Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Block 93 scams #14819

Merged
merged 38 commits into from Jan 8, 2024
Merged

Block 93 scams #14819

merged 38 commits into from Jan 8, 2024

Conversation

dubstard
Copy link
Contributor

@dubstard dubstard commented Jan 6, 2024

Block fake calendly, advance fee fraud crypto "investment" portals plus the usual phishing and wallet drainers.

    "abrobit.com",
    "admiralgroup.ltd",
    "ally-build.com",
    "app-claim.codes",
    "aqrufinance.com",
    "aragon-stack.sbs",
    "aronstockmarketplus.live",
    "bid-fragment.com",
    "binaryinvestmentplatform.com",
    "bitexfy.com",
    "bitexli.com",
    "bitlexx.com",
    "bitmelex.com",
    "bulkfinance.org",
    "calendly.one",
    "calendly.re",
    "calendly.so",
    "calendly.top",
    "capitalpayltd.com",
    "cftcquestion.com",
    "citiex.ltd",
    "coinerhkfx.com",
    "coinmac.live",
    "coinmarketfxtrade.com",
    "coinspaymaster.com",
    "connectnode.pages.dev",
    "cryp-to.net",
    "cryptographyearns.com",
    "coinmerges.com",
    "dappsfix.netlify.app",
    "defistargate.org",
    "eligibility-pytnetwork.co",
    "eliteinvestnet.com",
    "en-web3fix.pages.dev",
    "exfoxbit.com",
    "framexltd.com",
    "galaxybycoin.com",
    "generatepassword.tech",
    "genesishivemining.com",
    "globaldcxtrades.online",
    "golden-oportunity.com",
    "goldentradingspip.com",
    "hilltopexperts.com",
    "iforexbit.org",
    "illuviumliveairdrops.com",
    "illuviumpassairdrop.com",
    "imperiagrowthlimited.net",
    "investmentsmasters.com",
    "jeffvex.com",
    "kandrex.com",
    "kenedex.com",
    "ltdexchanger.com",
    "mdctoption.com",
    "metamaskredirects.com",
    "muskxwallet.com",
    "nepalpizza.com",
    "nodebugresolve.com",
    "nodebugresolver.com",
    "oilbaycapital.net",
    "openseaclaimairdropbox.com",
    "owexs.com",
    "pancakeswap.wf",
    "pancakeswaplottery.com",
    "payregbit.com",
    "portfolio-metamask-io.org",
    "reliableyieldspot.com",
    "royal-cryptos.com",
    "secure-exodus-update.com",
    "securecapital.live",
    "skygatefinex.com",
    "smartdappfix.pages.dev",
    "smarttradeslimited.group",
    "sofxcryptotrade.live",
    "spacevil.com",
    "sparkdextrade.com",
    "stake-btc.com",
    "startcoines.com",
    "steadyflow-assets.com",
    "sumdexa.com",
    "tenzabix.com",
    "tonscoins.com",
    "tradingaffiliatemarketing.com",
    "usdccrypto.com",
    "venlorya.com",
    "verified-metamask.click",
    "wallet-extendedpublickey.pages.dev",
    "walletconnect-applicationprogram-interface.pages.dev",
    "web3center.pages.dev",
    "web3world.pages.dev",
    "westernallylimited.com",
    "wisexbit.com",
    "xanade.com",

dubstard and others added 30 commits December 22, 2023 10:11
```
"abc-shield.web.app",
    "admin-metamask.randomsystem.net",
    "authcontractsapp.com",
    "authweb3fd.tk",
    "authweb3vm.gq",
    "authweb3yp.gq",
    "bitcoin-sparks.pages.dev",
    "bitcoincats.app",
    "celsius-network.pages.dev",
    "chainsdappintegrations.pages.dev",
    "claim-crypto.xyz",
    "claim-rendernetwork.com",
    "claimsatlas.com",
    "claimstarknet.com",
    "coqinu.app",
    "coqinu.net",
    "decentralizedchainprotocols.pages.dev",
    "defilliama-web3.com",
    "evernodes.pages.dev",
    "glveaway-metamasks-assets.000.pe",
    "injective.cash",
    "mastergloballimited.com",
    "member-metamask.randomsystem.net",
    "metamask.wallet-recover.com",
    "multichainsolutions.ar-services.shop",
    "network-layerzero.online",
    "officialweb3.xyz",
    "paperhand.digital",
    "phtm.claims",
    "revoke.page",
    "revokecashe.com",
    "revokecrypto.xyz",
    "strk-presale.space",
    "syncblocks.web.app",
    "tradeprofitoptions.com",
    "unlswap.in.net",
    "usdcryptocoins.com",
    "venus-lo.claims",
    "vulcanforged.claims",
    "web3-connectjk.cf",
    "web3-connectpj.gq",
    "xrpbonus-promo.net",
    "xusdcrypto.works",
    "zerion.claims",
```
```
    "1inchtoken-newsletter.com",
    "aave-web3.app",
    "aave-web3.net",
    "analos.claims",
    "arbitrum-survey.sbs",
    "authweb3lg.gq",
    "authweb3sp.cf",
    "authweb3sv.tk",
    "authweb3vq.tk",
    "bitcards.shop",
    "blockchain-rectification-bfs.pages.dev",
    "blockchain-web3-tools.online",
    "bonkreward.web.app",
    "bycoin-trading.com",
    "claimfreeairdrop.net",
    "claiming-manage.codes",
    "claimtrx-airdrop.co",
    "conneckts-wallets.netlify.app",
    "connectorlog.pages.dev",
    "connects-collab-land.vercel.app",
    "debank-web3.org",
    "desks.live",
    "eligible-apecoin.com",
    "eminentminers.com",
    "encrypteddapps-acs.pages.dev",
    "enter-efinity.claims",
    "netapinode.com",
    "fixdesolver.net",
    "fxfortunebitmart.com",
    "globaloptimumfx.com.cryptostreamtrade.com",
    "muskfxspaceltd.com",
    "injectivedrop.top",
    "injectivedrop.xyz",
    "join-cryptojobs.com",
    "join-shibarium.com",
    "log-metamaskwallet.ddnss.eu",
    "metamask.bid",
    "metamasks-drop.com",
    "metamaskteamsupport.com",
    "mexcfinance-ltd.com",
    "multiwallet-connect.com",
    "omnicat.claims",
    "openseanft-projects.vercel.app",
    "openseapro-claimnow.vercel.app",
    "openseapro-claimonce.vercel.app",
    "openseaprojs-claim.vercel.app",
    "pancakeswap-exchange.mom",
    "pancakeswapfinances.com",
    "pancakeswaps.fi",
    "portal-suinetwork.com",
    "rectification-2ia.pages.dev",
    "revoke-cash.top",
    "revokeconnect.vercel.app",
    "revokecontracts.com",
    "roneltos.com",
    "rrevokee.cash",
    "shibcontestzone.com",
    "sirairdropclaim.com",
    "support-pancakeswap.pages.dev",
    "survey-zksync.net",
    "survey-zksync.org",
    "syncblocks.firebaseapp.com",
    "teslacoin-clicks.vercel.app",
    "teslacoin-giveaway.vercel.app",
    "teslacoinclaims.vercel.app",
    "teslacoingrabs.vercel.app",
    "teslacoins-claim.vercel.app",
    "testingttt.com",
    "tron.claims",
    "vaultscanner.com",
    "web3-1inch.com",
    "web3-claiming.support",
    "web3-connectgs.tk",
    "web3-connecthp.tk",
    "web3-connecthv.tk",
    "web3-connectjl.cf",
    "web3-connectpl.tk",
    "web3-connectzv.cf",
    "web3bank.finance",
    "www-1inch-web.io",
    "www-1inch-web3.com",
    "x-prize.info",
    "xn--cmpound-l0a.finance",
    "xn--compund-g0a.finance",
    "xn--ebank-4ya.com",
    "xn--niswap-9lb.com",
    "xn--niswap-oya.org",
    "xn--ulswap-ieb.org",
    "xn--unswap-j8a.org",
    "xpubactivation.pages.dev",
```
```
    "ai-decentraldapp.pages.dev",
    "alternative-uniswap-interface.pages.dev",
    "apyeth.gifts",
    "arbitrumplace.online",
    "aunetos.com",
    "authsyncontracts.com",
    "authweb3jo.gq",
    "authweb3kq.cf",
    "authweb3ks.tk",
    "authweb3ky.cf",
    "authweb3lv.gq",
    "authweb3yg.tk",
    "balancerlfs.click",
    "birdeye.claims",
    "bithot-fintech.com",
    "bluriol0x95724798d703e8719637dfgjhdfgfghfdghlinvemtory.pages.dev",
    "caleatis.org",
    "catalyst-thesandbox.claims",
    "circle-networks.online",
    "claim-vertexprotocol.com",
    "claim-web3.support",
    "contractfix.pages.dev",
    "coq-inu.org",
    "cryptoprimsfx.online",
    "deluxefxexpert.com.swissoptionx.com",
    "dogwifcoins.net",
    "exchange-cryptoweb3.net",
    "fixingerror.org",
    "kavaprotect.one",
    "ledgerenterprises.com",
    "memes-kombats.pages.dev",
    "metamask.2fareset.com",
    "metamaskmetaverse.com",
    "mint-illivium.com",
    "mollygateway.org",
    "mydappsync.pages.dev",
    "newyear-uniswap.org",
    "onechain-dapps.pages.dev",
    "pancakeswap.finances.preflight.ir",
    "portalsgaming.events",
    "project-mainnet.com",
    "rectifynode.pages.dev",
    "swiftauthresolve.com",
    "unisvvep.cc",
    "uniswap-v3.art",
    "walletmetamask.ddnss.eu",
    "web3-connectaq.cf",
    "web3-connectfy.tk",
    "web3-connectlp.tk",
    "web3-connectya.cf",
    "web3-connectyp.cf",
    "web3-connectyq.cf",
    "wonderland.gifts",
    "zarxcrypto.com",
```
```
    "1inch.im",
    "1inch.lu",
    "accountrevive.pages.dev",
    "alurter.com",
    "approve-0x41718e9e80d6b0ebc99c7d2f807.netlify.app",
    "authweb3fi.gq",
    "authweb3lv.cf",
    "authweb3rs.gq",
    "binancebusdairdrop2024.com",
    "blur-gift.org",
    "bull2024.xyz",
    "bunngeee.exchange",
    "casinovulcan-platinum.com",
    "ciaim-uniswap.org",
    "claim-avaxmemes.com",
    "claim-mystakes.com",
    "claimdrops.online",
    "diveblockchain.com",
    "eamakeprofit.com",
    "ewp.live",
    "farmlandgame.net",
    "free-cryptos.net",
    "hub-injective-bke.pages.dev",
    "illuminbeta.com",
    "injectivechain.co",
    "integratemultichainfix.pages.dev",
    "maskdrop.claims",
    "metamask-button.xingchensg.com",
    "metamasksinger.com",
    "metamasksupportdepartment.com",
    "millionpepe.com",
    "minimizer.art",
    "new-year2024.xyz",
    "optimism-survey.com",
    "pepe2024.fun",
    "pepe2024.pro",
    "pepe2024.space",
    "portalgaming.gifts",
    "revoke-dapp.com",
    "revokeapprovals.com",
    "shiba2024.site",
    "shibarium2024.com",
    "shrapnel-2024.com",
    "solnewyear.xyz",
    "thecannibals.xyz",
    "web3-connecthk.tk",
    "web3-connectlr.tk",
    "web3-connectrg.gq",
    "zksync-quiz.com",
    "zksync-survey.co",
```
"arbitrum-submit.com",
```
    "0xpoiygon.com",
    "1inch.fo",
    "1inch.so",
    "amlwalletconnects.xyz",
    "appmainnetserver.net",
    "appunlswap.ru",
    "banksydao-finance-landing.pages.dev",
    "blockchain-activate.firebaseapp.com",
    "blockchain-activate.web.app",
    "blockchain-cryptoweb3.com",
    "blockchain-dex.pages.dev",
    "blockchain-node.pages.dev",
    "blockchain-synchronizer.tech",
    "blockchainaccountrestore.io",
    "blockchainrepository.xyz",
    "blockchainweb.support",
    "blocknodespot.com",
    "bonko.space",
    "cicleo.io",
    "claim-earndrop.io",
    "claim-nfp.com",
    "claim-services.codes",
    "claim.seedify.cloud",
    "claim.seedify.fund",
    "claimairdrop.top",
    "claiming-app.com",
    "claiming-service.codes",
    "claimlitoshi.top",
    "coinsvalidation.com",
    "connectchain.pages.dev",
    "connectsyncs.live",
    "connectweb3-shakepay.online",
    "cranium.exchange",
    "crononodes.com",
    "cryptolink.tech",
    "dapp-ait.tech",
    "dapp-space.vercel.app",
    "dapps-securechainnode.pages.dev",
    "dapptoolkit.on.fleek.co",
    "dappwalletsrestore.com",
    "dogebank.app",
    "doggobank.app",
    "eanrdrop.io",
    "eanrdrops.com",
    "earn-drop.app",
    "earn-drop.cc",
    "earn-drop.net",
    "earn-drop.online",
    "earn-drop.org",
    "earn-droq.com",
    "earndro.pm",
    "earndrop-drop.com",
    "earndrop.cc",
    "earndrop.claims",
    "earndrop.finance",
    "earndrop.info",
    "earndrop.me",
    "earndrop.one",
    "earndrop.site",
    "earndrop.vip",
    "earndrop.web3-claim.run",
    "earndrops.com",
    "earndrops.net",
    "earndrops.tech",
    "earndroq.net",
    "earndrup.io",
    "earnidrop.io",
    "earnsdrop.org",
    "earnthedrop.info",
    "earsdrop.io",
    "earsndrop.com",
    "easndrop.io",
    "easndrops.io",
    "easrndrops.io",
    "eblockchaintools.live",
    "erandrops.io",
    "erasndrop.io",
    "exchange-coins.net",
    "feyorrafaucetclaim.top",
    "getdrop.ing",
    "getdrop.ink",
    "getdrop.space",
    "getsdrop.xyz",
    "giant-financial.com",
    "give-ripple.org",
    "greebitcoin-claim.pages.dev",
    "hedera.farm",
    "illivium-claim-mint.com",
    "injective.one",
    "iot-chainlysis.online",
    "isisekelogroup.co.za",
    "join-manta.network",
    "mask-claim.com",
    "mask-token.claims",
    "maskbymetamask.com",
    "memefarming.fun",
    "metamask-1.com",
    "metamask-2.com",
    "metamask-online.app",
    "metamask-polygon-airdrop.digital",
    "metamask-redirect.com",
    "metamask-redirects.com",
    "metamask.airdrop.2fareset.com",
    "metamask.develop-extension.com",
    "metamaskcoin.io",
    "metamaskcrypto-wallet.com",
    "metamaskin.com",
    "metamaskit.com",
    "metamasktokens.com",
    "metamasktokens.io",
    "metamaskuk.com",
    "metamaskwallet-crypto3.com",
    "metamaskwallet-web3.com",
    "motor-muse.com",
    "multichain-authenticator.pages.dev",
    "multidefisapp.live",
    "neo-layer2.org",
    "node-sc.com",
    "nodesea.app",
    "presale-cogwise.pages.dev",
    "promo-xrp.net",
    "register-earndrop.com",
    "ripple-jap.com",
    "safereum-io.pages.dev",
    "service-claim.codes",
    "services-claiming.click",
    "smolcoin.claims",
    "solana-bonus.info",
    "solutionpack.net",
    "stake-nfprompt.io",
    "stakingchain-rewards.live",
    "starknet-claim.top",
    "stethshiba.top",
    "swap-revoke.cash",
    "syncconnects.com",
    "synchronizebridge.live",
    "theblockchainnode.com",
    "titanxbuyandburn.app",
    "unclaim-earndrop.io",
    "uniswap-redirect.com",
    "uniswap-revoke.cash",
    "uniswap.bot",
    "uniswap.events",
    "uniswap.ph",
    "uniswap.pro-blockchain.com",
    "uniswapairdrop.co",
    "uniswapqe.top",
    "uniswapqq.top",
    "uniswapqr.top",
    "uniswapqt.top",
    "uniswapqw.top",
    "uniswapv3-event-notifier.onrender.com",
    "uniswapx.net",
    "unoblox.com",
    "wallet-integrator.com",
    "walletrefund.com",
    "washb-tokn.pro",
    "web-connectim.gq",
    "web3unofficial.com",
    "webautrectify.com.ng",
    "wiredfxtrade.com",
    "xrp-japan.org",
```
```
  "adderleyholdingsltd.com",
    "amstest13.com",
    "autosyncs.digital",
    "blockchain-web3.io",
    "blockchainbalancers.io",
    "caleatise.io",
    "capitalinvestfinances.com",
    "claims-bonkcoin.com",
    "clear.claims",
    "cryptomaindapp.pages.dev",
    "cybriacoin.com",
    "decentralizeddappssecure.com",
    "defiguard.cloud",
    "diamondhands.buzz",
    "diamondhands.cash",
    "diamondhands.icu",
    "diamondhands.monster",
    "diamondhands.top",
    "dropped.ance.site",
    "earn-drops.cc",
    "edmetamasktokens.io",
    "edthemask.claims",
    "esolverpanel.org",
    "evmhub.net",
    "evmsyncresolve.pages.dev",
    "exdouesccv.azurewebsites.net",
    "exdoures.azurewebsites.net",
    "exdusewallet.godaddysites.com",
    "exhodusweb3walet.webflow.io",
    "exodiuweb3wllet.webflow.io",
    "exodswallet0.godaddysites.com",
    "exodus-wallet.pages.dev",
    "exodus_.godaddysites.com",
    "exoduswalletis.godaddysites.com",
    "exoduswallot.webflow.io",
    "exoduswebwallnet.webflow.io",
    "exoduweb3vallet.webflow.io",
    "extendedpublickeyactivation.pages.dev",
    "financial-market-world.com",
    "financial-offer.com",
    "flexdril.com",
    "geckoinu.xyz",
    "helpdesks.live",
    "iasolutions.claims",
    "info-promotions-bonus.sbs",
    "integratedapps.pages.dev",
    "kimboavax.xyz",
    "kucoinescaf.azurewebsites.net",
    "kucoinescc.azurewebsites.net",
    "lessfeeandgas.claims",
    "lottery-pancakeswap.finance",
    "mail.optimumlivecapital.com",
    "manage-claim.codes",
    "maskclaims.io",
    "masklaunch.com",
    "memefi.live",
    "meta-redirect.com",
    "metamaskclaimtoken.com",
    "metamasknftsplace.com",
    "metamasks.com",
    "metamasks.net.br",
    "metamasktoken.link",
    "microstrategy.gifts",
    "mymask.io",
    "node-walletconnect.pages.dev",
    "octanet-capital.com",
    "openssea.org",
    "pancakegames.finance",
    "pancakeswaplottery.finance",
    "projectsvaultsync.tech",
    "refactorlogs.pages.dev",
    "reward.claims",
    "service-sync.pages.dev",
    "support.ledgerlivehub.com",
    "svvdsdffggrg.pages.dev",
    "techlab.thrivetech.site",
    "testes8.pages.dev",
    "themask.claims",
    "themasktoken.io",
    "traderprofx.com",
    "us_exodus_signin.godaddysites.com",
    "v3webmodal.site",
    "very-frequent-evocative-beds-solana-mainnet-quiknode-pro.xyz",
    "walletrevoke.cash",
    "web3revoke.cash",
    "webexxoduswllt.webflow.io",
    "xrpfoundation-promo.net",
    "xrpfoundation-promotion.com",
    "xrpfoundation-promotion.net",
    "xrpfoundtaion-event.com",
    "xrpfoundtaion-prize.net",
    "xrplimited-event.com",
    "xrplimited-event.net",
    "xrplimited-promotion.net",
```
@dubstard dubstard changed the title Block scams Block 93 scams Jan 6, 2024
dubstard and others added 6 commits January 8, 2024 07:57
Block fake calendly, advance fee fraud crypto "investment" portals plus the usual phishing and wallet drainers.

```
    "oilbaycapital.net",
    "openseaclaimairdropbox.com",
    "owexs.com",
    "pancakeswap.wf",
    "pancakeswaplottery.com",
    "payregbit.com",
    "portfolio-metamask-io.org",
    "reliableyieldspot.com",
    "royal-cryptos.com",
    "secure-exodus-update.com",
    "securecapital.live",
    "skygatefinex.com",
    "smartdappfix.pages.dev",
    "smarttradeslimited.group",
    "sofxcryptotrade.live",
    "spacevil.com",
    "sparkdextrade.com",
    "stake-btc.com",
    "startcoines.com",
    "steadyflow-assets.com",
    "sumdexa.com",
    "tenzabix.com",
    "tonscoins.com",
    "tradingaffiliatemarketing.com",
    "usdccrypto.com",
    "venlorya.com",
    "verified-metamask.click",
    "wallet-extendedpublickey.pages.dev",
    "walletconnect-applicationprogram-interface.pages.dev",
    "web3center.pages.dev",
    "web3world.pages.dev",
    "westernallylimited.com",
    "wisexbit.com",
    "xanade.com",
```
"treasuries-chain.link",
Copy link
Collaborator

@AlexHerman1 AlexHerman1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@AlexHerman1 AlexHerman1 merged commit 6c444c2 into MetaMask:main Jan 8, 2024
6 checks passed
@deshvin deshvin added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jan 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocklist addition Issue or PR requesting addition of a domain to the blocklist
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants