Monthly report attached - August 2024


Thanks for your continuous support!

Bad and suspicious domains detected, shared with vendors for removal where applicable: 23


    UrlScan IoCs
     Balancer

    Pingdom monitoring Uptime and DNS changes - all good




Multiple offenders exposed and banned in Discord

from:dubstard After: 2024-08-01 Before: 2024-08-31 in: 👮︲moderation

68 scammers/offenders banned in August 2024, on top of the bans enforced by the AutoMod + the Multi server bot and the new MEE6 bots, who do much of the heavy lifting now in terms of auto bans and deleting bogus invitations towards external discord servers.



Warnings issued Discord

Internal -
Added Cow Swap assets to monitored



Flagged known scammer wallet (victim had complained in one of the tickets we had)

They entered a typo squatted domain, instead of the real one using mobile.
The scammer's wallet is 0x6381cba96572ecc0ead43e23664043f728cccc6a , scam site app[.]ben-qi[.]fi


https://etherscan.io/address/0x6381cba96572ecc0ead43e23664043f728cccc6a

Public facing


8 August



9 August
General chat channel



12 August General chat channel

24 August



28 August (support discussion channel)



30 August (user report)



31 August


Key for DeBank

Still plenty of Computing Units available - 897,899




2 GH pull requests (PF and metamask anti-phish repos) in August 2024

ℹNote that each PR blocks many scam URLs, so the total number of blocked entries is significantly larger than the PRs.




2 standalone PRs

As scammers tend to be very active during weekends and holidays, I also try to be.

SEAL 911 bot

ℹNote that each PR pushed via the SEAL bot appears as security-alliance-bot - a bit like the "hidden hand"

SEAL BOT V2 (current bot) h/t samczsun and SEAL Alliance.
Dub, [01-Aug-24 8:19 AM]
/report metamasksrf-dzgtethpg8ekbec6.eastus-01.azurewebsites.net metamasksat.azurewebsites.net metamaskivn.azurewebsites.net metamaskefn.azurewebsites.net

SEAL Phishing Bot, [01-Aug-24 8:19 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [09-Aug-24 9:45 AM]
/report 1inch-events.org

SEAL Phishing Bot, [09-Aug-24 9:45 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [10-Aug-24 8:51 AM]
/report auth.trezorstarti.com

SEAL Phishing Bot, [10-Aug-24 8:51 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [11-Aug-24 8:11 AM]
/report brielivingston.com/ssl/?fy=wkey5eg269wb&

SEAL Phishing Bot, [11-Aug-24 8:11 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 11:08 AM]
/report oneinch.app

SEAL Phishing Bot, [12-Aug-24 11:08 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 1:05 PM]
/report en-us-1inch-exchange.org/#

SEAL Phishing Bot, [12-Aug-24 1:05 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 1:37 PM]
/report en-web-1inchjoin.network

SEAL Phishing Bot, [12-Aug-24 1:37 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 2:38 PM]
/report tronin.net/

SEAL Phishing Bot, [12-Aug-24 2:38 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 3:17 PM]
/report ethoq.xyz/host

SEAL Phishing Bot, [12-Aug-24 3:17 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 7:23 PM]
/report trust-5895.shop trust-2866.shop trust-6669.shop trust-8895.shop trust-2889.shop trust-5569.shop

SEAL Phishing Bot, [12-Aug-24 7:23 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [12-Aug-24 7:43 PM]
/report usdt-ethy.icu metabsmaksekds.azurewebsites.net metasnmaskes.azurewebsites.net kucoinesnligin.azurewebsites.net

SEAL Phishing Bot, [12-Aug-24 7:43 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [13-Aug-24 11:29 AM]
/report cloud-ttrezor-hd-wallet.github.io cloud-ttrezor-logln.github.io cloud-ttrezor-suite-app.github.io cloud-ttrezor-suite.github.io cloud-ttrezor-wallet.github.io

SEAL Phishing Bot, [13-Aug-24 11:29 AM]
The following URLs cannot be reported via the bot:
  - cloud-ttrezor-hd-wallet.github.io/
  - cloud-ttrezor-logln.github.io/
  - cloud-ttrezor-suite-app.github.io/
  - cloud-ttrezor-suite.github.io/
  - cloud-ttrezor-wallet.github.io/

Dub, [13-Aug-24 7:30 PM]
/report cc-con.com/gsession.php

SEAL Phishing Bot, [13-Aug-24 7:30 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [15-Aug-24 1:15 PM]
/report triezorwallets.azurewebsites.net/

SEAL Phishing Bot, [15-Aug-24 1:15 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [15-Aug-24 1:21 PM]
/report trezorsuite.live

SEAL Phishing Bot, [15-Aug-24 1:21 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [15-Aug-24 2:10 PM]
/report traozorsuitieio.azurewebsites.net

SEAL Phishing Bot, [15-Aug-24 2:11 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [15-Aug-24 2:14 PM]
/report exooduss.azurewebsites.net walet-exoduis.azurewebsites.net

SEAL Phishing Bot, [15-Aug-24 2:14 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [15-Aug-24 5:26 PM]
/report tzrioriiosuitie.azurewebsites.net

SEAL Phishing Bot, [15-Aug-24 5:26 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 8:45 AM]
/report terzoeuwallet.azurewebsites.net

SEAL Phishing Bot, [16-Aug-24 8:45 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 9:43 AM]
/report ledegrwallet.azurewebsites.net metamaskdrte.azurewebsites.net metamaskedvd.azurewebsites.net metamaskesdf.azurewebsites.net metamaskfrd.azurewebsites.net metamaskrer.azurewebsites.net triezorwallets.azurewebsites.net

SEAL Phishing Bot, [16-Aug-24 9:43 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 10:09 AM]
/report suite.trezoriovpjcahpzkrewelclulmszwbqpzmzgub37gbcjlvluxtruqad.onion/web

SEAL Phishing Bot, [16-Aug-24 10:09 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 2:32 PM]
/report trezoeunwallet.azurewebsites.net/

SEAL Phishing Bot, [16-Aug-24 2:32 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 2:32 PM]
/report pladamousaribached.com/99847758-3bd8-43e9-9fb7-8c51b08bd46d

SEAL Phishing Bot, [16-Aug-24 2:32 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [16-Aug-24 3:42 PM]
/report atmllwte.xyz

SEAL Phishing Bot, [16-Aug-24 3:42 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [17-Aug-24 6:54 AM]
/report metamaskedvd.azurewebsites.net metamaskdrte.azurewebsites.net metamaskrer.azurewebsites.net

SEAL Phishing Bot, [17-Aug-24 6:54 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [17-Aug-24 6:54 AM]
/report traozorsuitieio.azurewebsites.net/

SEAL Phishing Bot, [17-Aug-24 6:54 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [18-Aug-24 2:46 PM]
/report www.sonicshard.com

SEAL Phishing Bot, [18-Aug-24 2:46 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [18-Aug-24 4:51 PM]
/report airdrop-soniclabs.pages.dev fantom-soniclabs.com labs-sonic.pages.dev sonic-labs.pages.dev soniclabs-airdrop-new.pages.dev soniclabs-new-airdrop.pages.dev fantom-soniclabs.com sonic-migrate.com sonic-migration.com

SEAL Phishing Bot, [18-Aug-24 4:51 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [19-Aug-24 7:31 AM]
/report trezor.io-eu-us.com

SEAL Phishing Bot, [19-Aug-24 7:31 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [19-Aug-24 11:33 AM]
/report tzriorilogsuitie.azurewebsites.net

SEAL Phishing Bot, [19-Aug-24 11:33 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [21-Aug-24 10:43 AM]
/report trezori.info trezori.io

SEAL Phishing Bot, [21-Aug-24 10:43 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [22-Aug-24 10:50 AM]
/report 1inchvip.cx/app/

SEAL Phishing Bot, [22-Aug-24 10:50 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [22-Aug-24 11:48 AM]
/report 1inch9.cx/app/#/

SEAL Phishing Bot, [22-Aug-24 11:48 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [24-Aug-24 7:40 AM]
/report balanccerv2.cloud airdropball-app.com airdropball-dapp.com airdropballapp.com balancer.capital d-balancer.org d-balancer.vip

SEAL Phishing Bot, [24-Aug-24 7:40 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [26-Aug-24 9:19 AM]
/report pancakeswap-zksync.finance

SEAL Phishing Bot, [26-Aug-24 9:19 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [26-Aug-24 9:29 AM]
/report pancakeswap.flnance.web3-app.ink/

SEAL Phishing Bot, [26-Aug-24 9:29 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [26-Aug-24 9:50 AM]
/report  sussadeekorat.com/kkulywkv/

SEAL Phishing Bot, [26-Aug-24 9:50 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [26-Aug-24 9:53 AM]
/report gaiaassessoriapf.com.br/aridropcollects

SEAL Phishing Bot, [26-Aug-24 9:53 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [27-Aug-24 9:16 AM]
/report trezzorr-fchucuh5c2e6fpgk.eastus-01.azurewebsites.net/

SEAL Phishing Bot, [27-Aug-24 9:16 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [27-Aug-24 9:54 AM]
/report trezor-live.com

SEAL Phishing Bot, [27-Aug-24 9:54 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [28-Aug-24 6:21 AM]
/report 1inchio.app

SEAL Phishing Bot, [28-Aug-24 6:21 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [28-Aug-24 9:37 AM]
/report app-1inch.at 1inchairdrop.cc

SEAL Phishing Bot, [28-Aug-24 9:37 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

SEAL Phishing Bot, [30-Aug-24 9:05 AM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious

Dub, [30-Aug-24 4:34 PM]
/report blur-nftclaim7e.vercel.app

SEAL Phishing Bot, [30-Aug-24 4:34 PM]
Thanks for reporting! The URLs will be reviewed and blocked if they're found to be malicious