetaMask#11989) Fake exchanges selling tesnet tokens: platform.enduring-markets.com hoffmancapital.org Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing website mooncatcommunity.xyz to blacklist (MetaMask#12002) * Add phishing website mooncatcommunity.xyz to blacklist * Update config.json --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12025) * Add scams targetting Arbitrum (MetaMask#12026) * CP-987 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12034) * Add new domain * Add phising sites to blocklist * Add phising sites to blocklist * Remove safe aptos * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove email * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new domains * Remove subroute * Add phishing sites to blocklist * Fix * remove dplicate deviatorsnft.xyz * Add phishing sites to blocklist * Fix * Fix * remove duplicates * Add phishing sites to blocklist * Removed linktree * Add phishing sites to blocklist * Remove linktree * Move topax to whitelist * Fix * Add phishing sites to blocklist * Remove derivs * Add phishing sites to blocklist * Add new phishing domains * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Fix * Adding phishing domains to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove dup * Fix * Add phishing sites to blocklist * Add phishing sites to blocklist * remove dups * Add phishing sites to blocklist * fix * Fix * remove eofwq * Fixes * Add phishing sites to blocklist * Fix * Add phishing sites to blocklist * Add new phishing domains * Fix * Add phishing sites to blocklist * Remove dup * Add phishing sites to blocklist * Add phishing sites to blocklist * Add phishing sites to blocklist * Remove some domains * Remove * Add new phishing domains * Fix * remove dups --------- Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12032) * CP-1020 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Lido and Zetachain * add scams targeting Optimism * add scams targeting Optimism * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12040) * CP-1024 scams targetting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * add phishing domain to blacklist (MetaMask#12044) * Main master merge (MetaMask#12056) * bring in b4a0f3f * bring in 4709c2f * bring in c27c6ae * bring in ba12cec * remove duplicates * removing sites from blocklist [5] (MetaMask#12039) * removing sites from blocklist [5] remove from blocklist: retriv-discount.ru MetaMask#11969 ninedao.club MetaMask#11962 coinpal.eu MetaMask#12035 bbrc.io MetaMask#12028 bonker.io MetaMask#12033 * Remove FP * Remove duplicate --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add phishing domain to blacklist (MetaMask#12057) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 266 scam URLs (MetaMask#12053) * Block 266 scam URLs Block 266 scam URLs ``` "0xaltcoin.com", "1291swisscoins.com", "1inch-cryptoair.com", "1inch-drop.top", "1inch.logininister.fun", "247cointrading.com", "24coin-swap.com", "24coinbet.icu", "acecoins.pro", "advicecoins.com", "affordcoins.com", "afraidcoins.com", "afterallcoin.com", "afterallcoins.com", "aftertherecoins.com", "airdrop-app.uniswapp.org.unirswap.cloud", "app1inchswap.fun", "app1inchswap.pw", "app1inchswap.site", "appsushiswaps.com", "autocryptominer.net", "bakeryswaps-1inch.com", "binanceer.top", "binancer.space", "binanceus.art", "bitnemo.com", "blockchainhelpdesks.com", "bnbkraken.com", "challenge-coinbaseservices.online", "circle-finance.com", "circleswap.exchange", "claim-intem.duckdns.org", "claim-optimism.com", "claimcryptogpt.site", "claims-stablecoin.com", "cloudfxcoin.com", "coin-trix.com", "coin579.com", "coin599.com", "coin9master.com", "coinbase-eth.buzz", "coinbase-login-forgot-passwords.dynamic-dns.net", "coinbase-promo.xyz", "coinbasenc.com", "coinbee.buzz", "coindexta.com", "coinemeta.com", "coinfylimited.live.metamark-crypto.co", "coinness-goods.ink", "coinness-goods.online", "coinness-goods.shop", "coinness-goods.site", "coinness-goods.store", "coinness-goods.today", "coinness-goods.xyz", "coinness-help.cfd", "coinness-help.online", "coinness-help.shop", "coinness-help.store", "coinness-help.website", "coinness-help.xyz", "coinness-notice.cyou", "coinness-notice.icu", "coinness-notice.online", "coinness-notice.site", "coinness-notice.store", "coinness-notice.xyz", "coinness-pr.bond", "coinness-pr.cfd", "coinness-pr.click", "coinness-pr.homes", "coinness-pr.icu", "coinness-pr.sbs", "coinness-pr.xyz", "coinness.bond", "coinness.cfd", "coinness.click", "coinness.cyou", "coinness.homes", "coinness.ink", "coinness.online", "coinness.sbs", "coinness.shop", "coinreaders-alarm.cfd", "coinreaders-alarm.click", "coinreaders-alarm.live", "coinreaders-alarm.pro", "coinreaders-alarm.sbs", "coinreaders-alarm.site", "coinreaders-alarm.store", "coinreaders-alarm.today", "coinreaders-alarm.xyz", "coinreaders-info.live", "coinreaders-info.online", "coinreaders-info.pro", "coinreaders-info.site", "coinreaders-info.today", "coinreaders-info.top", "coinreaders-info.website", "coinreaders-info.xyz", "coinreaders-notice.cfd", "coinreaders-notice.info", "coinreaders-notice.online", "coinreaders-notice.pro", "coinreaders-notice.sbs", "coinreaders-notice.website", "coinreaders-notice.xyz", "coinreaders-report.click", "coinreaders-report.cloud", "coinreaders-report.live", "coinreaders-report.online", "coinreaders-report.pro", "coinreaders-report.site", "coinreaders-report.world", "coinreaders-report.xyz", "coinreaders.info", "coinreaders.ink", "coinreaders.online", "coinreaders.pro", "coinreaders.site", "coinreaders.today", "coinreaders.top", "coinreaders.website", "coinreaders.xyz", "coinsbaes.com", "coinsbalancer.com", "coinsbasemarket.com", "coinsbaseus.com", "coinswitch01.com", "cointahmin.com", "cointamp.com", "cointechapp.online", "cointelegraph-post.art", "cointelegraph-post.biz", "cointelegraph-post.cfd", "cointelegraph-post.shop", "cointelegraph-post.world", "cointelegraph-post.xyz", "cointerelle.com", "cointr-pro.com", "coinvaluecheck.com", "coinvaluetoday.com", "coinvaulters.com", "coinventure.pro", "coinvoleting.info", "coinx-financial.ltd", "coldcoin-crypto.com", "connect.https-web3-1inch.io", "continentaldividefilm.com", "coresbinancefx.com", "corporategovernancechatgpt.com", "corporategovernancegpt.com", "cryptgete.com", "crypto-balancer.world", "cryptocoinsmixer.com", "cryptominermerch.org", "cryptominernode.com", "curcumycontagotas.fun", "czbinance.xyz", "defi-oasis.app", "defi23.com", "defi27.com", "defi29.com", "defi33.com", "defivalor.com", "del-coins.com", "delvincoin.com", "dsdcoin.vip", "ethereumtrust.global", "exodus-wallet.dbxtools.in", "flashcoin.trade", "fullmining.xyz", "globalcoin-ark.com", "globalmineralco.com", "globalmineralmaroc.com", "gramcoinstrade.com", "hexcoin.win", "icedoutcoinflip.xyz", "idmining.site", "instaminingpool.com", "intrexmining.com", "irricoin.com", "jogosdefi.com", "keycoinsonline.com", "kraken-coin.top", "kraken-darknet-onion.info", "kraken-darknet-tor.info", "kraken-market.info", "kraken-marketplace.info", "krakendarknet.biz", "lcoinex-hoome.site", "lidomining.net", "lk-coinbase.xyz", "lmvucverification.work.gd", "login2-customer-coinbase.com", "metamask-info.com", "metamask-pro.com", "metamask-v.liliadayspa.com", "metamask-web3.live", "metamask1.cc", "metamasks.store", "metamaskwap.com", "minerlab.org", "minersppe.com", "mingukcoin.com", "miningfarms.xyz", "miningtrades.top", "mn-coinbase.com", "ms-coinbase.xyz", "myminingtrade.top", "now-coinbase.com", "oceantradefinance.com", "onecoinsign.com", "onepiececoin.wtf", "ordinalminer.com", "ordinalsminer.com", "pancakeswap.finances.plumbersinwhitchurchcardiff.com", "paycellcoin.com", "paycellcoin.online", "paycellcoin.site", "paymecoin.org", "paysellcoin.com", "paysellcoin.online", "portmining.com", "pr70coins.com", "punkcoinus.com", "punkcoinyes.com", "richcoins.net", "safcoinc.com", "sardine-metamask-test.sardine.biz", "savvy-payments.com", "seedfarm-mining.com", "seedify-claiming.pl", "signin-coinbase-dashboard.cloud", "stablecoinlimited.com", "techbinance.com", "thedevsnft.live", "trade.pancakeswap-live.site", "tradecoinsfx.org", "tradex-coin.com", "trustwallet.7136.webhost-03.my-host.network", "unicoin-mining.com", "uniswap.dapp.soulwallet.io", "uniswap.v2-7.org", "uniswap.v2-connect.org", "uniswap2.0x00.site", "uniswapv3.thechun.dev", "ur-coinbase.xyz", "usdtdefimining.online", "usdtdefimining.shop", "usdtdefimining.store", "v-wallet-graph.cf", "vl-coinbase.xyz", "walletdapps.host20.uk", "wuebit.com", "wvw-app-ledger.com", "wvw-profile-cex-io.com", "wvw-trezorr-exchange.com", "wvw-trezzor-loggin.com", "wvw-trezzor-wallets.com", "wvw-trezzor-walletts.com", "www-exodus-wallet.coderlite.com", "wwwcoinpayz.xyz", "xn--kpa-ethereum-4ib.se", "xrp-coin.top", "xuniswap.io", ``` * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * added-dapp-pro-phishing-domain (MetaMask#12051) Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#12048) * Add Phishing Sites to Blocklist [8] 1013936, 1010891 f9c8dae3-df6e-4cf2-8d64-623fcd422882 -- "erdefimining.live", "arbitrum.gift", "tesla-intelligence.net", "notagoblintown.xyz", "tokenx.top", "rtfkt-airforce.com", "gptairdrop.com", "aurbitrum.foundation", * Removed duplicate "aurbitrum.foundation" --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * add 159 scam urls (MetaMask#12063) * Add scams targetting Arbitrum (MetaMask#12072) * CP-1057 scams targetting Arbitrum * add scams targeting Arbitrum * add scams targeting arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12073) * CP-1066 scams targetting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum * add scam targeting arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add beamerbridge.web3-dapp.com to blacklist (MetaMask#12069) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12076) * CP-1070 scams targetting Arbitrum * add scam targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add https://gpt-4-openai.com/ (MetaMask#12068) Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Block 74 Scam URLs (MetaMask#12066) * Block 74 Scam URLs Block 74 Scam URLs ``` "1inch-drop.org", "1inch-event.top", "500coin-get.top", "account-coinbase.info", "account-page-coinbase.com", "amazon802.work.gd", "apecoinbase.xyz", "arbitrum-airdropclaim.space", "auth-account-coinbase.com", "briddgemetis.com", "claim500crypto.top", "claimcryptoeth.xyz", "claimrewards.xyz", "coinbase-com.aljadiriyah.com", "coinbase-com.bienestarencolombia.com", "coinbase-com.domenicorizzitelli.com", "coinbase-com.house-cleaning-boca-raton.com", "coinbase-com.matinumampimpa.com", "coinbase-com.randieslist.com", "coinbase-com.smartcars-dubai.com", "coinbase-helpsupport.com", "coinbase-report.parliamentary.live", "coinbase-reportsc.weyas.live", "coinbase-servapp.beenurajpootfilms.com", "coinbase-support.participating.me", "coinbase.20biz.com", "coinbase.cryptocurrencysupport.org", "coinbase.internetagentur.com", "coinbase.login-account-support.com", "coinbase.login.stickerprinting.sg", "coinbase.myzone2fa.com", "coinbase.reset-account-support.com", "conect-metamask.com", "connectiongeneral.com", "dappsfortune.pages.dev", "dex-air.top", "ethereum-bal.com", "ethereum-stake.top", "ethereumclassic.com.cn", "ethereumfunding.com", "exclaim-inc.info", "https-web3-1inch.io", "keeper-wallet.app", "launchpad-apps.network", "metamasck.dyn.ddnss.de", "metamash.io", "metamask-protectwallet.com", "metamask-support-connect.com", "metamaska.site", "metamaskdev.com", "metamast.com", "mr-zkazino.site", "musk.exchange", "pancakeswap.globalsoftwaresupport.com", "pancakeswap.online", "pancakeswapairdrop.net", "pancakeswapp.fans", "pancakeswapper.com", "reset-page-coinbase.com", "resssetpassword-onlycoinbase3.com", "resssetpassword-onlycoinbase4.com", "start-seedify.com", "tocx.net", "trustwallet.danosglobalbank.com", "uniswap.org.ru", "uniswap.v2-app.org", "uo-coinbase.xyz", "verify-page-coinbase.com", "walletcryptomixer.com", "walletmvalidator.online", "web3-defi-connect.pages.dev", "winner-crypto.top", "xearn.pro", "your500.top", ``` * Removed duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * CP-1072 scams targetting Arbitrum (MetaMask#12077) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * Add Phishing Sites to Blocklist [8] (MetaMask#12065) 1016089, 1012284, 1015440 -- "coinmarketpage.com", "cointop3.abson.top", "eth-dep.com", "myportalmeta.com", "layer3.dapp-web3.net", "main.d1ot2qh3wiov1v.amplifyapp.com", "metapad-beta.xyz", "stake-wise.net", Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Updated a blacklist for a phishing site. (MetaMask#12064) Phishing site promising OpenSea tokens. Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * adding phishing sites to blocklist [8] (MetaMask#12037) * adding phishing sites to blocklist [4] ZD 1015275, 1014461, 1015220 * removing dupe * Update config.json MetaMask#11997 MetaMask#12029 * adding additional site ZD 1015236 * adding additional phishing site ZD 1015706 * adding 2 more phishing sites ZD 1015466, 1015989 --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add new phishing domains (MetaMask#12014) * Add new phishing domains * Remove dupe * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domain * Add new phishing domains * Add new phishing domains * Add new phishind domain * Add new phishing domains --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * removing site from blocklist [] adding to allowlist [] (MetaMask#12010) blocklist remove: wallet.discord-acc.ru MetaMask#11942 ltcminer.com MetaMask#12001 allowlist add: etherscam.wtf MetaMask#11970 metamick.online MetaMask#12000 Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add Phishing Sites to Blocklist [8] (MetaMask#11981) * Add Phishing Sites to Blocklist [8] 1011496, 1010826, 1010168, 1010168, 1010776, 1011450 e53bb25a-2b1d-4a8e-bfb8-9a4fcf82180d, beddb62a-02f0-4649-983a-dc450d2c8313, -- "bnbminner.com", "prominervip.com", "valid-swap.net", "vaultdex.io", "veefriends.kw-nfts.com", "csix-airdrop.com", "bitsvip.top", "dapp.moverse.live", * Remove duplicates --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add scams targetting Arbitrum (MetaMask#12078) * CP-1081 scams targetting ChainPatrol * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Update config.json (MetaMask#12086) * add 160 scam urls (MetaMask#12083) * Add scams targetting Arbitrum (MetaMask#12088) * CP-1096 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicate --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: Add CONTRIBUTING.md (MetaMask#12090) * docs: fix header capitalization * docs: Add CONTRIBUTING.md --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * docs: consolidate lists documentation (MetaMask#12091) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add new phishing domains (MetaMask#12085) * Add new phishing domains * fix merge conflict --------- Co-authored-by: Alex Herman <alexx.herman@gmail.com> * CP-1105 scams targetting Arbitrum (MetaMask#12095) Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add scams targetting Arbitrum (MetaMask#12097) * CP-1106 scams targetting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting Arbitrum * add scam targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * Add new phishing domain (MetaMask#12102) * Allowlist metarisk.com (MetaMask#12106) (MetaMask#12107) * Add new phishing domains (MetaMask#12113) * Add new phishing domains * Add new phishing domain * Add new phishing domains --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * fix: convert crlf to lf in src/config.json (MetaMask#12121) * fix: convert crlf to lf in src/config.json The file was erroneously converted to CRLF line-endings in 4f86fc0 (MetaMask#12102). This reverts the file back to LF line-endings. * gitattributes: eol=lf * breaking: drop support for nodejs >=14 <16 (MetaMask#12122) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 160 scam urls (MetaMask#12128) * enseth.domains (MetaMask#12130) Fake ENS domain phishing for funds https://urlscan.io/result/a30bd2bc-3773-4d65-bede-722d3af5b7bd/ address: 0x4e5c564fE3DA52c1F88C6A95163A91d0FDb1898F (eth) * add scams targeting Arbitrum, Lido, and Metamask (MetaMask#12125) Co-authored-by: Harry <409H@users.noreply.github.com> * remove redundant blocklist entries (MetaMask#12136) * Add scams targetting Arbitrum (MetaMask#12134) * CP-1186 scams targetting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> * tooling: add clean:allowlist and clean:blocklist scripts (MetaMask#12135) * add clean-config.js * add clean:blocklist,clean:allowlist scripts * Add Phishing Sites to Blocklist [8] (MetaMask#12151) 1016174, 1016373, 1016555, 1017627, 1016211, 1014796 548b83dc-3c01-44fc-b577-72c14bc81ab4 -- "rarible-giftcard-promo.premintweb3.com", "walletsbugfix.pages.dev", "garbage-friend.in", "web.coiresolveapps.live", "bridge-zksync.com", "zksync-cryptodrop.com", "launchpads.network", "consensystrade.online", Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * gitattributes: enforce lf for *.js and *.json only (MetaMask#12153) * update gitattributes * restore .gitignore * add 4 domains to blocklist (MetaMask#12152) arbitrum-claim.xy aribirtum.com mask-portal.com eth20-web.com Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * add 161 scam urls (MetaMask#12139) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * remove redundant allowlist entries (MetaMask#12137) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * test: fail if blocklist or allowlist contain redundant entries (MetaMask#12138) * remove redundant allowlist entries * test: ensure ethereum.org is not blocked regardless of presence in allowlist * scripts/clean-config: export cleanAllowlist/cleanBlocklist functions * test: ensure blocklist and allowlist contain no redundant entries * remove redundant blocklist entry --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * [chore] update devDependencies (MetaMask#12142) * devDeps: async@2.6.4->3.2.4 * devDeps: csv-parse@4.4.6->5.3.6 * devDeps: needle@2.2.4->3.2.0 * devDeps: punycode@2.1.1->2.3.0 * devDeps: tape@4.9.1->5.6.3 * devDeps/resolutions: browserify>assert@1.5.0->2.0.0 avoid pulling in object-assign subdependency * devDeps: bump lockfile `yarn upgrade`: upgrade while keeping version constraints --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * PhisingDetector: fix stripping of leading `www.` only (MetaMask#12144) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * deps: replace fast-levenshtein with fastest-levenshtein (MetaMask#12148) fastest-levenshtein is an order of magnitude more performant and fast-levenshtein is now just acting as a shim for it. hiddentao/fast-levenshtein#30 Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add scams targeting Arbitrum (MetaMask#12156) * add scams targeting Arbitrum * add scam targeting Arbitrum * add scams targeting Arbitrum * adding phishing sites to blocklist [4] (MetaMask#12132) * adding phishing sites to blocklist [7] ZD 1017914, 1017533, 1016452, 1019051, 1015670 * Line endings * Remove duplicates * Re-add --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * Add Phishing Sites to Blocklist [16] (MetaMask#12147) * Add Phishing Sites to Blocklist [17] 1018965, 1016257, 1016257, 1020363, 1016211, 1016932, 1015611, 1019569, 1018916 aed6b094-d731-4017-a357-ef8d53c7e3fc, f5bed256-0d86-499c-800c-0ca62869803a, c8c49617-6ae3-4eb0-8ee9-83751a9d3d1e, a1cb20cb-1ad0-4cfe-8859-6e37eedaf1c6, -- "ether.scc-defi.com", "zksync-2023.com", "mask-token.net", "multifunctionaltools.com", "connectwallet.syncfix.live", "wincoining.com", "zksync-cryptodrop.com", "claims-arb.com", "kitwallet.vercel.app", "transactions.openseail.ws", "videostat.pw", "integratedconnect.host", "pulsechainnetwork.ru", "kava-connect.pro", "platform.apool.app", "rarlblles.com", "optimismairdrops.net", * Line endings * Remove duplicate --------- Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> * add mask-tokens.io to blocklist (MetaMask#12160) * allowlist: add launchpad.ethereum.org (MetaMask#12173) * Add scams targetting Arbitrum and Vela (MetaMask#12158) * CP-1206 scams targetting Arbitrum * add scams targeting Arbitrum * remove duplicates * add scams targeting Arbitrum * add scams targeting Arbitrum * add scams targeting vela.exchange * add scam targeting zetachain and impersonating daomaker --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * adding phishing site to blocklist [2] from zd * Update config.json * Add scams targetting Arbitrum (MetaMask#12176) * CP-1235 scams targetting Arbitrum * remove duplicate * add scams targeting Arbitrum * add scams targeting Arbitrum --------- Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> * scripts/clean: fix overly eager duplicate removal (MetaMask#12159) As-is, the clean script would remove both instances of duplicate entries. This fixes that by adding an extra pass where all removed entries are individually readded after removal. * scripts/clean-config: fix tolerance check (MetaMask#12180) * test: verify that every fuzzylist entry is also in allowlist (MetaMask#12178) Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> * Add phishing url to blacklist * Update config.json (MetaMask#12167) Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> * Fix merge conflicts * Fix broken comma * Remove duplicate * remove duplicate blocklist entry (MetaMask#12220) added in 41c8a74 * block 93 scam urls (MetaMask#12222) block 93 scam urls ``` "1inch-2023.net", "1inch-aircrypto.net", "1inch-usdc.com", "1inch.com.tr", "2023-1inch.com", "500-trustpads.top", "aieocoindrop.com", "airdrop-1inch.cc", "airdrop-blurclaim.one", "airdrop-usdc.org", "airdrop.metamasak.io.perminnt.xyz", "airdrops-event.top", "apinodev2.online", "app-pancakeswop.com", "assetsplusdapps.biz", "balancer-reward.com", "claims-dogecoin.com", "crypto-500claim.top", "cryptoclaim500.top", "cryptocoin-claim.com", "dao-seedify.fund", "dao-seedify.pl", "dapp-seedify.fund", "dashboards-blur-io.com", "digital-web3.com", "event-1inch.com", "giveawayclaimlucky.cyou", "giveawaysclaim.xyz", "helpmetamask.live", "infometamask.digital", "layer3xyzclaim.com", "live-seedify.fund", "looks-distribution.org", "mainnetoncfix.netlify.app", "metamask-verificationprocess.com", "metamask-verified-wallet.com", "metamask-wallet-support.com", "metamask-wallets.net", "metamask.bond", "metamask.cryptohelpdesk.app", "metamask.ee", "metamask.org.cn", "metamask.securetool.org", "metamask.synctools.net", "metamask10.co", "metamask10.vip", "metamaskc.com", "metamaskexs.com", "metamaskunion.work.gd", "metemask.lol", "mintlayer.ch", "multidefisapp.info", "muskoin.online", "nansen-portfoilo.com", "newtrustnftclaim.info", "pancakeswap-finance.me", "pancakeswap-mirror.com", "pancakeswap.airdrop-whitelist.com", "pancakeswap.airdrop-whitelist.xyz", "pancakeswap.fbiofficial.info", "pancakeswap.finance.portlongacessclientdig.com", "pancakeswap.finances.alavdub.com", "pancakeswap.sbs", "pancakeswap.us", "pancakeswap.wallet-recovery-5748910.xyz", "pancakeswap.wallet-recovery-9041850.xyz", "pancakeswap.wallet-recovery-941030.xyz", "pancakeswapfinance.top", "pancakeswapfix.netlify.app", "portfoilo-nansen.com", "portfolio-metamaskinfo.com", "portfolio-nansen.ai", "pro-opensea.io", "rainbowpad.top", "raudiymc.com", "real-money.vip", "reclaimprotocol.org", "recovery-phrase-metamask.com", "rewards-layerzero.com", "splendorous-kringle-27ac38.netlify.app", "stader-community.fun", "tpad500.top", "trezor.nodelinks.net", "trustnetpad.xyz", "uniswape.com.aviaryhotel.com", "verifymetamask.cocahq.com", "web10511.web07.bero-webspace.de", "web10518.web07.bero-webspace.de", "web3connect.net", "youraml.com", "zksynk.info", "zksynk.world", "zksyrc.life", ``` * Add Phishing Sites to Blocklist [28] (MetaMask#12179) * Add Phishing Sites to Blocklist [28] 1020375, 1012938, 1021096, 1021075, 1016421, 1020693, 1018145, 1019382, 1020354, 1020198, 1020117, 1020244, 1020623, 1019046, 1020546, 1021122, 1019429, 1011411 130a4341-5df2-454a-8116-67b2732f79f1, 0287f673-cdaa-4818-847f-058f2ba5d2bf, 927e4494-7fdc-4aa3-9921-2ea9eb8eb33c, c345709d-9cbe-444f-b013-d6f60365064c, ae17f602-bd3a-4b84-89ce-ecc8593a0668, -- "web3et.gq", "eth-grid.top", "nodegenix.com", "sync-swap.xyz", "zksyncink.com", "space.claims", "defi-farmer.win", "sub-support.web.app", "zksync-air.com", "airdrop-kmon.com", "rpc-fix.com", "multibridger-nft.com", "fixnode.support", "zksync-adrop.com", "sync-swap.xyz", "ecwde.xyz", "zetarex.com", "app.validatorimport.com", "theblurswap.io", "ordinalsmarket.cc", "decentralizedfinance1.com", "genesea.co", "app.cosesh.com", "cryptogpt.bz", "ecoluniverse.com", "stargaite.finance", "layerzeros.network", * fix merge conflict --------- Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Scams 20230403 (MetaMask#12207) * Scams 20230403 * Scams 20230403 * Fix CI test --------- Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> * Add phishing url to blacklist * Add newline * Add phishing url to blacklist * Add more phishing urls * Remove duplicates * Remove duplicate alredy covered by reported second-level domain * Add phishing domain to blacklist * removing dupe * Add phishing url to blacklist * Add phishing url to blacklist * Add phishing url to blacklist --------- Co-authored-by: Vile <111662603+vile@users.noreply.github.com> Co-authored-by: Harry <409H@users.noreply.github.com> Co-authored-by: AlexHerman1 <38788573+AlexHerman1@users.noreply.github.com> Co-authored-by: rxpwnz <rxpnwz@12k.comv> Co-authored-by: samczsun <samczsun@users.noreply.github.com> Co-authored-by: 0x4C756B65 <82839436+0x4C756B65@users.noreply.github.com> Co-authored-by: Nick <13466714+Nick-Son@users.noreply.github.com> Co-authored-by: Mich <49607867+dubstard@users.noreply.github.com> Co-authored-by: HARRY DENLEY <HARRY.DENLEY@OUTLOOK.COM> Co-authored-by: Simon Males <sime@sime.net.au> Co-authored-by: Nikita Varabei <nVarabei@gmail.com> Co-authored-by: ghsth <128328367+ghsth@users.noreply.github.com> Co-authored-by: deshvin <2859402+deshvin@users.noreply.github.com> Co-authored-by: Pascal <24350127+tarballqc@users.noreply.github.com> Co-authored-by: blocksecscamreport <118912475+blocksecscamreport@users.noreply.github.com> Co-authored-by: NikitaVr <NikitaVr@users.noreply.github.com> Co-authored-by: Anish Shandilya <anishshandilya@yahoo.com> Co-authored-by: gytis2 <gytis@dappradar.com> Co-authored-by: legape <gabriel.buragev96@gmail.com> Co-authored-by: Jonas Lejon <jonaslejon@users.noreply.github.com> Co-authored-by: Jonas Lejon <jonas@triop.se> Co-authored-by: Duck <116859447+Duck-OS@users.noreply.github.com> Co-authored-by: legobeat <109787230+legobeat@users.noreply.github.com> Co-authored-by: Alex Herman <alexx.herman@gmail.com> Co-authored-by: yuxuan-MTRLabs <93772201+yuxuan-MTRLabs@users.noreply.github.com> Co-authored-by: lljxx1 <lljxx1@gmail.com> Co-authored-by: Frederik Bolding <frederik.bolding@gmail.com> Co-authored-by: Taylor Monahan <7924827+tayvano@users.noreply.github.com> Co-authored-by: Taylor Monahan <tayvano@gmail.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Block 266 scams
this PR is the same as #12049 but without the excessive array shuffling and minus two FPs
⚠Scams are mirrored on URLSCAN with my tag
Block 266 scam URLs