Monthly report attached - February 2023


Bad sites detected and shared with vendors for removal:26




Search Balancer (1790 hits in 25 files of 28 searched)

"(app-balancer|balancer-app|bolancer|balancer|balahcer|bqlancer|baIancer|balencer|baiencer|balancer-fi|balancer-fl|baiancer-fi|balencer-fi)" (1790 hits in 25 files of 28 searched)


As balancer is a common word and "Load Balancer" is often registered and present in subdomains alike, there is a lot to filter though, but the real number of scams is fairly low, about 26 from 1790, or 1.45%.


Sneak Peek in my abuse inbox



Metamask, airdrop, walletconnect, etc:


Search "walletconnect" (6 hits in 4 files of 28 searched)
Search "trustwallet" (43 hits in 20 files of 28 searched)
Search "sushiswap" (36 hits in 13 files of 28 searched)
Search "pancakeswap" (166 hits in 23 files of 28 searched)
Search "metamask" (576 hits in 25 files of 28 searched)
Search "elonmusk" (240 hits in 25 files of 28 searched)
Search "coinbase" (354 hits in 25 files of 28 searched)
Search "airdrop" (292 hits in 25 files of 28 searched)



jaw drop clip art - Clip Art
        LibraryTotal potential bad hits for the month ~22K

Search "(coinbase|colnbase|c0inbase|c0lnbase|cornbase|coirbase|balancer|balahcer|bqlancer|baIancer|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*1inch-[a-zA-Z]|[a-zA-Z]*oneinch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*pancake5[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*unisvv[a-zA-Z]*|unlswap"|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|dapp|wallets|wallect|synchr|rectify|unlock|walet|1inch|airdrop|ethereum|walet|wallet|coinbase|uniswap|pancakeswap|liquidity|vvallet|metamask|metamaks|metemask|metamaks|paraswap|exchange|liquidity|kraken|bitso|dapp|sushiswap|sushlswap|sushisvv|opensea|polygon|walletconnect|waletconect|waiietconnect)" (22516 hits in 28 files of 28 searched)



Multiple offenders exposed and banned in Discord



Warnings issued Discord

Warnings issued Twitter

Fake apps Google play store taken down - 4 this month

Not crypto specific, just mobile trojans that could steal your assets as well if a malicious actors takes control over a Mobile device.

Warning for social engeneering media phishing




https://cdn.discordapp.com/attachments/841312599479025684/1078034635189133423/image.png


35 GH pull requests (dot and metamask anti-phish repos) in February

https://github.com/dubstard

MetaMask/eth-phishing-detect Block 186 scam URLs 
#11494 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 22 scam URLs 
#11475 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 44 scam URLs 
#11466 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 77 scam URLs 
#11444 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 33 scam URLs 
#11402 by dubstard was merged last month
MetaMask/eth-phishing-detect Update config.json 
#11393 by dubstard was merged last month

MetaMask/eth-phishing-detect Block 68 scam URLs 
#11736 by dubstard was merged 19 hours ago
MetaMask/eth-phishing-detect Block 54 scam URLs 
#11707 by dubstard was merged 3 days ago
MetaMask/eth-phishing-detect Block fake mee6 bot and others 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11684 by dubstard was merged 5 days ago
MetaMask/eth-phishing-detect Same as 11672, just re raised 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11681 by dubstard was merged 5 days ago
MetaMask/eth-phishing-detect Block 44 scam URLs 
#11672 by dubstard was closed last week
MetaMask/eth-phishing-detect Block 36 scam URLs 
#11658 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 36 scam URLs 
#11639 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 63 scam URLs 
#11625 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 64 scam URLs 
#11624 by dubstard was closed last week
MetaMask/eth-phishing-detect Block 52 scam URLs 
#11614 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block 115 scam URLs 
#11594 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block scam URLs 
#11576 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block scam URLs 
#11567 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block 35 scam URLs 
#11547 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block scam imitations of Balancer.fi 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11521 by dubstard was merged 2 weeks ago