Monthly report attached - March 2023


Bad sites detected and shared with vendors for removal: 26



Search Balancer (1762 hits in 30 files of 30 searched)

Search "(app-balancer|balancer-app|bolancer|balancer|balahcer|bqlancer|baIancer|balencer|baiencer|balancer-fi|balancer-fl|baiancer-fi|balencer-fi)" (1762 hits in 30 files of 30 searched)


As balancer is a common word and "Load Balancer" is often registered and present in subdomains alike, there is a lot to filter though, but the real number of scams is fairly low, about 26 from 1762, or 1.47%.



Sneak Peek in my abuse inbox



Metamask, airdrop, walletconnect, etc:

Search "airdrop" (439 hits in 30 files of 30 searched)
Search "coinbase" (1843 hits in 30 files of 30 searched)
Search "elonmusk" (317 hits in 30 files of 30 searched)
Search "metamask" (643 hits in 30 files of 30 searched)
Search "pancakeswap" (207 hits in 30 files of 30 searched)
Search "sushiswap" (76 hits in 27 files of 30 searched)
Search "trustwallet" (47 hits in 20 files of 30 searched)
Search "walletconnect" (13 hits in 8 files of 30 searched)




jaw drop clip art - Clip Art
        LibraryTotal potential bad hits for the month ~44K

(usdc|claim|coinbase|colnbase|c0inbase|c0lnbase|cornbase|coirbase|balancer|balahcer|bqlancer|baIancer|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*1inch-[a-zA-Z]|[a-zA-Z]*oneinch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|a-zA-Z]*1-inch[a-zA-Z]*|[a-zA-Z]*1inch[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*pancake5[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*unisvv[a-zA-Z]*|unlswap"|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*unisvap[a-zA-Z]*|a-zA-Z]*uni-[a-zA-Z]*|[a-zA-Z]*pancakesw[a-zA-Z]*|[a-zA-Z]*pancakesv[a-zA-Z]*|[a-zA-Z]*pancokesv[a-zA-Z]*|[a-zA-Z]*pancokesw[a-zA-Z]*|[a-zA-Z]*pancakosw[a-zA-Z]*|[a-zA-Z]*pancakkesw[a-zA-Z]*|[a-zA-Z]*uniswap[a-zA-Z]*|[a-zA-Z]*uniswap-[a-zA-Z]|[a-zA-Z]*unisvap[a-zA-Z]*|dapp|wallets|wallect|synchr|rectify|unlock|walet|1inch|airdrop|ethereum|walet|wallet|coinbase|uniswap|pancakeswap|liquidity|vvallet|metamask|metamaks|metemask|metamaks|paraswap|exchange|liquidity|kraken|bitso|dapp|sushiswap|sushlswap|sushisvv|opensea|polygon|walletconnect|waletconect|waiietconnect)" (44470 hits in 30 files of 30 searched)



Multiple offenders exposed and banned in Discord






Warnings issued Discord

Be wary of Fake Reports

Discord DMs


Euler


Trezor | Ledger

https://www.bleepingcomputer.com/news/security/trezor-warns-of-massive-crypto-wallet-phishing-campaign/






Circle

Google docs!

Address Poisoning



Fake Bals

Chip Mixer

Fake mint

Fake bals and fake Critical metamask update





Fake apps Google play store taken down - 3 this month

Just one crypto specific, others are mobile trojans that could steal your assets as well if a malicious actors takes control over a Mobile device.


Discord bot advice



34 GH pull requests (dot and metamask anti-phish repos) in March


https://github.com/dubstard




Visibility 
Organization 
Sort 
MetaMask/eth-phishing-detect Block 203 Scam URLs 
#12167 by dubstard was merged 8 hours ago
MetaMask/eth-phishing-detect last try 
#12166 by dubstard was closed 2 days ago
MetaMask/eth-phishing-detect Block 207 scam URLs 
#12165 by dubstard was closed 2 days ago
MetaMask/eth-phishing-detect Block 215 scam URLs 
#12163 by dubstard was closed 2 days ago
MetaMask/eth-phishing-detect Block 216 scam URLs 
#12143 by dubstard was closed 2 days ago
MetaMask/eth-phishing-detect Block 216 scam URLs 
#12141 by dubstard was closed 3 days ago
MetaMask/eth-phishing-detect block 86 scams 
#12104 by dubstard was closed 3 days ago
MetaMask/eth-phishing-detect Block 87 scam URLs 
#12093 by dubstard was closed last week
MetaMask/eth-phishing-detect Block 74 Scam URLs 
 blocklist requestIssue or PR requesting to addition to the blocklist
#12066 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 266 scam URLs 
#12053 by dubstard was merged last week
MetaMask/eth-phishing-detect block 268 scam URLs 
#12052 by dubstard was closed last week
MetaMask/eth-phishing-detect Block 268 scam URLs 
#12049 by dubstard was closed last week
MetaMask/eth-phishing-detect Block 212 scam URLs 
 blocklist requestIssue or PR requesting to addition to the blocklist
#12022 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 170 scam URLs 
#12015 by dubstard was merged last week
MetaMask/eth-phishing-detect Block 129 scam URLs 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11995 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block 122 scam URLs 
#11994 by dubstard was closed 2 weeks ago
MetaMask/eth-phishing-detect Block 137 scam URLs 
#11993 by dubstard was closed 2 weeks ago
MetaMask/eth-phishing-detect Block scam URLs 
#11978 by dubstard was closed 2 weeks ago
MetaMask/eth-phishing-detect Block circle scams (continued....) 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11960 by dubstard was merged 2 weeks ago

        MetaMask/eth-phishing-detect Block circle USDC scams (continued...) 
 blocklist requestIssue or PR requesting to addition to the blocklist
           #11931 by dubstard was merged 2 weeks ago
MetaMask/eth-phishing-detect Block 75 Scams Circle USDC 1:1 claims - continued 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11920 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block CIRCLE USDC 1:1 redeem scams and others 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11916 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block scam URLs 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11904 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 104 scam URLs 
 blocklist requestIssue or PR requesting to addition to the blocklist
#11896 by dubstard was merged 3 weeks ago
MetaMask/eth-phishing-detect Block 134 scam URLs 
#11878 by dubstard was merged 3 weeks ago