├── .gitignore ├── .travis.yml ├── LICENSE ├── README.md ├── _data ├── legit_urls.yaml ├── metamaskImports.json ├── scams.yaml └── twitter.json ├── _layouts ├── 404.html ├── address.html ├── api.html ├── default.html ├── faq.html ├── index.html ├── ip.html ├── neutraldomain.html ├── no-scam-found.html ├── redirect.html ├── report.html ├── reportaddress.html ├── reportdomain.html ├── rss.html ├── scam.html ├── scamdomain.html ├── scams.html ├── search.html └── verifieddomain.html ├── _static ├── css │ ├── 404.css │ ├── address.css │ ├── api.css │ ├── general.css │ ├── home.css │ ├── neutraldomain.css │ ├── redirect.css │ ├── report.css │ ├── reportaddress.css │ ├── reportdomain.css │ ├── scam.css │ ├── scams.css │ ├── search.css │ └── verified.css ├── favicon.ico ├── img │ ├── adhive.png │ ├── ankr.png │ ├── aragon.png │ ├── bibox.png │ ├── binance.png │ ├── bitfinex.png │ ├── bittrex.png │ ├── blockchain.info.png │ ├── changelly.png │ ├── classicetherwallet.png │ ├── coinbase.png │ ├── coindash.png │ ├── decentraland.png │ ├── district0x.png │ ├── dmarket.png │ ├── electrum.png │ ├── enigma.png │ ├── eos.png │ ├── etherchain.png │ ├── etherdelta.png │ ├── ethereum.png │ ├── etheroll.png │ ├── etherscan.png │ ├── exchange.png │ ├── fantom.png │ ├── fintrux.png │ ├── forkdelta.png │ ├── golem.png │ ├── gonetwork.png │ ├── hederahashgraph.png │ ├── helbiz.png │ ├── hero.png │ ├── hitbtc.png │ ├── icon.png │ ├── idex.png │ ├── indorse.png │ ├── kickico.png │ ├── kin.png │ ├── kraken.png │ ├── kucoin.png │ ├── ledgerwallet.png │ ├── litecoin.png │ ├── logo.png │ ├── luno.png │ ├── metamask.png │ ├── monero.png │ ├── monetha.png │ ├── mycrypto.png │ ├── myetherwallet.png │ ├── mymonero.png │ ├── neo.png │ ├── numerai.png │ ├── odyssey.png │ ├── omisego.png │ ├── orchid.png │ ├── origin.png │ ├── poloniex.png │ ├── powered-by-mycrypto.png │ ├── quarkchain.png │ ├── refereum.png │ ├── ripple.png │ ├── shapeshift.png │ ├── sparkster.png │ ├── starbase.png │ ├── status.png │ ├── stellar.png │ ├── substratum.png │ ├── switcheo.png │ ├── telegram.png │ ├── tenx.png │ ├── texacon.png │ ├── tron.png │ ├── trust-trading.png │ ├── ubiq.png │ ├── unocoin.png │ ├── vechain.png │ ├── yobit.png │ ├── zcash.png │ └── zeex.png ├── js │ ├── address.js │ ├── api.js │ ├── home.js │ ├── ip.js │ ├── neutraldomain.js │ ├── redirect.js │ ├── report.js │ ├── reportaddress.js │ ├── reportdomain.js │ ├── scam.js │ ├── scams.js │ ├── search.js │ └── verified.js └── logo │ ├── favicon.png │ ├── favicon.svg │ ├── logotype-a.svg │ ├── logotype-b.svg │ └── logotype-readme.png ├── _utils ├── lookup.js └── webcheck.js ├── config.example.js ├── package-lock.json ├── package.json ├── run-locally.md ├── run.js ├── tests └── validate_data.js └── update.js /.gitignore: -------------------------------------------------------------------------------- 1 | node_modules 2 | npm-debug.log 3 | _cache 4 | _site 5 | config.js 6 | _data/security.txt -------------------------------------------------------------------------------- /.travis.yml: -------------------------------------------------------------------------------- 1 | language: node_js 2 | node_js: 3 | - "node" -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2018 Luit Hollander 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | ![EtherScamDB Logotype](https://raw.githubusercontent.com/MrLuit/EtherScamDB/master/_static/logo/logotype-readme.png) 2 | 3 | # Ethereum Scam Database 4 | 5 | *An open-source database to keep track of all the current ethereum scams* 6 | 7 | ## Usage 8 | 9 | Make sure you have both [Node.JS](https://nodejs.org/en/download/) and [Git](https://git-scm.com/downloads) installed. 10 | 11 | Rename `config.exmaple.js` to `config.js` and replace the placeholders with your keys. 12 | 13 | Then, open a command line anywhere and run the following commands: 14 | 15 | > git clone https://github.com/MrLuit/EtherScamDB.git 16 | 17 | > npm install 18 | 19 | > node run.js 20 | 21 | The command line should now exit, asking you to update the config.js file with correct values. Please use your own API keys. When you're done, launch run.js again: 22 | 23 | > node run.js 24 | 25 | Generating should take a couple of minutes the first time or after a clean, but when `cache.json` is already present it should launch instantly. 26 | 27 | ## Flags 28 | 29 | - `--clean` Clean up all the old files and folders 30 | - `--update` Manually update all content 31 | 32 | ## Contribute 33 | 34 | Fork this project and edit `_data/scams.yaml`. Every item can have the following properties: 35 | 36 | - **id**: A unique incremental integer 37 | - **name**: The title of the scam, should probably not be longer than 64 characters 38 | - **status**: The status of a scam. If `status` isn't provided and `url` is, status will be autogenerated with the `--update` flag **(Optional)** 39 | - **description**: A full description for the scam **(Optional)** 40 | - **url**: The protocol + hostname for a scam website, without a trailing `/` **(Optional)** 41 | - **category**: The category under which the item falls **(Optional)** 42 | - **addresses**: An array of all ethereum addresses that were involved in this scam, with leading '0x' **(Optional)** 43 | 44 | ## API 45 | 46 | To make use of our database, the following API can be used: https://etherscamdb.info/api/ 47 | 48 | ## Donate 49 | 50 | If you would like to help without contributing on GitHub yourself you can send some ETH or ERC20 tokens to [etherscamdb.eth](https://etherscan.io/address/etherscamdb.eth) :clap: 51 | 52 | ## Thanks 53 | 54 | * Thanks to [Tobaloidee](https://github.com/Tobaloidee) for doing the logos! 55 | 56 | 57 | 58 | -------------------------------------------------------------------------------- /_data/legit_urls.yaml: -------------------------------------------------------------------------------- 1 | - 2 | id: 1 3 | name: MyCrypto 4 | url: 'https://mycrypto.com' 5 | featured: true 6 | description: Ethereum blockchain interface. 7 | addresses: 8 | - '0x4bbeEB066eD09B7AEd07bF39EEe0460DFa261520' 9 | - '32oirLEzZRhi33RCXDF9WHJjEb8RsrSss3' 10 | - 11 | id: 2 12 | name: MetaMask 13 | url: 'https://metamask.io' 14 | featured: true 15 | description: Ethereum Web3 wallet - browser extension 16 | - 17 | id: 3 18 | name: MyCryptoAPI 19 | url: 'https://mycryptoapi.com' 20 | - 21 | id: 4 22 | name: Ethereum 23 | url: 'https://ethereum.org' 24 | featured: true 25 | - 26 | id: 5 27 | name: MyEtheroll 28 | url: 'https://myetheroll.com' 29 | - 30 | id: 6 31 | name: Ledger Wallet 32 | featured: true 33 | url: 'https://ledgerwallet.com' 34 | description: Hardware wallet provider 35 | - 36 | id: 7 37 | name: Etherscan 38 | url: 'https://etherscan.io' 39 | featured: true 40 | addresses: 41 | - '0x71c7656ec7ab88b098defb751b7401b5f6d8976f' 42 | description: Block explorer 43 | - 44 | id: 8 45 | name: EtherID 46 | url: 'http://etherid.org' 47 | - 48 | id: 9 49 | name: Ether Cards 50 | url: 'http://ether.cards' 51 | - 52 | id: 10 53 | name: Etheroll 54 | url: 'https://etheroll.com' 55 | - 56 | id: 11 57 | name: ETHNews 58 | url: 'https://ethnews.com' 59 | - 60 | id: 12 61 | name: ETHEX 62 | url: 'http://ethex.market' 63 | - 64 | id: 13 65 | name: Ethereum Dev 66 | url: 'https://ethereumdev.io' 67 | - 68 | id: 14 69 | name: Ethereum Dev 70 | url: 'https://ethereumdev.io' 71 | - 72 | id: 15 73 | name: Ethereum Dev Korea 74 | url: 'https://ethereumdev.kr' 75 | - 76 | id: 16 77 | name: Dether 78 | url: 'https://dether.io' 79 | - 80 | id: 17 81 | name: Ethermine 82 | url: 'https://ethermine.org' 83 | - 84 | id: 18 85 | name: Slaask 86 | url: 'https://slaask.com' 87 | - 88 | id: 19 89 | name: EtherBTC 90 | url: 'https://etherbtc.io' 91 | - 92 | id: 20 93 | name: Ethereal Capital 94 | url: 'http://ethereal.capital' 95 | - 96 | id: 21 97 | name: Etherisc 98 | url: 'https://etherisc.com' 99 | - 100 | id: 22 101 | name: Ether Echo 102 | url: 'https://etherecho.com' 103 | - 104 | id: 23 105 | name: Ethereum World News mailing list 106 | url: 'https://ethereum.os.tc' 107 | - 108 | id: 24 109 | name: MetaJack 110 | url: 'https://metajack.im' 111 | - 112 | id: 25 113 | name: Etherhub 114 | url: 'https://etherhub.io' 115 | - 116 | id: 26 117 | name: Ethereum Network 118 | url: 'https://ethereum.network' 119 | - 120 | id: 27 121 | name: Ethereum Linking Desk 122 | url: 'https://ethereum.link' 123 | - 124 | id: 28 125 | name: Ethereum.com (for sale) 126 | url: 'https://ethereum.com' 127 | - 128 | id: 29 129 | name: Prethereum 130 | url: 'https://prethereum.com' 131 | - 132 | id: 30 133 | name: Etheraus 134 | url: 'http://etheraus.com' 135 | - 136 | id: 31 137 | name: 1Ethereum 138 | url: 'http://1ethereum.ru' 139 | - 140 | id: 32 141 | name: EthereumNZ 142 | url: 'http://ethereum.nz' 143 | - 144 | id: 33 145 | name: nethereum 146 | url: 'http://nethereum.com' 147 | - 148 | id: 34 149 | name: metamas 150 | url: 'http://metamas.com' 151 | - 152 | id: 35 153 | name: Metabase 154 | url: 'http://metabase.com' 155 | - 156 | id: 36 157 | name: FundRequest 158 | url: 'https://fundrequest.io' 159 | - 160 | id: 37 161 | name: Dentacoin 162 | url: 'https://dentacoin.com' 163 | - 164 | id: 38 165 | name: Etherplan 166 | url: 'http://etherplan.com' 167 | - 168 | id: 39 169 | name: EtherAlert 170 | url: 'https://etheralert.io' 171 | - 172 | id: 40 173 | name: Bity 174 | url: 'https://bity.com' 175 | description: Provider of crypto swap services 176 | - 177 | id: 41 178 | name: Changelly 179 | featured: true 180 | description: Simple cryptocurrency exchange 181 | url: 'https://changelly.com' 182 | - 183 | id: 42 184 | name: Coinbase 185 | url: 'https://coinbase.com' 186 | - 187 | id: 43 188 | name: CryptoCompare 189 | url: 'https://cryptocompare.com' 190 | - 191 | id: 44 192 | name: Easy Ethereum 193 | url: 'https://easyeth.com' 194 | - 195 | id: 45 196 | name: Etherchain 197 | featured: true 198 | description: 'An Ethereum blockchain explorer' 199 | url: 'https://etherchain.org' 200 | - 201 | id: 46 202 | name: Ether Domain 203 | url: 'http://etherdomain.com' 204 | - 205 | id: 47 206 | name: Ethernodes 207 | url: 'http://ethernodes.org' 208 | - 209 | id: 48 210 | name: Ethpool 211 | url: 'http://ethpool.org' 212 | - 213 | id: 49 214 | name: Everex Wallet 215 | url: 'https://everex.cash' 216 | - 217 | id: 50 218 | name: Everex Wallet 219 | url: 'https://everex.io' 220 | - 221 | id: 51 222 | name: Kraken 223 | featured: true 224 | url: 'https://kraken.com' 225 | - 226 | id: 52 227 | name: MyEtherWallet Knowledge Base 228 | url: 'https://myetherwallet.github.io/knowledge-base' 229 | - 230 | id: 53 231 | name: ShapeShift 232 | featured: true 233 | description: Simple cryptocurrency exchange 234 | url: 'https://shapeshift.io' 235 | - 236 | id: 54 237 | name: webtask 238 | url: 'https://webtask.io' 239 | - 240 | id: 55 241 | name: Steem Supply 242 | url: 'http://steem.supply' 243 | - 244 | id: 56 245 | name: Aragon 246 | featured: true 247 | url: 'https://aragon.one' 248 | - 249 | id: 57 250 | name: Bittrex 251 | featured: true 252 | description: Cryptocurrency exchange 253 | url: 'https://bittrex.com' 254 | - 255 | id: 58 256 | name: Coindash 257 | featured: true 258 | description: Cryptocurrency exchange 259 | url: 'https://coindash.io' 260 | - 261 | id: 59 262 | name: Decentraland 263 | featured: true 264 | url: 'https://decentraland.org' 265 | - 266 | id: 60 267 | name: District0x 268 | featured: true 269 | url: 'https://district0x.io' 270 | - 271 | id: 61 272 | name: EOS 273 | featured: true 274 | url: 'https://eos.io' 275 | - 276 | id: 62 277 | name: EtherDelta 278 | featured: true 279 | url: 'https://etherdelta.github.io' 280 | - 281 | id: 63 282 | name: Indorse 283 | featured: true 284 | url: 'https://indorse.io' 285 | - 286 | id: 64 287 | name: KICKICO 288 | featured: true 289 | url: 'https://kickico.com' 290 | - 291 | id: 65 292 | name: Monetha 293 | featured: true 294 | url: 'https://monetha.io' 295 | - 296 | id: 66 297 | name: Numerai 298 | featured: true 299 | url: 'https://numer.ai' 300 | - 301 | id: 67 302 | name: OmiseGO 303 | featured: true 304 | url: 'https://omg.omise.co' 305 | - 306 | id: 68 307 | name: Starbase 308 | featured: true 309 | url: 'https://starbase.co' 310 | - 311 | id: 69 312 | name: Status 313 | featured: true 314 | url: 'https://status.im' 315 | - 316 | id: 70 317 | name: Substratum 318 | featured: true 319 | url: 'https://substratum.net' 320 | - 321 | id: 71 322 | name: TenX 323 | featured: true 324 | url: 'https://tenx.tech' 325 | - 326 | id: 72 327 | name: Ubiq 328 | featured: true 329 | url: 'https://ubiqsmart.com' 330 | - 331 | id: 73 332 | name: Unocoin 333 | featured: true 334 | url: 'https://unocoin.com' 335 | - 336 | id: 74 337 | name: Golem 338 | featured: true 339 | url: 'https://golem.network' 340 | - 341 | id: 75 342 | name: Nexus 343 | url: 'https://ico.nexus.social/' 344 | - 345 | id: 76 346 | name: Swapy Network 347 | url: 'https://swapy.network/' 348 | - 349 | id: 77 350 | name: COPYTRACK 351 | url: 'https://copytrack.io/' 352 | - 353 | id: 78 354 | name: Parity 355 | description: Ethereum client 356 | url: 'https://parity.io/' 357 | - 358 | id: 79 359 | name: Parity Technologies 360 | url: 'https://paritytech.io/' 361 | - 362 | id: 80 363 | name: Nucleus Vision 364 | url: 'https://nucleus.vision/' 365 | - 366 | id: 81 367 | name: Remme 368 | url: 'https://remme.io' 369 | - 370 | id: 82 371 | name: MyEtherWallet 372 | description: Ethereum blockchain interface 373 | url: 'https://myetherwallet.com' 374 | addresses: 375 | - '0xdecaf9cd2367cdbb726e904cd6397edfcae6068d' 376 | - 377 | id: 83 378 | name: AirSwap 379 | url: 'https://airswap.io' 380 | - 381 | id: 84 382 | name: IDEX 383 | description: Decentralized exchange with centralized order book 384 | url: 'https://idex.market' 385 | - 386 | id: 85 387 | name: BTCManager 388 | description: Crypto news site 389 | url: 'http://btcmanager.com' 390 | - 391 | id: 86 392 | name: Neodium Network 393 | url: 'https://neodium.network' 394 | - 395 | id: 87 396 | name: GoogleDocs 397 | url: 'https://docs.google.com' 398 | - 399 | id: 88 400 | name: GooglePlay 401 | url: 'https://play.google.com' 402 | - 403 | id: 89 404 | name: GooglePlus 405 | url: 'https://plus.google.com' 406 | - 407 | id: 90 408 | name: JSBin 409 | url: 'https://output.jsbin.com' 410 | - 411 | id: 91 412 | name: Instagram 413 | url: 'https://instagram.com' 414 | - 415 | id: 92 416 | name: Medium 417 | url: 'https://medium.com' 418 | - 419 | id: 93 420 | name: GoogleMail 421 | url: 'https://gmail.com' 422 | - 423 | id: 94 424 | name: Twitter 425 | url: 'https://twitter.com' 426 | - 427 | id: 95 428 | name: Geocities 429 | url: 'https://geocities.ws' 430 | - 431 | id: 96 432 | name: GithubUserContent 433 | url: 'https://user-images.githubusercontent.com' 434 | - 435 | id: 97 436 | name: Telegram 437 | url: 'https://telegra.ph' 438 | - 439 | id: 98 440 | name: Twitter 441 | url: 'https://t.me' 442 | - 443 | id: 99 444 | name: About 445 | url: 'https://about.me' 446 | - 447 | id: 100 448 | name: Jsfiddle 449 | url: 'https://jsfiddle.net' 450 | - 451 | id: 101 452 | name: Youtube 453 | url: 'https://youtube.com' 454 | -------------------------------------------------------------------------------- /_data/metamaskImports.json: -------------------------------------------------------------------------------- 1 | { 2 | "version": 2, 3 | "tolerance": 2, 4 | "fuzzylist": [ 5 | "metamask.io", 6 | "myetherwallet.com", 7 | "cryptokitties.co", 8 | "mycrypto.com", 9 | "localethereum.com", 10 | "dfinity.org" 11 | ], 12 | "whitelist": [ 13 | "ncrypto.com", 14 | "mrcrypto.dk", 15 | "nedfinity.com", 16 | "affinity.me", 17 | "crypto.cat", 18 | "winity.io", 19 | "gfinity.net", 20 | "p-crypto.ru", 21 | "mycryptons.com", 22 | "aicrypto.ai", 23 | "azcrypto.net", 24 | "crypto.com", 25 | "affinity.photography", 26 | "abcrypto.info", 27 | "ucrypto.net", 28 | "vscrypto.com", 29 | "affinity.com", 30 | "affinity.co", 31 | "crypto.news", 32 | "dbcrypto.com", 33 | "ezcrypto.guide", 34 | "gocrypto.me", 35 | "finity.ai", 36 | "weffkemining.com", 37 | "nwcrypto.com", 38 | "cobinhood.com", 39 | "affinity.vc", 40 | "trinity.tech", 41 | "metahusk.com", 42 | "mrcrypto.fr", 43 | "affinity.store", 44 | "affinity.serif.com", 45 | "xfinity.com", 46 | "dfinity.org", 47 | "ggcrypto.net", 48 | "mycrypto.website", 49 | "pqcrypto.org", 50 | "z-crypto.com", 51 | "mpcrypo.com", 52 | "localethereum.com", 53 | "localbitcoins.com", 54 | "huobipro.com", 55 | "ncrypto.tech", 56 | "9crypto.co", 57 | "netmask.hu", 58 | "cryptokittens.club", 59 | "rucrypto.com", 60 | "cryptocities.world", 61 | "mqtcrypto.com", 62 | "crypto.press", 63 | "becrypto.xyz", 64 | "hicrypto.io", 65 | "crypto.nl", 66 | "zycrypto.com", 67 | "mmcrypto.io", 68 | "mycrypter.com", 69 | "crypto.tickets", 70 | "crypto.pro", 71 | "ocrypto.org", 72 | "wecrypto.net", 73 | "iccrypto.io", 74 | "crypto.kred", 75 | "ohmycrypto.io", 76 | "spcrypto.net", 77 | "melcrypto.com", 78 | "zzcrypto.org", 79 | "zzcrypto.net", 80 | "crypto.bg", 81 | "mycrypto24.online", 82 | "acrypto.io", 83 | "mycrypto.ca", 84 | "scrypto.io", 85 | "mycrypto.dk", 86 | "mvzcrypto.com", 87 | "ambcrypto.com", 88 | "crypto.bi", 89 | "crypto.jobs", 90 | "crypto.help", 91 | "my.crypt.observer", 92 | "crypt.observer", 93 | "ucrypto.com", 94 | "cryptojobslist.com", 95 | "crypto.review", 96 | "crypto.me", 97 | "b3crypto.com", 98 | "mycrypto.ninja", 99 | "jkcrypto.com", 100 | "crypto.cr", 101 | "mycrypto.live", 102 | "yocrypto.io", 103 | "crypto.ba", 104 | "zacrypto.info", 105 | "mycrypto.com", 106 | "remix.ethereum.org", 107 | "metahash.io", 108 | "metahash.net", 109 | "metahash.org", 110 | "cryptotitties.com", 111 | "cryptocities.net", 112 | "cryptoshitties.co", 113 | "cryptotitties.fun", 114 | "cryptokitties.forsale", 115 | "cryptokitties.care", 116 | "metamate.cc", 117 | "metamesh.tech", 118 | "ico.nexus.social", 119 | "metamesh.org", 120 | "metatask.io", 121 | "metmask.com", 122 | "metarasa.com", 123 | "metapack.com", 124 | "metacase.com", 125 | "metafas.nl", 126 | "metamako.com", 127 | "metamast.com", 128 | "metamax.ru", 129 | "metadesk.io", 130 | "metadisk.com", 131 | "metallsk.ru", 132 | "metamag.fr", 133 | "metamaks.ru", 134 | "metamap.ru", 135 | "metamaps.cc", 136 | "metamats.com", 137 | "metamax.by", 138 | "metamax.com", 139 | "metamax.io", 140 | "metamuse.net", 141 | "metarank.com", 142 | "metaxas.com", 143 | "megamas2.ru", 144 | "metamask.io", 145 | "myetherwallet.com", 146 | "ethereum.org", 147 | "myetheroll.com", 148 | "myetherapi.com", 149 | "ledgerwallet.com", 150 | "databrokerdao.com", 151 | "etherscan.io", 152 | "etherid.org", 153 | "ether.cards", 154 | "etheroll.com", 155 | "ethnews.com", 156 | "ethex.market", 157 | "ethereumdev.io", 158 | "ethereumdev.kr", 159 | "dether.io", 160 | "ethermine.org", 161 | "slaask.com", 162 | "etherbtc.io", 163 | "ethereal.capital", 164 | "etherisc.com", 165 | "m.famalk.net", 166 | "etherecho.com", 167 | "ethereum.os.tc", 168 | "theethereum.wiki", 169 | "metajack.im", 170 | "etherhub.io", 171 | "ethereum.network", 172 | "ethereum.link", 173 | "ethereum.com", 174 | "prethereum.org", 175 | "ethereumj.io", 176 | "etheraus.com", 177 | "ethereum.dev", 178 | "1ethereum.ru", 179 | "ethereum.nz", 180 | "nethereum.com", 181 | "metabank.com", 182 | "metamas.com", 183 | "aventus.io", 184 | "metabase.com", 185 | "etherdelta.com", 186 | "metabase.one", 187 | "cryptokitties.co", 188 | "remme.io", 189 | "jibrel.network", 190 | "twinity.com" 191 | ], 192 | "blacklist": [ 193 | "binance-promo.net", 194 | "trust-cryptopayment.com", 195 | "ethereum-transfer.online", 196 | "icotonsale.com", 197 | "etherbonuses.com", 198 | "ethfreeget.com", 199 | "tongram.me", 200 | "funfaircoin.org", 201 | "coinbase-secure-a2k34j.bitballoon.com", 202 | "ethereumtrans.com", 203 | "xn--condes-8bb1661d.com", 204 | "ethergiveawaytweet.tk", 205 | "eth-giveaway.gq", 206 | "nnyettiervwallat.com", 207 | "nnyettiervwallet.com", 208 | "eth.vote", 209 | "eth-promo.bitballoon.com", 210 | "ethfreepay.com", 211 | "promo-trx.tk", 212 | "paymentaddress.tumblr.com", 213 | "cryptongram.org", 214 | "campaigntoken.blogspot.de", 215 | "coin-promos.com", 216 | "xn--ytherwallet-iw8ex8c.com", 217 | "smartexchangecenter.tk", 218 | "xn--oindesk-15a.com", 219 | "eth-transaction.secure.kissr.com", 220 | "otoeveryday.info", 221 | "ethfreecandy.bitballoon.com", 222 | "etherscanio.github.io", 223 | "ico-gram.net", 224 | "gramtoken.network", 225 | "ethfreegive.com", 226 | "ether-promo.bitballoon.com", 227 | "xn--cindesk-cx4c.com", 228 | "theadsleader.000webhostapp.com", 229 | "myetherwalletico.blogspot.de", 230 | "eth-giveaway.info", 231 | "syncfab.eu", 232 | "eth-giveaway.com", 233 | "icoeth.tk", 234 | "eth-giveaway-706.htmlcomponentservice.com", 235 | "htmlcomponentservice.com", 236 | "mybinance.info", 237 | "xn--myethewallet-kjc.com", 238 | "polyswamr.io", 239 | "polyswarm.me", 240 | "polyswarms.io", 241 | "eth4free.ml", 242 | "ico-telegram-ton.com", 243 | "telegram.tw", 244 | "gramton.info", 245 | "gramsap.enterprises", 246 | "ico-telegram.club", 247 | "telegram.one", 248 | "etharscan.io", 249 | "xn--coindes-jhb.com", 250 | "blocikchair.info", 251 | "eth-cz-319.htmlcomponentservice.com", 252 | "xn--myetherwaet-0t8ea.com", 253 | "eth-giveaway-514.htmlcomponentservice.com", 254 | "xn--mtherwallet-z19ex1a.com", 255 | "xn--eo-e9a.com", 256 | "cosss.io", 257 | "callistonetwork.tech", 258 | "xn--metherwallt-819eo1a.com", 259 | "ethfreepays.com", 260 | "nnyettiervwailet.com", 261 | "xn--hapehift-oh0de.com", 262 | "gram.vc", 263 | "bonus.etherpayout.com", 264 | "etherpayout.com", 265 | "ethereum-giveaway.info", 266 | "xn--bnanc-fsax.com", 267 | "xn--binnce-y0a.com", 268 | "geocities.ws", 269 | "eth-giveaway-209.statichtmlapp.com", 270 | "binance.bitballoon.com", 271 | "binance-give.com", 272 | "ilil.pw", 273 | "myetherwallet.com.send-transaction_8hlg6z8mgt6zyg.ilil.pw", 274 | "telegram.site", 275 | "telegram.auction", 276 | "miroskii.com", 277 | "eth-transactions.neocities.org", 278 | "online-eos.org", 279 | "data-token.org", 280 | "eth953883.htmlcomponentservice.com", 281 | "reeveclancy.wixsite.com", 282 | "transfer-eth.neocities.org", 283 | "eth.secure-transactionssecure.com", 284 | "secure-transactionssecure.com", 285 | "nnyiictehervvailiat.com", 286 | "odachi.neocities.org", 287 | "bittrex-give.com", 288 | "policypal.info", 289 | "changlley.org", 290 | "rnyertherwallet.com", 291 | "xn--thabyss-u8a.com", 292 | "callisto-airdrop.com", 293 | "telegramfoundation.org", 294 | "polymathnetwork.org", 295 | "ethereum-promo.bitballoon.com", 296 | "dfintty.org", 297 | "dftnity.org", 298 | "usermd.net", 299 | "xn--gemn-nzab.com", 300 | "xn--bnance-3va.com", 301 | "xn--binnce-yc8b.com", 302 | "xn--bnance-p9a.com", 303 | "xn--binane-0ua.com", 304 | "binalce.com", 305 | "binince.com", 306 | "xn--conbase-pza.com", 307 | "xn--conbase-sfb.com", 308 | "xn--coinbas-xya.com", 309 | "xn--coinbas-z8a.com", 310 | "xn--coinbse-9wa.com", 311 | "xn--coinbse-lwa.com", 312 | "xn--polonex-vfb.com", 313 | "xn--ploniex-l0a.com", 314 | "xn--plniex-bxab.com", 315 | "xn--havvn-9za.io", 316 | "havvenio.com", 317 | "nucelus.vision", 318 | "metronometoken.io", 319 | "meganfoxloveyou.com", 320 | "xn--yetherwalle-iw8e1s.com", 321 | "tron-online.org", 322 | "myenthereumwallet.com", 323 | "myetherwallet-team.com", 324 | "myetherwallet.usermd.net", 325 | "xn--yetherwalle-tv8ezt.com", 326 | "xn--coindek-873c.com", 327 | "dflinity.org", 328 | "ipsx.promo", 329 | "havven-sale.com", 330 | "tokensale-adhive.com", 331 | "ataritoken.ltd", 332 | "transfer-address-confirmation.droppages.com", 333 | "droppages.com", 334 | "dfinlty.org", 335 | "poloniex.work", 336 | "tokensale-havven.in", 337 | "ico-havven.org", 338 | "secure.poloniex.work", 339 | "vechain-foundation.org", 340 | "telegram.tokyo", 341 | "forkdelta.io", 342 | "ton-sale.com", 343 | "ico-telegram.online", 344 | "telegramtoken.io", 345 | "gonetwork-airdrop.co", 346 | "secure-transaction-confirmation.droppages.com", 347 | "neonexchanges.org", 348 | "eth-transact.secure.droppages.com", 349 | "6khb.payment-checker-ethereum-id-bslyftexjuwcgv8.filesusr.com", 350 | "akasha-world.com", 351 | "address-transfer-confirmation.droppages.com", 352 | "b5z.net", 353 | "p.b5z.net", 354 | "tokensale.xn--havve-7l1b.com", 355 | "xn--coindes-bx3c.com", 356 | "xn--coindek-s73c.com", 357 | "locaeltherum.com", 358 | "myetherwallet.tokenimport.com", 359 | "tokenimport.com", 360 | "leadscoin.network", 361 | "localethereom.com", 362 | "havvens.win", 363 | "xn--metherwalle-jb9ejq.com", 364 | "xn--myetheralle-jb9exm.com", 365 | "tefood.me", 366 | "havventoken.com", 367 | "havven.cc", 368 | "havven.eu", 369 | "havven.top", 370 | "mywalletether.com", 371 | "myetherwallett.site", 372 | "xn--myethewalle-w48erh.com", 373 | "el-petro-coin.com", 374 | "xn--yeterwallet-bm8eym.com", 375 | "sale-orchid.com", 376 | "electrify-asia.info", 377 | "tron-foundation.org", 378 | "dflnlty.org", 379 | "polyswarm.tech", 380 | "tokensale.polyswarm.tech", 381 | "polyswarm.ru", 382 | "dock.click", 383 | "leadcoins.network", 384 | "dock-tokensale.eu", 385 | "polyswarm.pw", 386 | "dock-io.org", 387 | "heavven.io", 388 | "havven.live", 389 | "havven.sale", 390 | "havven.info", 391 | "dock.network", 392 | "blocklancer.me", 393 | "tokensale-havven.io", 394 | "havven.pro", 395 | "tokentelegram.com", 396 | "ico-telegram.me", 397 | "myetherzero.com", 398 | "seele-token.pro", 399 | "tokensale-havven.com", 400 | "polyswarm.in", 401 | "sale-dock.com", 402 | "polyswarm.co", 403 | "polyswarm.bid", 404 | "ton.fund", 405 | "forkdeita.github.io", 406 | "xn--binnce-5nf.com", 407 | "xn--biace-4l1bb.com", 408 | "jiocoins.io", 409 | "xn--polonx-0va26t.com", 410 | "myetlherewallet.org", 411 | "myeithereiuwallet.com", 412 | "fin-trux.com", 413 | "finetrux.com", 414 | "telcoin.pro", 415 | "xn--es-8bb.com", 416 | "xn--myetherallt-pl9elw.com", 417 | "ico-dock.org", 418 | "dock.io-bonus.online", 419 | "docks.site", 420 | "dock-ico.pro", 421 | "dock-ico.eu", 422 | "dock.su", 423 | "tokensale-dock.io", 424 | "dock-ico.site", 425 | "openplatform.tech", 426 | "rightmesh.in", 427 | "waxtoken.in", 428 | "metamaskgiveaway.xyz", 429 | "nebulastoken.in", 430 | "vechain-foundation.com", 431 | "icotoken-current.top", 432 | "xn--myethrwalle-jb9e19a.com", 433 | "xn--myetheralle-7b9ezl.com", 434 | "iconfoundation.co", 435 | "fundrequest.info", 436 | "xn--myetherwale-os8e7x.com", 437 | "remme-ico.eu", 438 | "gonetwork.live", 439 | "token.gonetwork.pro", 440 | "gonetwork.pro", 441 | "gonetwork.eu", 442 | "nucleus-vision.cc", 443 | "jibreltoken.in", 444 | "dock.so", 445 | "dock.promo", 446 | "xn--mycrypt-r0a.com", 447 | "xn--mycrypt-g1a.com", 448 | "xn--mycrpto-y2a.com", 449 | "ethexploit.org", 450 | "remme.in", 451 | "remme.ws", 452 | "remme.com.ng", 453 | "nyeitthervvallet.com", 454 | "xn--myeerhwailet-ooc.com", 455 | "myeterhwaliot.com", 456 | "remme.live", 457 | "xn--yethewalle-to2exkhi.com", 458 | "myetherwallet.custom-token.com", 459 | "custom-token.com", 460 | "sale-earn.com", 461 | "bankera.live", 462 | "originprotocol.io", 463 | "originprotocol.online", 464 | "trx.foundation", 465 | "tokensale.adhive.net", 466 | "adhive.net", 467 | "decentral.market", 468 | "cryptoexploite.com", 469 | "blockclain.net", 470 | "xn--blckchin-5za9o.info", 471 | "xn--blkhain-m0a4pb.info", 472 | "xn--blocchal-gmb8m.info", 473 | "xn--blocchaln-orb.info", 474 | "xn--blocchan-gmb7c.info", 475 | "xn--blockaden-lsen-5pb.com", 476 | "xn--blockchai-3vb.info", 477 | "xn--blockchai-jvb.info", 478 | "xn--blockchal-3vb.info", 479 | "xn--blockcham-ipb.info", 480 | "xn--blockchan-2pb.com", 481 | "xn--blockchan-75a.com", 482 | "xn--blockchan-7sb.info", 483 | "xn--blockchan-d5a.net", 484 | "xn--blockchan-dob.info", 485 | "xn--blockchan-ipb.com", 486 | "xn--blockchan-ipb.info", 487 | "xn--blockchan-nk7d.com", 488 | "xn--blockchan-xub.info", 489 | "xn--blockchann-4ub.com", 490 | "xn--blockchi-n7a50e.info", 491 | "xn--blockchi-o8a54d.info", 492 | "xn--blockchi-p99co8a.com", 493 | "xn--blockchim-hdb.info", 494 | "xn--blockchin-1xb.info", 495 | "xn--blockchin-61a.info", 496 | "xn--blockchin-61a.net", 497 | "xn--blockchin-6ib.info", 498 | "xn--blockchin-ccb.info", 499 | "xn--blockchin-h4a.com", 500 | "xn--blockchin-h4a.info", 501 | "xn--blockchin-hdb.info", 502 | "xn--blockchin-hhb.info", 503 | "xn--blockchin-mib.net", 504 | "xn--blockchin-wcb.com", 505 | "xn--blockchn-fza4j.com", 506 | "xn--blockchn-fza4j.info", 507 | "xn--blockchn-n7a43b.info", 508 | "xn--blockchn-p0a.info", 509 | "xn--blockchn-tx0d4p.com", 510 | "xn--blockclai-3vb.info", 511 | "xn--blockclin-hdb.com", 512 | "xn--blockclin-hdb.info", 513 | "xn--blockclin-hdb.org", 514 | "xn--blockflte-kirchrode-w6b.de", 515 | "xn--blockfltenquartett-windspiel-81c.de", 516 | "xn--blockhai-obb78c.info", 517 | "xn--blockhain-4eb.com", 518 | "xn--blockhain-pfb.com", 519 | "xn--blockhain-pfb.info", 520 | "xn--blockhain-zdb.info", 521 | "xn--blockhan-obb65a.info", 522 | "xn--blockhas-d6a.com", 523 | "xn--blockwallt-j7a.com", 524 | "xn--blokchai-fqb.info", 525 | "xn--blokchain-nfb.info", 526 | "xn--blokhain-28ab.info", 527 | "xn--bockclnain-eyb.info", 528 | "xn--mymoeo-zt7bzf.com", 529 | "xn--mymoer-nqc1368c.com", 530 | "xn--mymoero-c13c.com", 531 | "xn--mymoero-s13c.com", 532 | "xn--mymoneo-f63c.com", 533 | "xn--mymoneo-v63c.com", 534 | "xn--mymoneo-y53c.com", 535 | "xn--mymoner-j0a.com", 536 | "xn--mymoner-j5b.com", 537 | "xn--mymoner-r0a.com", 538 | "xn--mymoner-z0a.com", 539 | "xn--mymoner-z2c.com", 540 | "xn--mymonro-fya.com", 541 | "xn--mymonro-x8a.com", 542 | "xn--myetheallet-l58emu.com", 543 | "xn--myetheraet-9k2ea77h.com", 544 | "xn--myetheralet-ms8e21b.com", 545 | "xn--myetheralle-7b9exm.com", 546 | "xn--myetherallet-5s5f.com", 547 | "xn--myetherallet-fs5f.com", 548 | "xn--myetherewalle-1t1g.com", 549 | "xn--myetherllet-pl9e6k.com", 550 | "xn--myethervvalle-8vc.com", 551 | "xn--myetherwaet-61ea.com", 552 | "xn--myetherwaet-8eda.com", 553 | "xn--myetherwaet-ns8ea.com", 554 | "xn--myetherwale-ns8e8x.com", 555 | "xn--myetherwalet-0fb.com", 556 | "xn--myetherwalet-0z4f.com", 557 | "xn--myetherwalet-814f.com", 558 | "xn--myetherwalet-d9b.com", 559 | "xn--myetherwalet-h14f.com", 560 | "xn--myetherwalle-9me.com", 561 | "xn--myetherwalle-ek5f.com", 562 | "xn--myetherwalle-fqc.com", 563 | "xn--myetherwalle-opc.com", 564 | "xn--myetherwalle-q05f.com", 565 | "xn--myetherwllet-wob.com", 566 | "xn--myetherwllt-r7a0i.com", 567 | "xn--myethewaliet-9d5f.com", 568 | "xn--myethewalle-3ic0947g.com", 569 | "xn--myethewallet-0e5f.com", 570 | "xn--myethewallet-1kc.com", 571 | "xn--myethewallet-bkc.com", 572 | "xn--myethewallet-vof.com", 573 | "xn--myethewalliet-nm1g.com", 574 | "xn--myethewallt-kbb3019g.com", 575 | "xn--myethewallt-w48ew7b.com", 576 | "xn--myethrwalet-6qb6408g.com", 577 | "xn--myethrwalet-ms8e83d.com", 578 | "xn--myethrwallet-1db.com", 579 | "xn--myethrwallt-29af.com", 580 | "xn--myethrwallt-29as.com", 581 | "xn--myethrwllet-q7a31e.com", 582 | "xn--myethrwllet-r8a3c.com", 583 | "fintrux.eu", 584 | "refereum-ico.eu", 585 | "arcblock-ico.org", 586 | "xn--fuson-1sa.org", 587 | "refereum-token.com", 588 | "fintrux.co", 589 | "ico-ton.org", 590 | "xn--mytherwallt-cbbv.com", 591 | "xmoneta.co", 592 | "data-wallet.co", 593 | "tokensale.data-wallet.co", 594 | "xn--myeerhwallot-ooc.com", 595 | "xn--myeterwalet-cm8epi.com", 596 | "xn--myeterwalle-cm8ev6a.com", 597 | "rnyetherumwallet.com", 598 | "republic-protocol.net", 599 | "nyeihitervvallatt.com", 600 | "arcblock.eu", 601 | "republicprotocol.eu", 602 | "tokensale-fusion.com", 603 | "myetherwalletjoin.com", 604 | "medicalchian.com", 605 | "myeahteirwaliet.com", 606 | "myenhtersvvailct.com", 607 | "trinity-token.com", 608 | "xn--eo-yzs.com", 609 | "zilliqa.in", 610 | "sparc.pro", 611 | "myetherwallet.import-tokens.com", 612 | "token-gram.org", 613 | "xn--shapshift-e4a.com", 614 | "xn--shapshift-y4a.com", 615 | "xn--shpeshift-c2a.com", 616 | "xn--shpeshift-r1a.com", 617 | "xn--shapshift-o4a.com", 618 | "xn--shpeshift-w2a.com", 619 | "xn--shapeshft-w5a.com", 620 | "tokensale-fusion.org", 621 | "fusion-ico.com", 622 | "beetolen.com", 623 | "tokencrowdsale.online", 624 | "fusion.tokencrowdsale.online", 625 | "beetokem.com", 626 | "block.chaiins.in", 627 | "origintrail.in", 628 | "bit-z.ru", 629 | "xn--myetherallet-nu5f.com", 630 | "xn--mytherwalet-3qb08c.com", 631 | "xn--myeterwllet-cm8et1d.com", 632 | "xn--mytherwllet-q7a01e.com", 633 | "xn--biance-xt7b.com", 634 | "xn--bnance-wic.com", 635 | "xn--biance-jeb.com", 636 | "xn--bttrx-9za8334c.com", 637 | "wwwkodakcoin.com", 638 | "myetherwallet.uk.com", 639 | "kodakone.cc", 640 | "nyeihitervvallet.com", 641 | "xn--myeterwalet-cm8eoi.com", 642 | "nucleus.foundation", 643 | "beetoken-ico.com", 644 | "data-token.com", 645 | "tron-labs.com", 646 | "ocoin.tech", 647 | "aionfoundation.com", 648 | "ico-telegram.org", 649 | "nyeihitervvallat.com", 650 | "telegramcoin.us", 651 | "daddi.cloud", 652 | "daditoken.com", 653 | "blockarray.org", 654 | "dadi-cloud.net", 655 | "wanchainfunding.org", 656 | "ico-telegram.io", 657 | "iconfoundation.site", 658 | "iost.co", 659 | "beetoken-ico.eu", 660 | "cindicator.network", 661 | "wanchainetwork.org", 662 | "wamchain.org", 663 | "wanchainltd.org", 664 | "wanchainalliance.org", 665 | "nucleus-vision.net", 666 | "ledgerwallet.by", 667 | "nucleuss.vision", 668 | "myenhterswailct.com", 669 | "cobin-hood.com", 670 | "wanchainfoundation.org", 671 | "xn--polniex-ex4c.com", 672 | "xn--polniex-s1a.com", 673 | "xn--polonex-ieb.com", 674 | "xn--polonex-sza.com", 675 | "xn--polonex-zw4c.com", 676 | "xn--polonix-ws4c.com", 677 | "xn--polonix-y8a.com", 678 | "xn--pooniex-ojb.com", 679 | "gramico.info", 680 | "dimnsions.network", 681 | "www-gemini.com", 682 | "login-kucoin.net", 683 | "venchain.foundation", 684 | "grampreico.com", 685 | "tgram.cc", 686 | "ton-gramico.com", 687 | "wwwpaywithink.com", 688 | "coniomi.com", 689 | "paywithnk.com", 690 | "paywithlnk.com", 691 | "iluminatto.com.br", 692 | "pundix.eu", 693 | "xn--bttrx-esay.com", 694 | "xn--bttrex-w8a.com", 695 | "xn--bnance-bwa.com", 696 | "xn--shpeshift-11a.com", 697 | "xn--shapeshif-ts6d.com", 698 | "xn--shapshift-yf7d.com", 699 | "wwwbluzelle.com", 700 | "bluzelie.com", 701 | "nucleus-vision.org", 702 | "omisegonetwork.site", 703 | "etlherzero.com", 704 | "etlherdelta.com", 705 | "xn--condesk-0ya.com", 706 | "xn--condesk-sfb.com", 707 | "xn--coindsk-vs4c.com", 708 | "iexecplatform.com", 709 | "tongramico.com", 710 | "nucleus-vision.eu", 711 | "intchain.network", 712 | "wanchain.cloud", 713 | "bluzelle-ico.com", 714 | "ethzero-wallet.com", 715 | "xn--metherwalle-jb9et7d.com", 716 | "xn--coinesk-jo3c.com", 717 | "venchainfoundation.com", 718 | "myenhtersvvailot.com", 719 | "ether-zero.net", 720 | "ins.foundation", 721 | "nastoken.org", 722 | "telcointoken.com", 723 | "ether0.org", 724 | "eterzero.org", 725 | "bluzelle-ico.eu", 726 | "bleuzelle.com", 727 | "appcoinstoken.org", 728 | "xn--quanstamp-8s6d.com", 729 | "myehntersvvailct.com", 730 | "myeherwalllet.com", 731 | "ico-bluzelle.com", 732 | "bluzelle.im", 733 | "bluzelle.one", 734 | "bluzele.sale", 735 | "bluzele.co", 736 | "sether.ws", 737 | "xn--myetherwalet-6gf.com", 738 | "xn--rnyethewaliet-om1g.com", 739 | "rnyethervailet.com", 740 | "mvetherwaliet.com", 741 | "rnyetherwailet.com", 742 | "myethervaliet.com", 743 | "rnyethervaliet.com", 744 | "mvetherwalilet.com", 745 | "xn--myethewalie-3ic0947g.com", 746 | "xn--mthrwallet-z6ac3y.com", 747 | "xn--myeherwalie-vici.com", 748 | "xn--myethervvalie-8vc.com", 749 | "xn--mythrwallt-06acf.com", 750 | "xn--mtherwallet-y9a6y.com", 751 | "myetherwallet.applytoken.tk", 752 | "ethereum-zero.com", 753 | "quanstamptoken.tk", 754 | "bluzelle.network", 755 | "ether-wallet.org", 756 | "tron-wallet.info", 757 | "appcoinsproject.com", 758 | "vechain.foundation", 759 | "tronlab.site", 760 | "tronlabs.network", 761 | "bluzelle.cc", 762 | "ethblender.com", 763 | "ethpaperwallet.net", 764 | "waltontoken.org", 765 | "icoselfkey.org", 766 | "etherzeroclaim.com", 767 | "etherzero.promo", 768 | "bluzelle.pro", 769 | "token-selfkey.org", 770 | "xn--etherdlta-0f7d.com", 771 | "sether.in", 772 | "xn--ttrex-ysa9423c.com", 773 | "bluzelle.eu", 774 | "bluzelle.site", 775 | "gifto.tech", 776 | "xn--os-g7s.com", 777 | "selfkey.co", 778 | "xn--myeherwalet-ns8exy.com", 779 | "xn--coinelegraph-wk5f.com", 780 | "dai-stablecoin.com", 781 | "eos-token.org", 782 | "venchain.org", 783 | "gatcoins.io", 784 | "deepbrainchain.co", 785 | "myetherwalililet.info", 786 | "myehvterwallet.com", 787 | "myehterumswallet.com", 788 | "nucleusico.com", 789 | "tronlab.tech", 790 | "0x-project.com", 791 | "gift-token-events.mywebcommunity.org", 792 | "funfairtoken.org", 793 | "breadtokenapp.com", 794 | "cloudpetstore.com", 795 | "myethwalilet.com", 796 | "selfkeys.org", 797 | "wallet-ethereum.com", 798 | "xn--methrwallt-26ar0z.com", 799 | "xn--mytherwllet-r8a0c.com", 800 | "bluzelle.promo", 801 | "tokensale.bluzelle.promo", 802 | "cedarlake.org", 803 | "marketingleads4u.com", 804 | "cashaa.co", 805 | "xn--inance-hrb.com", 806 | "wanchain.tech", 807 | "zenprolocol.com", 808 | "ethscan.io", 809 | "etherscan.in", 810 | "props-project.com", 811 | "zilliaq.com", 812 | "reqestnetwork.com", 813 | "etherdelta.pw", 814 | "ethereum-giveaway.org", 815 | "mysimpletoken.org", 816 | "binancc.com", 817 | "blnance.org", 818 | "elherdelta.io", 819 | "xn--hapeshit-ez9c2y.com", 820 | "tenxwallet.co", 821 | "singularitynet.info", 822 | "mytlherwaliet.info", 823 | "iconmainnet.ml", 824 | "tokenselfkey.org", 825 | "xn--myetewallet-cm8e5y.com", 826 | "envione.org", 827 | "myetherwalletet.com", 828 | "claimbcd.com", 829 | "ripiocreditnetwork.in", 830 | "xn--yeterwallet-ml8euo.com", 831 | "ethclassicwallet.info", 832 | "myltherwallet.ru.com", 833 | "etherdella.com", 834 | "xn--yeterwallet-bm8ewn.com", 835 | "singularty.net", 836 | "cloudkitties.co", 837 | "iconfoundation.io", 838 | "kittystat.com", 839 | "gatscoin.io", 840 | "singularitynet.in", 841 | "sale.canay.io", 842 | "canay.io", 843 | "wabicoin.co", 844 | "envion.top", 845 | "sirinslabs.com", 846 | "tronlab.co", 847 | "paxful.com.ng", 848 | "changellyli.com", 849 | "ethereum-code.com", 850 | "xn--plonex-6va6c.com", 851 | "envion.co", 852 | "envion.cc", 853 | "envion.site", 854 | "ethereumchain.info", 855 | "xn--envon-1sa.org", 856 | "xn--btstamp-rfb.net", 857 | "envlon.org", 858 | "envion-ico.org", 859 | "spectivvr.org", 860 | "sirinlbs.com", 861 | "ethereumdoubler.life", 862 | "xn--myetherwllet-fnb.com", 863 | "sirin-labs.com", 864 | "sirin-labs.org", 865 | "envion.one", 866 | "envion.live", 867 | "propsproject.org", 868 | "propsprojects.com", 869 | "decentralland.org", 870 | "xn--metherwalet-ns8ep4b.com", 871 | "redpulsetoken.co", 872 | "propsproject.tech", 873 | "xn--myeterwalet-nl8emj.com", 874 | "powrerledger.com", 875 | "cryptokitties.com", 876 | "sirinlabs.pro", 877 | "sirinlabs.co", 878 | "sirnlabs.com", 879 | "superbitcoin-blockchain.info", 880 | "hellobloom.me", 881 | "mobus.network", 882 | "powrrledger.com", 883 | "xn--myeherwalet-ms8eyy.com", 884 | "qlink-ico.com", 885 | "gatcoin.in", 886 | "tokensale.gamefllp.com", 887 | "gamefllp.com", 888 | "xn--myeherwalle-vici.com", 889 | "xn--myetherwalet-39b.com", 890 | "xn--polonex-ffb.com", 891 | "xn--birex-leba.com", 892 | "raiden-network.org", 893 | "sirintabs.com", 894 | "xn--metherwallt-79a30a.com", 895 | "xn--myethrwllet-2kb3p.com", 896 | "myethlerwallet.eu", 897 | "xn--btrex-b4a.com", 898 | "powerrledger.com", 899 | "xn--cointeegraph-wz4f.com", 900 | "myerherwalet.com", 901 | "qauntstanp.com", 902 | "myetherermwallet.com", 903 | "xn--myethewalet-ns8eqq.com", 904 | "xn--nvion-hza.org", 905 | "nnyetherwallelt.ru.com", 906 | "ico-wacoin.com", 907 | "xn--myeterwalet-nl8enj.com", 908 | "bitcoinsilver.io", 909 | "t0zero.com", 910 | "tokensale.gizer.in", 911 | "gizer.in", 912 | "wabitoken.com", 913 | "gladius.ws", 914 | "xn--metherwallt-8bb4w.com", 915 | "quanttstamp.com", 916 | "gladius.im", 917 | "ethereumstorage.net", 918 | "powerledgerr.com", 919 | "xn--myeherwallet-4j5f.com", 920 | "quamtstamp.com", 921 | "quntstamp.com", 922 | "xn--changely-j59c.com", 923 | "shapeshlft.com", 924 | "coinbasenews.co.uk", 925 | "xn--metherwallet-hmb.com", 926 | "envoin.org", 927 | "powerledger.com", 928 | "bitstannp.net", 929 | "xn--myetherallet-4k5fwn.com", 930 | "xn--coinbas-pya.com", 931 | "requestt.network", 932 | "oracls.network", 933 | "sirinlabs.website", 934 | "powrledger.io", 935 | "slackconfirm.com", 936 | "shape-shift.io", 937 | "oracles-network.org", 938 | "xn--myeherwalle-zb9eia.com", 939 | "blockstack.one", 940 | "urtust.io", 941 | "bittrex.one", 942 | "t0-ico.com", 943 | "xn--cinbase-90a.com", 944 | "xn--metherwalet-ns8ez1g.com", 945 | "tzero-ico.com", 946 | "tzero.su", 947 | "tzero.website", 948 | "blockstack.network", 949 | "ico-tzero.com", 950 | "spectre.site", 951 | "tzero.pw", 952 | "spectre-ai.net", 953 | "xn--waxtokn-y8a.com", 954 | "dmarket.pro", 955 | "bittrex.com11648724328774.cf", 956 | "bittrex.com1987465798.ga", 957 | "autcus.org", 958 | "t-zero.org", 959 | "xn--zero-zxb.com", 960 | "myetherwalletfork.com", 961 | "blokclbain.info", 962 | "datum.sale", 963 | "spectre-ai.org", 964 | "powerledgr.com", 965 | "simpletoken.live", 966 | "sale.simpletoken.live", 967 | "qauntstamp.com", 968 | "raiden-network.com", 969 | "metalpayme.com", 970 | "quantstamp-ico.com", 971 | "myetherwailetclient.com", 972 | "biockchain.biz", 973 | "wallets-blockchain.com", 974 | "golemairdrop.com", 975 | "omisegoairdrop.net", 976 | "blodkchainwallet.info", 977 | "walton-chain.org", 978 | "elite888-ico.com", 979 | "bitflyerjp.com", 980 | "chainlinksmartcontract.com", 981 | "stormtoken.eu", 982 | "omise-go.tech", 983 | "saltending.com", 984 | "stormltoken.com", 985 | "xn--quanttamp-42b.com", 986 | "stormtoken.co", 987 | "storntoken.com", 988 | "stromtoken.com", 989 | "storm-token.com", 990 | "stormtokens.io", 991 | "ether-delta.com", 992 | "ethconnect.live", 993 | "ethconnect.trade", 994 | "xn--bttrex-3va.net", 995 | "quantstamp.com.co", 996 | "wancha.in", 997 | "augur-network.com", 998 | "quantstamp.com.ua", 999 | "myetherwalletmew.com", 1000 | "myetherumwalletts.com", 1001 | "xn--quanstamp-tmd.com", 1002 | "quantsstamps.com", 1003 | "changellyl.net", 1004 | "xn--myetherwalet-1fb.com", 1005 | "myethereumwallets.com", 1006 | "xn--myetherwalet-e9b.com", 1007 | "quantslamp.com", 1008 | "metelpay.com", 1009 | "xn--eterdelta-m75d.com", 1010 | "linksmartcontract.com", 1011 | "myetherwalletaccess.com", 1012 | "myetherwalletcheck.com", 1013 | "myetherwalletcheck.info", 1014 | "myetherwalletconf.com", 1015 | "myetherwalleteal.com", 1016 | "myetherwalletec.com", 1017 | "myetherwalletgeth.com", 1018 | "myetherwalletmetamask.com", 1019 | "myetherwalletmm.com", 1020 | "myetherwalletmy.com", 1021 | "myetherwalletnh.com", 1022 | "myetherwalletnod.com", 1023 | "myetherwalletrr.com", 1024 | "myetherwalletrty.com", 1025 | "myetherwalletsec.com", 1026 | "myetherwalletsecure.com", 1027 | "myetherwalletutc.com", 1028 | "myetherwalletver.info", 1029 | "myetherwalletview.com", 1030 | "myetherwalletview.info", 1031 | "myetherwalletvrf.com", 1032 | "myetherwalletmist.com", 1033 | "myetherwalletext.com", 1034 | "myetherwalletjson.com", 1035 | "mettalpay.com", 1036 | "bricklblock.io", 1037 | "bittrexy.com", 1038 | "utrust.so", 1039 | "myethierwallet.org", 1040 | "metallpay.com", 1041 | "kraken-wallet.com", 1042 | "dmarkt.io", 1043 | "etherdeltla.com", 1044 | "unlversa.io", 1045 | "universa.sale", 1046 | "mercuryprotocol.live", 1047 | "ripiocredlt.network", 1048 | "myetlherwa11et.com", 1049 | "dentacoin.in", 1050 | "rdrtg.com", 1051 | "myetherwallet.com.rdrgh.com", 1052 | "rdrgh.com", 1053 | "ripiocreditnetwork.co", 1054 | "riaden.network", 1055 | "hydrominer.biz", 1056 | "rdrblock.com", 1057 | "reqest.network", 1058 | "senstoken.com", 1059 | "myetherwallat.services", 1060 | "ripiocredit.net", 1061 | "xn--metherwallet-c06f.com", 1062 | "ico.ripiocredits.com", 1063 | "ripiocredits.com", 1064 | "raidens.network", 1065 | "artoken.co", 1066 | "myetherwalletlgn.com", 1067 | "etherblog.click", 1068 | "stormtoken.site", 1069 | "httpmyetherwallet.com", 1070 | "myetherwalletverify.com", 1071 | "byzantiumfork.com", 1072 | "myetherwallet.com.byzantiumfork.com", 1073 | "www-myethervvallet.com", 1074 | "ether24.info", 1075 | "block-v.io", 1076 | "bittrex.cash", 1077 | "shapishift.io", 1078 | "ripiocerdit.network", 1079 | "rnyetherwa11et.com", 1080 | "claimether.com", 1081 | "enigmatokensale.com", 1082 | "ethereum-org.com", 1083 | "mvetnerwallet.com", 1084 | "myctherwallet.com", 1085 | "myetherwaltet.com", 1086 | "myetherwatlet.com", 1087 | "privatix.me", 1088 | "myetherwalletcnf.com", 1089 | "myetherwalletver.com", 1090 | "privatix.top", 1091 | "privatix.pro", 1092 | "privatex.io", 1093 | "stormtoken.cc", 1094 | "raiden.online", 1095 | "stormstoken.com", 1096 | "myetereumwallet.com", 1097 | "stormtokens.net", 1098 | "myetherwalletconf.info", 1099 | "storrntoken.com", 1100 | "worldofbattles.io", 1101 | "ico.worldofbattles.io", 1102 | "privatix.live", 1103 | "riden.network", 1104 | "raidan.network", 1105 | "ralden.network", 1106 | "mymyetherwallet.com", 1107 | "myetherwallets.net", 1108 | "myetherwalletverify.info", 1109 | "stormxtoken.com", 1110 | "myethereum-wallet.com", 1111 | "myetherwallet-forkprep.pagedemo.co", 1112 | "myetnerwailet.com", 1113 | "www-mvetherwallet.com", 1114 | "etheirdelta.com", 1115 | "myetherwalletiu.com", 1116 | "myetherwaiiett.com", 1117 | "xn--mytherwalet-cbb87i.com", 1118 | "xn--myethrwallet-ivb.co", 1119 | "xn--myeterwallet-f1b.com", 1120 | "myehterwaliet.com", 1121 | "omegaone.co", 1122 | "myetherwaiietw.com", 1123 | "slack.com.ru", 1124 | "polkodot.network", 1125 | "request-network.net", 1126 | "requestnetwork.live", 1127 | "binancie.com", 1128 | "first-eth.info", 1129 | "myewerthwalliet.com", 1130 | "enjincoin.pw", 1131 | "xn--bitrex-k17b.com", 1132 | "alrswap.io", 1133 | "www-request.network", 1134 | "myetnenwallet.com", 1135 | "www-enigma.co", 1136 | "cryptoinsidenews.com", 1137 | "air-swap.tech", 1138 | "launch.airswap.cc", 1139 | "airswap.cc", 1140 | "airswaptoken.com", 1141 | "launch.airswap.in", 1142 | "airswap.in", 1143 | "security-steemit.com.mx", 1144 | "blockchalnwallet.com", 1145 | "blodkchainwallet.com", 1146 | "blodkchaln.com", 1147 | "myethereumwaiiet.com", 1148 | "myethereumwaliet.com", 1149 | "myethereumwalilet.com", 1150 | "myetherswailet.com", 1151 | "myetherswaliet.com", 1152 | "myetherswalilet.com", 1153 | "myetherwalilett.com", 1154 | "myetherwalletl.com", 1155 | "myetherwalletww.com", 1156 | "myethereunwallet.com", 1157 | "myethereumwallct.com", 1158 | "myetherwaiieti.com", 1159 | "myetherwaiiete.com", 1160 | "upfirng.com", 1161 | "paypie.net", 1162 | "paypie.tech", 1163 | "soam.co", 1164 | "myetherwaiict.com", 1165 | "numerai-token.com", 1166 | "www-bankera.com", 1167 | "vvanchain.org", 1168 | "omisegoairdrop.com", 1169 | "xn--enjncoin-41a.io", 1170 | "suncontract.su", 1171 | "myetherwaiietr.com", 1172 | "shapeshiff.io", 1173 | "warchain.org", 1174 | "myethwallett.com", 1175 | "myethervvaliet.com", 1176 | "wanchains.org", 1177 | "etherparty.in", 1178 | "enjincoin.me", 1179 | "etiam.io", 1180 | "invest.smartlands.tech", 1181 | "smartlands.tech", 1182 | "enijncoin.io", 1183 | "wanchain.network", 1184 | "nimiq.su", 1185 | "enjincoin.sale", 1186 | "tenxwallet.io", 1187 | "golem-network.net", 1188 | "myyethwallet.ml", 1189 | "mywetherwailiet.com", 1190 | "omg-omise.com", 1191 | "district0x.tech", 1192 | "centra-token.com", 1193 | "etherdetla.com", 1194 | "etnerparty.io", 1195 | "etherdelta.su", 1196 | "myetherwallett.neocities.org", 1197 | "myetherwallet-secure.com", 1198 | "myethereumwalletntw.info", 1199 | "real-markets.io", 1200 | "wallet-ethereum.org", 1201 | "request-network.com", 1202 | "shapeshifth.io", 1203 | "shiapeshift.in", 1204 | "coin.red-puise.com", 1205 | "ibittreix.com", 1206 | "coinkbase.com", 1207 | "cindicator.pro", 1208 | "myetherwallet.com.ailogin.me", 1209 | "eventchain.co", 1210 | "kinkik.in", 1211 | "myetherumwalletview.com", 1212 | "protostokenhub.com", 1213 | "coinrbase.com", 1214 | "myetherwalletlogin.com", 1215 | "omisegotoken.com", 1216 | "myethereumwalletntw.com", 1217 | "reall.markets", 1218 | "cobinhood.org", 1219 | "cobinhood.io", 1220 | "happy-coin.org", 1221 | "bitfinex.com.co", 1222 | "bitfienex.com", 1223 | "iconn.foundation", 1224 | "centra.vip", 1225 | "smartcontract.live", 1226 | "icon.community", 1227 | "air-token.com", 1228 | "centra.credit", 1229 | "myetherwallet-singin.com", 1230 | "smartcontractlink.com", 1231 | "shapesshift.io", 1232 | "0xtoken.io", 1233 | "augurproject.co", 1234 | "ethereumus.one", 1235 | "myetherumwalet.com", 1236 | "myetherwalletsignin.com", 1237 | "change-bank.org", 1238 | "charge-bank.com", 1239 | "myetherwalletsingin.com", 1240 | "myetherwalletcontract.com", 1241 | "change-bank.io", 1242 | "chainlink.tech", 1243 | "myetherwallet-confirm.com", 1244 | "tokensale.kybernet.network", 1245 | "kybernet.network", 1246 | "kyberr.network", 1247 | "kybernetwork.io", 1248 | "myetherwalletconfirm.com", 1249 | "kvnuke.github.io", 1250 | "kin.kikpro.co", 1251 | "myethereumwallet.co.uk", 1252 | "tokensale-kyber.network", 1253 | "kyber-network.co", 1254 | "tokensale.kyber-network.co", 1255 | "pyro0.github.io", 1256 | "tokensale.kyber.digital", 1257 | "kyber.digital", 1258 | "omise-go.me", 1259 | "my.etherwallet.com.de", 1260 | "bepartof.change-bank.co", 1261 | "change-bank.co", 1262 | "enigma-tokens.co", 1263 | "coinbase.com.eslogin.co", 1264 | "xn--bittrx-mva.com", 1265 | "ethrdelta.github.io", 1266 | "etherdellta.com", 1267 | "ico-nexus.social", 1268 | "red-pulse.tech", 1269 | "bitj0b.io", 1270 | "xn--bttrex-bwa.com", 1271 | "kin-klk.com", 1272 | "kin-crowdsale.com", 1273 | "ethedelta.com", 1274 | "coindash.su", 1275 | "myethwallet.co.uk", 1276 | "swarm.credit", 1277 | "myethereumwallet.uk", 1278 | "iconexu.social", 1279 | "wanchain.co", 1280 | "enigrna.co", 1281 | "linknetwork.co", 1282 | "qtum-token.com", 1283 | "omisego.com.co", 1284 | "rivetzintl.org", 1285 | "etherdelta.one", 1286 | "the-ether.pro", 1287 | "etherdelta.gitnub.io", 1288 | "kirkik.com", 1289 | "monetha.ltd", 1290 | "vlberate.io", 1291 | "ethereumwallet-kr.info", 1292 | "omise-go.org", 1293 | "iconexus.social", 1294 | "bittirrex.com", 1295 | "aventus.pro", 1296 | "atlant.solutions", 1297 | "aventus.group", 1298 | "metamak.io", 1299 | "omise.com.co", 1300 | "herotokens.io", 1301 | "starbase.pro", 1302 | "etherdelta.githulb.io", 1303 | "herotoken.co", 1304 | "kinico.net", 1305 | "dmarket.ltd", 1306 | "etherdelta.gilthub.io", 1307 | "golem-network.com", 1308 | "etnerscan.io", 1309 | "bllttriex.com", 1310 | "monetha.me", 1311 | "monetha.co", 1312 | "monetha-crowdsale.com", 1313 | "starbase.tech", 1314 | "aventus-crowdsale.com", 1315 | "shapeshift.pro", 1316 | "bllttrex.com", 1317 | "kickico.co", 1318 | "statustoken.im", 1319 | "bilttrex.com", 1320 | "tenxpay.io", 1321 | "bittrex.ltd", 1322 | "metalpay.im", 1323 | "aragon.im", 1324 | "coindash.tech", 1325 | "decentraland.tech", 1326 | "decentraland.pro", 1327 | "status-token.com", 1328 | "bittrex.cam", 1329 | "enigmatoken.com", 1330 | "unocoin.company", 1331 | "unocoin.fund", 1332 | "0xproject.io", 1333 | "0xtoken.com", 1334 | "numerai.tech", 1335 | "decentraiand.org", 1336 | "blockcrein.info", 1337 | "blockchealn.info", 1338 | "bllookchain.info", 1339 | "blockcbhain.info", 1340 | "myetherwallet.com.ethpromonodes.com", 1341 | "mettamask.io", 1342 | "tokenswap.org", 1343 | "netherum.com", 1344 | "etherexx.org", 1345 | "etherume.io", 1346 | "ethereum.plus", 1347 | "ehtereum.org", 1348 | "etereurm.org", 1349 | "etheream.com", 1350 | "ethererum.org", 1351 | "ethereum.io", 1352 | "etherdelta-glthub.com", 1353 | "cryptoalliance.herokuapp.com", 1354 | "bitspark2.com", 1355 | "indorsetoken.com", 1356 | "iconexus.tk", 1357 | "iconexus.ml", 1358 | "iconexus.ga", 1359 | "iconexus.cf", 1360 | "etherwallet.online", 1361 | "wallet-ethereum.net", 1362 | "bitsdigit.com", 1363 | "etherswap.org", 1364 | "eos.ac", 1365 | "uasfwallet.com", 1366 | "ziber.io", 1367 | "multiply-ethereum.info", 1368 | "bittrex.comze.com", 1369 | "karbon.vacau.com", 1370 | "etherdelta.gitlhub.io", 1371 | "etherdelta.glthub.io", 1372 | "digitaldevelopersfund.vacau.com", 1373 | "district-0x.io", 1374 | "coin-dash.com", 1375 | "coindash.ru", 1376 | "district0x.net", 1377 | "aragonproject.io", 1378 | "coin-wallet.info", 1379 | "coinswallet.info", 1380 | "contribute-status.im", 1381 | "ether-api.com", 1382 | "ether-wall.com", 1383 | "mycoinwallet.net", 1384 | "ethereumchamber.com", 1385 | "ethereumchamber.net", 1386 | "ethereumchest.com", 1387 | "ethewallet.com", 1388 | "myetherwallet.com.vc", 1389 | "myetherwallet.com.pe", 1390 | "myetherwallet.us.com", 1391 | "myetherwallet.com.u0387831.cp.regruhosting.ru", 1392 | "myethereumwallet.su", 1393 | "myetherweb.com.de", 1394 | "myetherieumwallet.com", 1395 | "myetehrwallet.com", 1396 | "myeterwalet.com", 1397 | "myetherwaiiet.com", 1398 | "myetherwallet.info", 1399 | "myetherwallet.ch", 1400 | "myetherwallet.om", 1401 | "myethervallet.com", 1402 | "myetherwallet.com.cm", 1403 | "myetherwallet.com.co", 1404 | "myetherwallet.com.de", 1405 | "myetherwallet.com.gl", 1406 | "myetherwallet.com.im", 1407 | "myetherwallet.com.ua", 1408 | "secure-myetherwallet.com", 1409 | "update-myetherwallet.com", 1410 | "wwwmyetherwallet.com", 1411 | "myeatherwallet.com", 1412 | "myetharwallet.com", 1413 | "myelherwallel.com", 1414 | "myetherwaillet.com", 1415 | "myetherwaliet.com", 1416 | "myetherwallel.com", 1417 | "myetherwallet.cam", 1418 | "myetherwallet.cc", 1419 | "myetherwallet.co", 1420 | "myetherwallet.cm", 1421 | "myetherwallet.cz", 1422 | "myetherwallet.org", 1423 | "myetherwallet.tech", 1424 | "myetherwallet.top", 1425 | "myetherwallet.net", 1426 | "myetherwallet.ru.com", 1427 | "myetherwallet.com.ru", 1428 | "metherwallet.com", 1429 | "myetrerwallet.com", 1430 | "myetlerwallet.com", 1431 | "myethterwallet.com", 1432 | "myethwallet.io", 1433 | "myethterwallet.co", 1434 | "myehterwallet.co", 1435 | "myaetherwallet.com", 1436 | "myetthterwallet.com", 1437 | "myetherwallet.one", 1438 | "myelterwallet.com", 1439 | "myetherwallet.gdn", 1440 | "myetherwallt.com", 1441 | "myeterwallet.com", 1442 | "myeteherwallet.com", 1443 | "myethearwailet.com", 1444 | "myetherwallelt.com", 1445 | "myetherwallett.com", 1446 | "etherwallet.org", 1447 | "myetherewallet.com", 1448 | "myeherwallet.com", 1449 | "myethcrwallet.com", 1450 | "myetherwallet.link", 1451 | "myetherwallets.com", 1452 | "myethearwaillet.com", 1453 | "myethearwallet.com", 1454 | "myetherawllet.com", 1455 | "myethereallet.com", 1456 | "myetherswallet.com", 1457 | "myetherwalet.com", 1458 | "myetherwaller.com", 1459 | "myetherwalliet.com", 1460 | "myetherwllet.com", 1461 | "etherwallet.io", 1462 | "myetherwallet.ca", 1463 | "myetherwallet.me", 1464 | "myetherwallet.ru", 1465 | "myetherwallet.xyz", 1466 | "myetherwallte.com", 1467 | "myethirwallet.com", 1468 | "myethrewallet.com", 1469 | "etherwallet.net", 1470 | "maetherwallet.com", 1471 | "meyetherwallet.com", 1472 | "my.ether-wallet.pw", 1473 | "myehterwallet.com", 1474 | "myeitherwallet.com", 1475 | "myelherwallet.com", 1476 | "myeltherwallet.com", 1477 | "myerherwallet.com", 1478 | "myethearwalet.com", 1479 | "myetherewalle.com", 1480 | "myethervvallet.com", 1481 | "myetherwallent.com", 1482 | "myetherwallet.fm", 1483 | "myetherwalllet.com", 1484 | "myetherwalltet.com", 1485 | "myetherwollet.com", 1486 | "myetlherwalet.com", 1487 | "myetlherwallet.com", 1488 | "rnyetherwallet.com", 1489 | "etherclassicwallet.com", 1490 | "omg-omise.co", 1491 | "omise-go.com", 1492 | "omise-go.net", 1493 | "omise-omg.com", 1494 | "omise-go.io", 1495 | "tenx-tech.com", 1496 | "bitclaive.com", 1497 | "tokensale-tenx.tech", 1498 | "ubiqcoin.org", 1499 | "metamask.com", 1500 | "ethtrade.io", 1501 | "myetcwallet.com", 1502 | "account-kigo.net", 1503 | "bitcoin-wallet.net", 1504 | "blocklichan.info", 1505 | "bloclkicihan.info", 1506 | "coindash.ml", 1507 | "eos-bonus.com", 1508 | "eos-io.info", 1509 | "ether-wallet.net", 1510 | "ethereum-wallet.info", 1511 | "ethereum-wallet.net", 1512 | "ethereumchest.net", 1513 | "reservations-kigo.net", 1514 | "reservations-lodgix.com", 1515 | "secure-liverez.com", 1516 | "secure-onerooftop.com", 1517 | "settings-liverez.com", 1518 | "software-liverez.com", 1519 | "software-lodgix.com", 1520 | "unhackableetherwallets.com", 1521 | "www-myetherwallet.com", 1522 | "etherwallet.co.za", 1523 | "etherwalletchain.com", 1524 | "etherwallets.net", 1525 | "etherwallets.nl", 1526 | "my-ethwallet.com", 1527 | "my.ether-wallet.co", 1528 | "myetherwallet.com.am", 1529 | "myetherwallet.com.ht", 1530 | "myetherwalletcom.com", 1531 | "myehterwailet.com", 1532 | "xn--myetherwalle-xoc.com", 1533 | "xn--myetherwalle-44i.com", 1534 | "xn--myetherwalle-xhk.com", 1535 | "xn--myetherwallt-cfb.com", 1536 | "xn--myetherwallt-6tb.com", 1537 | "xn--myetherwallt-xub.com", 1538 | "xn--myetherwallt-ovb.com", 1539 | "xn--myetherwallt-fwb.com", 1540 | "xn--myetherwallt-5wb.com", 1541 | "xn--myetherwallt-jzi.com", 1542 | "xn--myetherwallt-2ck.com", 1543 | "xn--myetherwallt-lok.com", 1544 | "xn--myetherwallt-lsl.com", 1545 | "xn--myetherwallt-ce6f.com", 1546 | "xn--myetherwalet-mcc.com", 1547 | "xn--myetherwalet-xhf.com", 1548 | "xn--myetherwalet-lcc.com", 1549 | "xn--myetherwaet-15ba.com", 1550 | "xn--myetherwalet-whf.com", 1551 | "xn--myetherwaet-v2ea.com", 1552 | "xn--myetherwllet-59a.com", 1553 | "xn--myetherwllet-jbb.com", 1554 | "xn--myetherwllet-wbb.com", 1555 | "xn--myetherwllet-9bb.com", 1556 | "xn--myetherwllet-ncb.com", 1557 | "xn--myetherwllet-0cb.com", 1558 | "xn--myetherwllet-5nb.com", 1559 | "xn--myetherwllet-ktd.com", 1560 | "xn--myetherwllet-mre.com", 1561 | "xn--myetherwllet-76e.com", 1562 | "xn--myetherwllet-o0l.com", 1563 | "xn--myetherwllet-c45f.com", 1564 | "xn--myetherallet-ejn.com", 1565 | "xn--myethewallet-4nf.com", 1566 | "xn--myethewallet-iof.com", 1567 | "xn--myethewallet-mpf.com", 1568 | "xn--myethewallet-6bk.com", 1569 | "xn--myethewallet-i31f.com", 1570 | "xn--myethrwallet-feb.com", 1571 | "xn--myethrwallt-fbbf.com", 1572 | "xn--myethrwallet-seb.com", 1573 | "xn--myethrwallt-rbbf.com", 1574 | "xn--myethrwallet-5eb.com", 1575 | "xn--myethrwallt-3bbf.com", 1576 | "xn--myethrwallet-0tb.com", 1577 | "xn--myethrwallt-tpbf.com", 1578 | "xn--myethrwallet-rub.com", 1579 | "xn--myethrwallt-iqbf.com", 1580 | "xn--myethrwallet-ivb.com", 1581 | "xn--myethrwallt-6qbf.com", 1582 | "xn--myethrwallet-8vb.com", 1583 | "xn--myethrwallt-vrbf.com", 1584 | "xn--myethrwallet-zwb.com", 1585 | "xn--myethrwallt-ksbf.com", 1586 | "xn--myethrwallet-dzi.com", 1587 | "xn--myethrwallt-wbif.com", 1588 | "xn--myethrwallet-wck.com", 1589 | "xn--myethrwallt-skjf.com", 1590 | "xn--myethrwallet-fok.com", 1591 | "xn--myethrwallt-fvjf.com", 1592 | "xn--myethrwallet-fsl.com", 1593 | "xn--myethrwallt-fwkf.com", 1594 | "xn--myethrwallet-5d6f.com", 1595 | "xn--myethrwallt-319ef.com", 1596 | "xn--myeterwallet-ufk.com", 1597 | "xn--myeterwallet-nrl.com", 1598 | "xn--myeterwallet-von.com", 1599 | "xn--myeterwallet-jl6c.com", 1600 | "xn--myeherwallet-ooc.com", 1601 | "xn--myeherwalle-6hci.com", 1602 | "xn--myeherwallet-v4i.com", 1603 | "xn--myeherwalle-zgii.com", 1604 | "xn--myeherwallet-ohk.com", 1605 | "xn--myeherwalle-6oji.com", 1606 | "xn--mytherwallet-ceb.com", 1607 | "xn--mythrwallet-cbbc.com", 1608 | "xn--mythrwallt-c7acf.com", 1609 | "xn--mytherwallet-peb.com", 1610 | "xn--mythrwallet-obbc.com", 1611 | "xn--mythrwallt-n7acf.com", 1612 | "xn--mytherwallet-2eb.com", 1613 | "xn--mythrwallet-0bbc.com", 1614 | "xn--mythrwallt-y7acf.com", 1615 | "xn--mytherwallet-xtb.com", 1616 | "xn--mythrwallet-qpbc.com", 1617 | "xn--mythrwallt-jlbcf.com", 1618 | "xn--mytherwallet-oub.com", 1619 | "xn--mythrwallet-fqbc.com", 1620 | "xn--mythrwallt-5lbcf.com", 1621 | "xn--mythrwallet-3qbc.com", 1622 | "xn--mythrwallt-smbcf.com", 1623 | "xn--mytherwallet-5vb.com", 1624 | "xn--mythrwallet-srbc.com", 1625 | "xn--mythrwallt-fnbcf.com", 1626 | "xn--mytherwallet-wwb.com", 1627 | "xn--mythrwallet-hsbc.com", 1628 | "xn--mythrwallt-1nbcf.com", 1629 | "xn--mytherwallet-9yi.com", 1630 | "xn--mythrwallet-tbic.com", 1631 | "xn--mythrwallt-dnhcf.com", 1632 | "xn--mytherwallet-tck.com", 1633 | "xn--mythrwallet-pkjc.com", 1634 | "xn--mythrwallt-lsicf.com", 1635 | "xn--mytherwallet-cok.com", 1636 | "xn--mythrwallet-cvjc.com", 1637 | "xn--mythrwallt-c2icf.com", 1638 | "xn--mytherwallet-csl.com", 1639 | "xn--mythrwallet-cwkc.com", 1640 | "xn--mythrwallt-c0jcf.com", 1641 | "xn--mytherwallet-2d6f.com", 1642 | "xn--mythrwallet-019ec.com", 1643 | "xn--mythrwallt-yq3ecf.com", 1644 | "xn--metherwallet-qlb.com", 1645 | "xn--metherwallet-1uf.com", 1646 | "xn--metherwallet-iyi.com", 1647 | "xn--metherwallet-zhk.com", 1648 | "xn--metherwallet-3ml.com", 1649 | "xn--mytherwallet-fvb.com", 1650 | "xn--myetherwallt-7db.com", 1651 | "xn--myetherwallt-leb.com", 1652 | "xn--myetherwallt-yeb.com", 1653 | "xn--yetherwallet-vjf.com", 1654 | "xn--yetherwallet-dfk.com", 1655 | "xn--yetherwallet-1t1f.com", 1656 | "xn--yetherwallet-634f.com", 1657 | "xn--myeherwallet-fpc.com", 1658 | "xn--myethewallt-crb.com", 1659 | "xn--metherwallet-1vc.com", 1660 | "xn--myeherwallt-kbb8039g.com", 1661 | "xn--myeherwallet-vk5f.com", 1662 | "xn--yethewallet-iw8ejl.com", 1663 | "xn--bittrx-th8b.com", 1664 | "xn--polniex-n0a.com", 1665 | "thekey.vin", 1666 | "thekey-vip.com", 1667 | "digitexftures.com", 1668 | "ethzero-wallet.org", 1669 | "zeepln.io", 1670 | "wepowers.network", 1671 | "wepower.vision", 1672 | "seele.promo", 1673 | "seele-ico.eu", 1674 | "seele-ico.pro", 1675 | "syncfab.tech", 1676 | "tokensale.syncfab.tech", 1677 | "havven.promo", 1678 | "havven-ico.com", 1679 | "havven-ico.eu", 1680 | "hawen.io", 1681 | "havven.xyz", 1682 | "tomo-coin.io", 1683 | "tomocoln.io", 1684 | "docai.science", 1685 | "tomocoin.network", 1686 | "celsius-ico.network", 1687 | "celsiuss.network" 1688 | ] 1689 | } -------------------------------------------------------------------------------- /_layouts/404.html: -------------------------------------------------------------------------------- 1 | 2 |

404

3 |

This page was not found

4 |
Return to homepage
-------------------------------------------------------------------------------- /_layouts/address.html: -------------------------------------------------------------------------------- 1 | 2 |

{{ address.address }}

3 | {{ address.notification }} 4 | Balance: loading...
5 | USD Value: loading...
6 | {{ address.list }} 7 |
8 | View address on etherscan
9 | 10 |
11 | 23 | 24 | 25 | -------------------------------------------------------------------------------- /_layouts/api.html: -------------------------------------------------------------------------------- 1 |

API

2 | 3 |
4 |

Check

5 | URL:
GET "https://etherscamdb.info/api/check/0xDaa29859836D97C810c7F9D350D4A1B3E8CafC9a/" (can be a domain, ethereum address, or ip address)

6 | Response: 7 |
8 |
9 |
10 |
11 |

 12 | 
 13 |     
14 |
15 |

Report

16 | Example URL: https://etherscamdb.info/report/domain/fake-mycrypto.com/
17 | Another example URL: https://etherscamdb.info/report/address/0x0000000000000000000000000000000000000000/

18 | All of the values (fake-mycrypto.com and 0x0000000000000000000000000000000000000000) are optional. 19 |

Scams

20 | URL:
GET "https://etherscamdb.info/api/scams/"

21 | Response: 22 |
23 |
24 |
25 |
26 |

 27 | 
 28 |     
29 |
30 |

Addresses

31 | URL:
GET "https://etherscamdb.info/api/addresses/"

32 | Response: 33 |
34 |
35 |
36 |
37 |

 38 | 
 39 |     
40 |
41 |

IPs

42 | URL:
GET "https://etherscamdb.info/api/ips/"

43 | Response: 44 |
45 |
46 |
47 |
48 |

 49 | 
 50 |     
51 |
52 |

Verified

53 | URL:
GET "https://etherscamdb.info/api/verified/"

54 | Response: 55 |
56 |
57 |
58 |
59 |

 60 | 
 61 |     
62 |
63 |

Blacklist

64 | URL:
GET "https://etherscamdb.info/api/blacklist/"

65 | Response: 66 |
67 |
68 |
69 |
70 |

 71 | 
 72 |     
73 |
74 |

Whitelist

75 | URL:
GET "https://etherscamdb.info/api/whitelist/"

76 | Response: 77 |
78 |
79 |
80 |
81 |

 82 | 
 83 |     
84 |
85 | 86 |

Inactives

87 | URL:
GET "https://etherscamdb.info/api/inactives/"

88 | Response: 89 |
90 |
91 |
92 |
93 |

 94 | 
 95 |     
96 |
97 | 98 |

Actives

99 | URL:
GET "https://etherscamdb.info/api/actives/"

100 | Response: 101 |
102 |
103 |
104 |
105 |

106 | 
107 |     
108 |
109 | 110 |

Abuse report

111 | URL:
GET "https://etherscamdb.info/api/abusereport/changellyli.com/"

112 | Response: 113 |
114 |
115 |
116 |
117 |

118 | 
119 |     
120 |
121 | 122 | -------------------------------------------------------------------------------- /_layouts/default.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | Ethereum Scam Database 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 49 |
50 | 51 | {{ config.perform_dns_lookup }} 52 | 53 |
54 | EtherscamDB has evolved into CryptoScamDB! As such, this site will no longer be actively updated.
55 | Please head over to https://CryptoScamDB.org for the most up-to-date list of scams.

56 | 57 | Read More: https://medium.com/mycrypto/introducing-cryptoscamdb-org-77125e140650 58 |

59 | 60 | {{ content }} 61 |
62 | 81 | 82 | 83 | 84 | 85 | 86 | -------------------------------------------------------------------------------- /_layouts/faq.html: -------------------------------------------------------------------------------- 1 |

FAQ

2 |

How to protect myself against scammers?

3 |
4 |
Use cold storage - Buy a Ledger Nano S or a Trezor
5 |
Bookmark your crypto sites - Use those bookmarks and only those.
6 |
Only send funds to trusted addresses - Double-check what address you're sending ETH to. Look up the address at etherscan.io and check if there are bad reviews
7 |
Never trust any discord/slack/telegram/reddit message - Don't ever fall for messages that say you can get free ETH or that a hack has occurred.
8 |
9 | MyCrypto has written a great guide on protecting yourself and your funds. 10 |

How can I join the fight?

11 |
12 |
Report scams to us here
13 |
Report scams to Google: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en
14 |
Send abuse reports to the registrar, hosting and ssl provider of the scam domains
15 |
Install the EtherSecurityLookup extension on your browser
16 |
17 |

Can I use the data from this project?

18 | Yes, you can either download the raw data files from Github or take a look at our API. 19 |

Are the reports open source? Where do they go?

20 |

All reports end up in a private Slack to protect people's privacy. The reports can be read by all team members of MyCrypto and they can decide whether the report makes it to the blacklist.

21 |

Why was the database created?

22 |

The database was created in 2017 by #TeamMEW when trying to find a solution to the ethereum scams. Of course grouping all the scams won't make them go away, but it will make identifying them and taking them down easier. It is now being maintained by the MyCrypto team.

23 | -------------------------------------------------------------------------------- /_layouts/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |

EtherScamDB logo type-a

4 |
5 |
6 |

Open-Source

7 | The full website is open-source at Github including all datasets with documentation to use them in your own application. 8 |
9 |
10 |

Knowledge

11 | By combining all the information that's available, connections between scams can easily be found. 12 |
13 |
14 |
15 |
16 |

Report

17 | An easy-to-use report function helps us identifying all the current scams so we can add them to the database. 18 |
19 | 23 |
24 | 25 | -------------------------------------------------------------------------------- /_layouts/ip.html: -------------------------------------------------------------------------------- 1 |

{{ ip.ip }}

2 | Location: loading...
3 | AbuseIPDB: {{ ip.abuseipdb_link }}
4 | URLScan: {{ ip.urlscan_link }}

5 | Related to the following scams ({{ ip.scams_count }}): {{ ip.scams }} 6 |
7 |
8 | -------------------------------------------------------------------------------- /_layouts/neutraldomain.html: -------------------------------------------------------------------------------- 1 | 2 |
3 |

{{ neutral.name }}

4 |
5 | {{ neutral.notification }} 6 | {{ neutral.url }}
7 | {{ neutral.googlethreat }} 8 | {{ neutral.virustotal }} 9 | {{ neutral.phishtank }} 10 | {{ neutral.urlscan }}
11 | {{ neutral.urlscreenshot }} 12 | 13 |
14 | 15 | {{ page.built }} 16 | 27 | 28 | 29 | -------------------------------------------------------------------------------- /_layouts/no-scam-found.html: -------------------------------------------------------------------------------- 1 | 2 | 20 | 41 |
42 |

404 - Record does not exist

43 |
44 |
45 |
46 | 47 |

Sorry, but this record cannot be found.

-------------------------------------------------------------------------------- /_layouts/redirect.html: -------------------------------------------------------------------------------- 1 | 2 |

Warning

3 |

You are about to leave the official website to an external domain.

4 |
5 |

Domain: {{ redirect.domain }}

6 |
7 |
8 |

Do not click anything.

9 |

Do not fill in any of your information. (And definitely no private keys!)

10 |

Wipe your history after you have visited this domain. You don't want a fake website to show up when you type "myetherwa" in your address bar.

11 |
12 |
13 | 14 |
15 | 16 | -------------------------------------------------------------------------------- /_layouts/report.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 |

Report

5 |
6 |
7 |

Has any of your money been stolen?

8 |
9 |
10 | 11 |
12 | 15 | 16 | 19 | 20 | 23 | 24 |
25 |
26 |
27 |

Addresses

28 |
29 |
30 |
31 | Your wallet address: 32 |
33 | 34 |
35 |
36 |
37 |
38 |
39 | 40 | 41 |
42 |
43 |
44 |
45 | 48 | 51 |
52 |
53 |
54 |

Address Information

55 |

If you're not sure, please create a new wallet at mycrypto.com and send all your funds to your new wallet.

56 |

Before continuing you can check if any of your money was stolen by entering your old address in https://etherscan.io and see if you notice any weird outgoing transactions.

57 |
58 | 61 |
62 |
63 |
64 |

Check your browsing history

65 |
66 |
67 |

Have you entered your private key on any site different than mycrypto.com?

68 |
69 |
70 |
71 | 74 | 75 | 78 | 79 | 82 | 83 |
84 |
85 |
86 |
87 |
88 |

On what website have you entered your private key?

89 |
90 |
91 |
92 |
93 |
94 | Website: 95 |
96 | 97 |
98 |
99 |
100 | 103 | 106 |
107 |
108 |
109 |

Browsing history

110 |

To check your browsing history, use CTRL + H (Windows) or Command + Shift + H (macOS)

111 |

See if you notice any domains that are slightly different then expected. Things like mycrypto.co instead of .com or mycyrpto instead of mycrypto

112 |
113 | 116 |
117 |
118 |
119 |
120 |
121 |

Have you sent funds to a wrong address?

122 |
123 |
124 |
125 | 128 | 129 | 132 | 133 |
134 |
135 |
136 |

Unfortunately there is no way to refund your funds.

137 |
138 |
139 |

Where did you find the address you sent funds to?

140 |
141 |
142 |
143 | 146 | 147 | 150 | 151 | 154 | 155 |
156 |
157 |
158 |
159 |
160 |

What website did you find the address?

161 |
162 |
163 |
164 |
165 |
166 | Website: 167 |
168 | 169 |
170 |
171 |
172 | 175 |
176 |
177 |
178 |
179 |
180 |

What message was sent to you?

181 |
182 |
183 |

Include details like name of user, platform, etc.

184 |
185 |
186 | 187 | 188 |
189 |
190 |
191 | 194 |
195 |
196 |
197 |
198 |
199 |

Where did you find the address?

200 |
201 |
202 |
203 |
204 | 205 |
206 |
207 |
208 | 211 | 214 |
215 |
216 |
217 |
218 |
219 |

Do you want to report a domain or an address?

220 |
221 |
222 |
223 | 226 | 227 | 230 | 231 | 234 |
235 |
236 |
237 |
238 |
239 |

What malicious domain would you like to report?

240 |
241 |
242 |
243 |
244 |
245 | Domain: 246 |
247 | 248 |
249 |
250 |
251 | 254 | 257 |
258 |
259 |
260 |
261 |
262 |

What malicious address would you like to report?

263 |
264 |
265 |
266 |
267 |
268 | Address: 269 |
270 | 271 |
272 |
273 |
274 | 277 | 280 |
281 |
282 |
283 |
284 |
285 |

What would you like to report?

286 |
287 |
288 |
289 |
290 | 291 |
292 |
293 |
294 | 297 | 300 |
301 |
302 |
303 |
304 |
305 |

Please specify a reason for your report

306 |
307 |
308 |
309 |
310 | 311 |
312 |
313 |
314 | 317 | 320 |
321 |
322 |
323 |

Captcha

324 |
325 |
326 |
327 |
328 |
329 |
330 |
331 |
332 |
333 |
334 |
Sending
335 |
336 |
337 |
338 |

Thanks for your report

339 |

Your report has been sent. In the meanwhile, you can learn how to protect yourself and others in the future:

340 |
341 |
342 |
343 |

- Read Protecting Yourself and Your Funds by MyCrypto

344 |
345 |
346 | 347 |
348 |
349 | 350 |
351 | 354 |
355 | 356 |
357 |
358 | 359 |
360 |
361 | 362 |
363 |
364 |
365 | 366 | 367 | 368 | -------------------------------------------------------------------------------- /_layouts/reportaddress.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 |
5 |
6 |

What malicious address would you like to report?

7 |
8 |
9 |
10 |
11 |
12 | Address: 13 |
14 | 15 |
16 |
17 |
18 | 21 |
22 |
23 |
24 |
25 |
26 |

Please specify a reason for your report

27 |
28 |
29 |
30 |
31 | 32 |
33 |
34 |
35 | 38 |
39 |
40 |
41 |

Captcha

42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
Sending
53 |
54 |
55 |
56 |

Thanks for your report

57 |

Your report has been sent. In the meanwhile, you can learn how to protect yourself and others in the future:

58 |
59 |
60 |
61 |

- Read Protecting Yourself and Your Funds by MyCrypto

62 |
63 |
64 | 65 |
66 |
67 | 68 |
69 | 72 |
73 | 74 |
75 |
76 | 77 |
78 |
79 | 80 |
81 |
82 |
83 | 84 | 85 | 86 | -------------------------------------------------------------------------------- /_layouts/reportdomain.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 |
5 |
6 |

What malicious domain would you like to report?

7 |
8 |
9 |
10 |
11 |
12 | Domain: 13 |
14 | 15 |
16 |
17 |
18 | 21 |
22 |
23 |
24 |
25 |
26 |

Please specify a reason for your report

27 |
28 |
29 |
30 |
31 | 32 |
33 |
34 |
35 | 38 |
39 |
40 |
41 |

Captcha

42 |
43 |
44 |
45 |
46 |
47 |
48 |
49 |
50 |
51 |
52 |
Sending
53 |
54 |
55 |
56 |

Thanks for your report

57 |

Your report has been sent. In the meanwhile, you can learn how to protect yourself and others in the future:

58 |
59 |
60 |
61 |

- Read Protecting Yourself and Your Funds by MyCrypto

62 |
63 |
64 | 65 |
66 |
67 | 68 |
69 | 72 |
73 | 74 |
75 |
76 | 77 |
78 |
79 | 80 |
81 |
82 |
83 | 84 | 85 | 86 | -------------------------------------------------------------------------------- /_layouts/rss.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | EtherScamDB 5 | https://etherscamdb.info 6 | An open-source database for all Ethereum and ERC20 scams 7 | {{ rss.entries }} 8 | 9 | -------------------------------------------------------------------------------- /_layouts/scam.html: -------------------------------------------------------------------------------- 1 | 2 | 20 | 41 |
42 |

{{ scam.name }}

43 |
44 | {{ scam.actions }} 45 |
46 |
47 | {{ scam.url }} 48 | {{ scam.category }} 49 | {{ scam.description }} 50 | {{ scam.status }} 51 | {{ scam.ip }} 52 | {{ scam.metamask }} 53 | {{ scam.googlethreat }} 54 | {{ scam.nameservers }} 55 | {{ scam.addresses }} 56 | {{ scam.screenshot }}

57 | 58 |
59 | 60 | {{ page.built }} 61 | 72 | 73 | -------------------------------------------------------------------------------- /_layouts/scamdomain.html: -------------------------------------------------------------------------------- 1 | 2 | 20 | 41 |
42 |

{{ scam.name }}

43 |
44 | {{ scam.actions }} 45 |
46 |
47 | 48 |
49 |
50 | {{ scam.notification }} 51 | {{ scam.url }} 52 | {{ scam.category }} 53 | {{ scam.description }} 54 | {{ scam.status }} 55 | {{ scam.ip }} 56 | 57 |
58 | 59 | {{ scam.metamask }} 60 | {{ scam.googlethreat }} 61 | {{ scam.virustotal }} 62 | {{ scam.phishtank }} 63 | {{ scam.urlscan }}
64 | {{ scam.nameservers }}
65 | {{ scam.addresses }}
66 |
67 |
68 |
69 | {{ scam.tip }} 70 |
71 |
72 |
73 | 74 | {{ scam.urlscreenshot }} 75 | 76 |

77 | 78 |
79 | 80 | {{ page.built }} 81 | 92 | 93 | 94 | -------------------------------------------------------------------------------- /_layouts/scams.html: -------------------------------------------------------------------------------- 1 | 2 |
3 |
4 |
5 |
6 | {{ scams.total }} 7 |
8 |
9 | Total scams 10 |
11 |
12 |
13 |
14 |
15 |
16 | {{ scams.active }} 17 |
18 |
19 | Active scams 20 |
21 |
22 |
23 |
24 |
25 |
26 | {{ addresses.total }} 27 |
28 |
29 | Addresses registered 30 |
31 |
32 |
33 |
34 |
35 |
36 | {{ scams.inactive }} 37 |
38 |
39 | Inactive scams 40 |
41 |
42 |
43 |
44 |

Scams

45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | {{ scams.table }} 55 | 56 |
CategorySubcategoryStatusTitleInfo
57 | 58 | {{ scams.pagination }} 59 | -------------------------------------------------------------------------------- /_layouts/search.html: -------------------------------------------------------------------------------- 1 | 2 |

Check URL / IP / ETH Address

3 |
4 | 5 |
6 |
7 | Verified 8 |
9 |

This domain is a verified domain. You can trust the contents.

10 |
11 |
12 |
13 | 14 |
15 |
16 | Blocked 17 |
18 |

This domain was put on the blacklist.

19 |
20 |
21 |
22 | 23 |
24 |
25 | Neutral 26 |
27 |

This domain wasn't recognized as a malicious domain, nor as verified. Be careful!

28 |
29 |
30 |

Enter a URL, IP address, or ETH address to check whether you can trust it or not.

31 |
32 | 33 | 34 |
35 |

Trusted domains

36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | {{ trusted.table }} 45 | 46 |
NameURL
47 | 48 | -------------------------------------------------------------------------------- /_layouts/verifieddomain.html: -------------------------------------------------------------------------------- 1 | 2 |
3 |

{{ verified.name }}

4 |
5 | {{ verified.notification }} 6 | {{ verified.url }} 7 | {{ verified.description }}
8 | {{ verified.googlethreat }} 9 | {{ verified.virustotal }} 10 | {{ verified.phishtank }} 11 | {{ verified.urlscan }}
12 | {{ verified.addresses }}
13 | {{ verified.urlscreenshot }} 14 | 15 |
16 | 17 | {{ page.built }} 18 | 29 | 30 | 31 | -------------------------------------------------------------------------------- /_static/css/404.css: -------------------------------------------------------------------------------- 1 | .title { 2 | text-align: center; 3 | font-size: 60px; 4 | padding-top: 5%; 5 | } 6 | 7 | .message { 8 | text-align: center; 9 | padding-top: 5%; 10 | font-size: 30pt; 11 | } 12 | 13 | .return { 14 | text-align: center; 15 | padding-top: 2.5%; 16 | font-size: 20pt; 17 | } -------------------------------------------------------------------------------- /_static/css/address.css: -------------------------------------------------------------------------------- 1 | .ui.bulleted.list { 2 | margin-top: 4px; 3 | margin-bottom: 0; 4 | } -------------------------------------------------------------------------------- /_static/css/api.css: -------------------------------------------------------------------------------- 1 | .ui.long.segment { 2 | height: 200px; 3 | } 4 | pre { 5 | margin: 0; 6 | } -------------------------------------------------------------------------------- /_static/css/general.css: -------------------------------------------------------------------------------- 1 | .ui.body.container { 2 | padding-top: 7em; 3 | min-height: 100%; 4 | padding-bottom: 7%; 5 | } 6 | 7 | .ui.fixed.inverted.menu { 8 | height: 55px; 9 | } 10 | 11 | .item { 12 | padding-top: .2em; 13 | margin-left: .1em; 14 | } 15 | 16 | .ui.footer { 17 | position: absolute; 18 | left: 0; 19 | right: 0; 20 | height: 45px; 21 | margin-top: -45px !important; 22 | text-align: center; 23 | width: 100%; 24 | } 25 | 26 | .footer-item-container { 27 | display: inline-flex; 28 | } 29 | 30 | #footer-item-img { 31 | height: 75px; 32 | width: 178px; 33 | } 34 | 35 | .footer-cont:nth-child(odd) > p { 36 | padding-top: 1em; 37 | margin-left: 2em; 38 | margin-right: 2em; 39 | } 40 | 41 | .inlinef { 42 | display:inline-flex; 43 | } 44 | 45 | .green-text { 46 | color: green; 47 | } 48 | .red-text { 49 | color: red; 50 | } 51 | .screenshot-img { 52 | width: 100%; 53 | height: 80%; 54 | } -------------------------------------------------------------------------------- /_static/css/home.css: -------------------------------------------------------------------------------- 1 | h2 { 2 | margin-bottom: 0 !important; 3 | padding-bottom: .5em !important; 4 | } 5 | 6 | .centered.column { 7 | padding-bottom: 4%; 8 | text-align: center !important; 9 | } 10 | 11 | #items { 12 | margin-top: 8% !important; 13 | } 14 | 15 | .title { 16 | text-align: center; 17 | padding-top: 5%; 18 | font-size: 50px; 19 | } 20 | 21 | #github,#scams,#report,#donate { 22 | cursor: pointer; 23 | } 24 | -------------------------------------------------------------------------------- /_static/css/neutraldomain.css: -------------------------------------------------------------------------------- 1 | .ui.bulleted.list { 2 | margin-top: 4px; 3 | margin-bottom: 0; 4 | } 5 | 6 | .ui.grid { 7 | margin-bottom: 0px; 8 | } 9 | 10 | .ui.input { 11 | width: 100%; 12 | } 13 | 14 | #actions { 15 | text-align: right; 16 | } 17 | 18 | .class_offline { 19 | color: green; 20 | } 21 | 22 | .class_active { 23 | color: red; 24 | } 25 | 26 | .class_suspended { 27 | color: orange; 28 | } 29 | 30 | .class_inactive { 31 | color: orange; 32 | } 33 | 34 | #scam-screenshot { 35 | filter: gray; 36 | -webkit-filter: grayscale(1); 37 | filter: grayscale(1); 38 | width: 100%; 39 | height: 100%; 40 | border: 2px solid #000; 41 | } 42 | #scam-screenshot:hover { 43 | cursor: -moz-zoom-in; 44 | cursor: -webkit-zoom-in; 45 | cursor: zoom-in; 46 | -webkit-filter: grayscale(0); 47 | filter: none; 48 | } 49 | 50 | .built { 51 | font-size: 8pt; 52 | font-style: italic; 53 | margin-top: 7%; 54 | } 55 | -------------------------------------------------------------------------------- /_static/css/redirect.css: -------------------------------------------------------------------------------- 1 | body,.segment { 2 | background-color: rgb(178, 30, 30) !important; 3 | color: white; 4 | } 5 | 6 | .segment { 7 | border: none !important; 8 | box-shadow: none !important; 9 | } 10 | 11 | h1,h3,h4 { 12 | text-align: center !important; 13 | } 14 | 15 | button { 16 | margin-top: 8% !important; 17 | } -------------------------------------------------------------------------------- /_static/css/report.css: -------------------------------------------------------------------------------- 1 | #faq { 2 | font-size: 15px; 3 | } 4 | 5 | .ui.form { 6 | margin-top: 1%; 7 | } 8 | 9 | i.send.icon { 10 | margin-left: 5px !important; 11 | } 12 | 13 | .ui.input { 14 | width: 40%; 15 | } 16 | 17 | .ui.black.label { 18 | background-color: rgba(0,0,0,0.8) !important; 19 | } 20 | 21 | .ui.long.input { 22 | width: 48%; 23 | } 24 | 25 | h2,h3 { 26 | margin-bottom: .5%; 27 | text-align: center; 28 | margin-top: 6% !important; 29 | } 30 | 31 | h3.link { 32 | margin-top: .5% !important; 33 | } 34 | 35 | .ending { 36 | text-align: center; 37 | margin-top: 6% !important; 38 | color: #016936; 39 | } 40 | 41 | .report { 42 | margin-top: 3%; 43 | text-align: center; 44 | } 45 | 46 | .question { 47 | margin-top: 7% !important; 48 | text-align: center; 49 | } 50 | 51 | div.question { 52 | display: inline-block; 53 | } 54 | 55 | .question2 { 56 | margin-top: 3% !important; 57 | text-align: center; 58 | } 59 | 60 | .actions { 61 | text-align: center; 62 | margin-top: 10%; 63 | } 64 | 65 | .addr { 66 | margin-top: 2%; 67 | } 68 | 69 | .spacing { 70 | margin-left: 1% !important; 71 | margin-right: 1% !important; 72 | } 73 | 74 | .question2a,.question2b,.question3,.question4a,.question4b,.question5,.question6,.question7a,.question7b,.question7c,.question8,.question9a,.question9b,.question9c,.question10,.loading,.captcha,.end { 75 | display: none; 76 | } 77 | -------------------------------------------------------------------------------- /_static/css/reportaddress.css: -------------------------------------------------------------------------------- 1 | .ui.form { 2 | margin-top: 1%; 3 | } 4 | 5 | i.send.icon { 6 | margin-left: 5px !important; 7 | } 8 | 9 | .ui.input { 10 | width: 40%; 11 | } 12 | 13 | .ui.black.label { 14 | background-color: rgba(0,0,0,0.8) !important; 15 | } 16 | 17 | .ui.long.input { 18 | width: 48%; 19 | } 20 | 21 | h2,h3 { 22 | margin-bottom: .5%; 23 | text-align: center; 24 | margin-top: 6% !important; 25 | } 26 | 27 | h3.link { 28 | margin-top: .5% !important; 29 | } 30 | 31 | .ending { 32 | text-align: center; 33 | margin-top: 6% !important; 34 | color: #016936; 35 | } 36 | 37 | .question { 38 | margin-top: 7% !important; 39 | text-align: center; 40 | } 41 | 42 | .question2 { 43 | margin-top: 3% !important; 44 | text-align: center; 45 | } 46 | 47 | .actions { 48 | text-align: center; 49 | margin-top: 10%; 50 | } 51 | 52 | .addr { 53 | margin-top: 2%; 54 | } 55 | 56 | .spacing { 57 | margin-left: 1% !important; 58 | margin-right: 1% !important; 59 | } 60 | 61 | .question10,.loading,.captcha,.end { 62 | display: none; 63 | } 64 | -------------------------------------------------------------------------------- /_static/css/reportdomain.css: -------------------------------------------------------------------------------- 1 | .ui.form { 2 | margin-top: 1%; 3 | } 4 | 5 | i.send.icon { 6 | margin-left: 5px !important; 7 | } 8 | 9 | .ui.input { 10 | width: 40%; 11 | } 12 | 13 | .ui.black.label { 14 | background-color: rgba(0,0,0,0.8) !important; 15 | } 16 | 17 | h2,h3 { 18 | margin-bottom: .5%; 19 | text-align: center; 20 | margin-top: 6% !important; 21 | } 22 | 23 | h3.link { 24 | margin-top: .5% !important; 25 | } 26 | 27 | .ending { 28 | text-align: center; 29 | margin-top: 6% !important; 30 | color: #016936; 31 | } 32 | 33 | .question { 34 | margin-top: 7% !important; 35 | text-align: center; 36 | } 37 | 38 | .question2 { 39 | margin-top: 3% !important; 40 | text-align: center; 41 | } 42 | 43 | .actions { 44 | text-align: center; 45 | margin-top: 10%; 46 | } 47 | 48 | .spacing { 49 | margin-left: 1% !important; 50 | margin-right: 1% !important; 51 | } 52 | 53 | .question10,.loading,.captcha,.end { 54 | display: none; 55 | } 56 | -------------------------------------------------------------------------------- /_static/css/scam.css: -------------------------------------------------------------------------------- 1 | .ui.bulleted.list { 2 | margin-top: 4px; 3 | margin-bottom: 0; 4 | } 5 | 6 | .ui.grid { 7 | margin-bottom: 0px; 8 | } 9 | 10 | .ui.input { 11 | width: 100%; 12 | } 13 | 14 | #actions { 15 | text-align: right; 16 | } 17 | 18 | .class_offline { 19 | color: green; 20 | } 21 | 22 | .class_active { 23 | color: red; 24 | } 25 | 26 | .class_suspended { 27 | color: orange; 28 | } 29 | 30 | .class_inactive { 31 | color: orange; 32 | } 33 | 34 | #scam-screenshot { 35 | filter: gray; 36 | -webkit-filter: grayscale(1); 37 | filter: grayscale(1); 38 | width: 100%; 39 | height: 100%; 40 | border: 2px solid #000; 41 | } 42 | #scam-screenshot:hover { 43 | cursor: -moz-zoom-in; 44 | cursor: -webkit-zoom-in; 45 | cursor: zoom-in; 46 | -webkit-filter: grayscale(0); 47 | filter: none; 48 | } 49 | 50 | .built { 51 | font-size: 8pt; 52 | font-style: italic; 53 | margin-top: 7%; 54 | } 55 | 56 | .tip { 57 | border: 1px solid #000; 58 | background-color: #90EE90; 59 | border-radius: 3px; 60 | } 61 | 62 | .ui.green.message { 63 | color: #189826; 64 | font-size: 14px; 65 | } 66 | .ui.red.message { 67 | font-size: 14px; 68 | } 69 | -------------------------------------------------------------------------------- /_static/css/scams.css: -------------------------------------------------------------------------------- 1 | .center { 2 | text-align: center !important; 3 | } 4 | 5 | #info { 6 | width: 10px; 7 | } 8 | 9 | .activ { 10 | color: green; 11 | font-weight: bold; 12 | } 13 | 14 | .offline { 15 | color: red; 16 | font-weight: bold; 17 | } 18 | 19 | .suspended { 20 | color: orange; 21 | font-weight: bold; 22 | } 23 | 24 | .unknown { 25 | color: gray; 26 | font-weight: bold; 27 | } 28 | 29 | .subcategoryicon { 30 | vertical-align: middle; 31 | margin-right: 6px; 32 | width: 16px; 33 | height: 16px; 34 | } -------------------------------------------------------------------------------- /_static/css/search.css: -------------------------------------------------------------------------------- 1 | .project { 2 | margin-right: 5px; 3 | width: 16px; 4 | height: 16px; 5 | vertical-align: middle; 6 | } 7 | .ui.action.input { 8 | width: 40%; 9 | } 10 | .ui.message { 11 | padding: 3em 1.5em !important; 12 | } 13 | .chevron.right.small.icon { 14 | margin-left: 3px; 15 | } 16 | #details { 17 | margin-left: 5px; 18 | } 19 | #verified { 20 | background-color: #016936 !important; 21 | color: white !important; 22 | display: none; 23 | } 24 | #blocked { 25 | background-color: #B03060 !important; 26 | color: white !important; 27 | display: none; 28 | } 29 | #neutral { 30 | background-color: #c86541 !important; 31 | color: white !important; 32 | display: none; 33 | } -------------------------------------------------------------------------------- /_static/css/verified.css: -------------------------------------------------------------------------------- 1 | .ui.bulleted.list { 2 | margin-top: 4px; 3 | margin-bottom: 0; 4 | } 5 | 6 | .ui.grid { 7 | margin-bottom: 0px; 8 | } 9 | 10 | .ui.input { 11 | width: 100%; 12 | } 13 | 14 | #actions { 15 | text-align: right; 16 | } 17 | 18 | .class_offline { 19 | color: green; 20 | } 21 | 22 | .class_active { 23 | color: red; 24 | } 25 | 26 | .class_suspended { 27 | color: orange; 28 | } 29 | 30 | .class_inactive { 31 | color: orange; 32 | } 33 | 34 | #scam-screenshot { 35 | filter: gray; 36 | -webkit-filter: grayscale(1); 37 | filter: grayscale(1); 38 | width: 100%; 39 | height: 100%; 40 | border: 2px solid #000; 41 | } 42 | #scam-screenshot:hover { 43 | cursor: -moz-zoom-in; 44 | cursor: -webkit-zoom-in; 45 | cursor: zoom-in; 46 | -webkit-filter: grayscale(0); 47 | filter: none; 48 | } 49 | 50 | .built { 51 | font-size: 8pt; 52 | font-style: italic; 53 | margin-top: 7%; 54 | } 55 | -------------------------------------------------------------------------------- /_static/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/favicon.ico -------------------------------------------------------------------------------- /_static/img/adhive.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/adhive.png -------------------------------------------------------------------------------- /_static/img/ankr.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/ankr.png -------------------------------------------------------------------------------- /_static/img/aragon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/aragon.png -------------------------------------------------------------------------------- /_static/img/bibox.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/bibox.png -------------------------------------------------------------------------------- /_static/img/binance.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/binance.png -------------------------------------------------------------------------------- /_static/img/bitfinex.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/bitfinex.png -------------------------------------------------------------------------------- /_static/img/bittrex.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/bittrex.png -------------------------------------------------------------------------------- /_static/img/blockchain.info.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/blockchain.info.png -------------------------------------------------------------------------------- /_static/img/changelly.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/changelly.png -------------------------------------------------------------------------------- /_static/img/classicetherwallet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/classicetherwallet.png -------------------------------------------------------------------------------- /_static/img/coinbase.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/coinbase.png -------------------------------------------------------------------------------- /_static/img/coindash.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/coindash.png -------------------------------------------------------------------------------- /_static/img/decentraland.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/decentraland.png -------------------------------------------------------------------------------- /_static/img/district0x.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/district0x.png -------------------------------------------------------------------------------- /_static/img/dmarket.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/dmarket.png -------------------------------------------------------------------------------- /_static/img/electrum.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/electrum.png -------------------------------------------------------------------------------- /_static/img/enigma.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/enigma.png -------------------------------------------------------------------------------- /_static/img/eos.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/eos.png -------------------------------------------------------------------------------- /_static/img/etherchain.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/etherchain.png -------------------------------------------------------------------------------- /_static/img/etherdelta.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/etherdelta.png -------------------------------------------------------------------------------- /_static/img/ethereum.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/ethereum.png -------------------------------------------------------------------------------- /_static/img/etheroll.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/etheroll.png -------------------------------------------------------------------------------- /_static/img/etherscan.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/etherscan.png -------------------------------------------------------------------------------- /_static/img/exchange.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/exchange.png -------------------------------------------------------------------------------- /_static/img/fantom.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/fantom.png -------------------------------------------------------------------------------- /_static/img/fintrux.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/fintrux.png -------------------------------------------------------------------------------- /_static/img/forkdelta.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/forkdelta.png -------------------------------------------------------------------------------- /_static/img/golem.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/golem.png -------------------------------------------------------------------------------- /_static/img/gonetwork.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/gonetwork.png -------------------------------------------------------------------------------- /_static/img/hederahashgraph.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/hederahashgraph.png -------------------------------------------------------------------------------- /_static/img/helbiz.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/helbiz.png -------------------------------------------------------------------------------- /_static/img/hero.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/hero.png -------------------------------------------------------------------------------- /_static/img/hitbtc.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/hitbtc.png -------------------------------------------------------------------------------- /_static/img/icon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/icon.png -------------------------------------------------------------------------------- /_static/img/idex.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/idex.png -------------------------------------------------------------------------------- /_static/img/indorse.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/indorse.png -------------------------------------------------------------------------------- /_static/img/kickico.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/kickico.png -------------------------------------------------------------------------------- /_static/img/kin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/kin.png -------------------------------------------------------------------------------- /_static/img/kraken.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/kraken.png -------------------------------------------------------------------------------- /_static/img/kucoin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/kucoin.png -------------------------------------------------------------------------------- /_static/img/ledgerwallet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/ledgerwallet.png -------------------------------------------------------------------------------- /_static/img/litecoin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/litecoin.png -------------------------------------------------------------------------------- /_static/img/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/logo.png -------------------------------------------------------------------------------- /_static/img/luno.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/luno.png -------------------------------------------------------------------------------- /_static/img/metamask.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/metamask.png -------------------------------------------------------------------------------- /_static/img/monero.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/monero.png -------------------------------------------------------------------------------- /_static/img/monetha.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/monetha.png -------------------------------------------------------------------------------- /_static/img/mycrypto.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/mycrypto.png -------------------------------------------------------------------------------- /_static/img/myetherwallet.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/myetherwallet.png -------------------------------------------------------------------------------- /_static/img/mymonero.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/mymonero.png -------------------------------------------------------------------------------- /_static/img/neo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/neo.png -------------------------------------------------------------------------------- /_static/img/numerai.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/numerai.png -------------------------------------------------------------------------------- /_static/img/odyssey.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/odyssey.png -------------------------------------------------------------------------------- /_static/img/omisego.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/omisego.png -------------------------------------------------------------------------------- /_static/img/orchid.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/orchid.png -------------------------------------------------------------------------------- /_static/img/origin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/origin.png -------------------------------------------------------------------------------- /_static/img/poloniex.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/poloniex.png -------------------------------------------------------------------------------- /_static/img/powered-by-mycrypto.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/powered-by-mycrypto.png -------------------------------------------------------------------------------- /_static/img/quarkchain.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/quarkchain.png -------------------------------------------------------------------------------- /_static/img/refereum.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/refereum.png -------------------------------------------------------------------------------- /_static/img/ripple.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/ripple.png -------------------------------------------------------------------------------- /_static/img/shapeshift.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/shapeshift.png -------------------------------------------------------------------------------- /_static/img/sparkster.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/sparkster.png -------------------------------------------------------------------------------- /_static/img/starbase.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/starbase.png -------------------------------------------------------------------------------- /_static/img/status.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/status.png -------------------------------------------------------------------------------- /_static/img/stellar.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/stellar.png -------------------------------------------------------------------------------- /_static/img/substratum.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/substratum.png -------------------------------------------------------------------------------- /_static/img/switcheo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/switcheo.png -------------------------------------------------------------------------------- /_static/img/telegram.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/telegram.png -------------------------------------------------------------------------------- /_static/img/tenx.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/tenx.png -------------------------------------------------------------------------------- /_static/img/texacon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/texacon.png -------------------------------------------------------------------------------- /_static/img/tron.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/tron.png -------------------------------------------------------------------------------- /_static/img/trust-trading.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/trust-trading.png -------------------------------------------------------------------------------- /_static/img/ubiq.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/ubiq.png -------------------------------------------------------------------------------- /_static/img/unocoin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/unocoin.png -------------------------------------------------------------------------------- /_static/img/vechain.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/vechain.png -------------------------------------------------------------------------------- /_static/img/yobit.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/yobit.png -------------------------------------------------------------------------------- /_static/img/zcash.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/zcash.png -------------------------------------------------------------------------------- /_static/img/zeex.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/img/zeex.png -------------------------------------------------------------------------------- /_static/js/address.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $.getJSON("https://api.etherscan.io/api?module=account&action=balance&tag=latest&address=" + $("h1").html(), function(data) { 3 | $("#balance").html((Math.round(data.result / (10e17) * 100000) / 100000) + ' ETH'); 4 | $.getJSON("https://api.coinmarketcap.com/v1/ticker/ethereum/?convert=USD", function(val) { 5 | $("#value").html((Math.round((data.result / (10e17)) * val[0].price_usd * 100) / 100).toString().replace(/\B(?=(\d{3})+(?!\d))/g, ",") + "$ (" + Math.round(val[0].price_usd * 100) / 100 + " USD/ETH)"); 6 | }); 7 | }); 8 | }); -------------------------------------------------------------------------------- /_static/js/api.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $.get("/api/check/0xDaa29859836D97C810c7F9D350D4A1B3E8CafC9a",function(data) { 3 | data = JSON.stringify(JSON.parse(data), null, 2); 4 | $("#check_loader").remove(); 5 | $("#check_segment").css("overflow","scroll"); 6 | $(".check_response").html(data); 7 | }); 8 | $.get("/api/scams/",function(data) { 9 | data = JSON.stringify(JSON.parse(data), null, 2); 10 | $("#scams_loader").remove(); 11 | $("#scams_segment").css("overflow","scroll"); 12 | $(".scams_response").html(data); 13 | }); 14 | $.get("/api/addresses/",function(data) { 15 | data = JSON.stringify(JSON.parse(data), null, 2); 16 | $("#addresses_loader").remove(); 17 | $("#addresses_segment").css("overflow","scroll"); 18 | $(".addresses_response").html(data); 19 | }); 20 | $.get("/api/ips/",function(data) { 21 | data = JSON.stringify(JSON.parse(data), null, 2); 22 | $("#ips_loader").remove(); 23 | $("#ips_segment").css("overflow","scroll"); 24 | $(".ips_response").html(data); 25 | }); 26 | $.get("/api/verified/",function(data) { 27 | data = JSON.stringify(JSON.parse(data), null, 2); 28 | $("#verified_loader").remove(); 29 | $("#verified_segment").css("overflow","scroll"); 30 | $(".verified_response").html(data); 31 | }); 32 | $.get("/api/blacklist/",function(data) { 33 | data = JSON.stringify(JSON.parse(data), null, 2); 34 | $("#blacklist_loader").remove(); 35 | $("#blacklist_segment").css("overflow","scroll"); 36 | $(".blacklist_response").html(data); 37 | }); 38 | $.get("/api/whitelist/",function(data) { 39 | data = JSON.stringify(JSON.parse(data), null, 2); 40 | $("#whitelist_loader").remove(); 41 | $("#whitelist_segment").css("overflow","scroll"); 42 | $(".whitelist_response").html(data); 43 | }); 44 | $.get("/api/inactives/",function(data) { 45 | data = JSON.stringify(JSON.parse(data), null, 2); 46 | $("#inactives_loader").remove(); 47 | $("#inactives_segment").css("overflow","scroll"); 48 | $(".inactives_response").html(data); 49 | }); 50 | $.get("/api/actives/",function(data) { 51 | data = JSON.stringify(JSON.parse(data), null, 2); 52 | $("#actives_loader").remove(); 53 | $("#actives_segment").css("overflow","scroll"); 54 | $(".actives_response").html(data); 55 | }); 56 | $.get("/api/abusereport/changellyli.com",function(data) { 57 | data = JSON.stringify(JSON.parse(data), null, 2); 58 | $("#abusereport_loader").remove(); 59 | $("#abusereport_segment").css("overflow","scroll"); 60 | $(".abusereport_response").html(data); 61 | }); 62 | }); 63 | -------------------------------------------------------------------------------- /_static/js/home.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("#github").click(function() { 3 | window.open('https://github.com/MrLuit/EtherScamDB'); 4 | }); 5 | $("#scams").click(function() { 6 | window.open('/scams'); 7 | }); 8 | $("#report").click(function() { 9 | window.open('/report'); 10 | }); 11 | $("#donate").click(function() { 12 | window.open('https://etherscan.io/address/etherscamdb.eth'); 13 | }); 14 | }); -------------------------------------------------------------------------------- /_static/js/ip.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $.getJSON("https://freegeoip.net/json/" + $("h1").html(), function(data) { 3 | flag = ''; 4 | $("#location").html('' + flag + data.country_name + ''); 5 | $("#map").html(''); 6 | }); 7 | setTimeout(function() { 8 | if($("#location").html() == "loading...") { 9 | $("#location").html("loading... (This seems to be taking a long time, adblock might be blocking the HTTP request)"); 10 | } 11 | },2000); 12 | }); -------------------------------------------------------------------------------- /_static/js/neutraldomain.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("#shr").val(location.href); 3 | $("#gen").click(function() { 4 | $('#abusemodal').modal('show'); 5 | }); 6 | $("#history").click(function() { 7 | $('#historymodal').modal('show'); 8 | }); 9 | $("#share").click(function() { 10 | $('#sharemodal').modal('show'); 11 | }); 12 | }); 13 | 14 | function copyshr() { 15 | document.getElementById("shr").select(); 16 | document.execCommand("copy"); 17 | } 18 | 19 | function copyabuse() { 20 | document.getElementById("abuse").select(); 21 | document.execCommand("copy"); 22 | } -------------------------------------------------------------------------------- /_static/js/redirect.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("button").click(function() { 3 | window.location = $("#domain").html(); 4 | }); 5 | }); -------------------------------------------------------------------------------- /_static/js/report.js: -------------------------------------------------------------------------------- 1 | var reportType; 2 | var args = {}; 3 | 4 | function finish() { 5 | $(".captcha").fadeOut('', function() { 6 | $(".loading").fadeIn('', function() { 7 | $.post("https://lu1t.nl/report.php", { 8 | reportType: reportType, 9 | args: args 10 | }).done(function(data) { 11 | $(".loading").fadeOut('', function() { 12 | $(".end").fadeIn(); 13 | }); 14 | }); 15 | }); 16 | }); 17 | } 18 | 19 | function reCaptchaVerify(response) { 20 | if (response === document.querySelector('.g-recaptcha-response').value) { 21 | args['captcha'] = response; 22 | finish(); 23 | } 24 | } 25 | 26 | function reCaptchaExpired() { 27 | /* do something when it expires */ 28 | } 29 | 30 | function reCaptchaCallback() { 31 | grecaptcha.render('g-recaptcha', { 32 | 'sitekey': '6LfTSysUAAAAAOIYE_x9aZuqBNRlzTRbHlMRpAiK', 33 | 'callback': reCaptchaVerify, 34 | 'expired-callback': reCaptchaExpired 35 | }); 36 | } 37 | 38 | window.addEventListener("load", function() { 39 | 40 | $("#1yes").click(function() { 41 | $(".question1").fadeOut('', function() { 42 | $(".question2a").fadeIn(); 43 | }); 44 | }); 45 | $("#1notsure").click(function() { 46 | $(".question1").fadeOut('', function() { 47 | $(".question2b").fadeIn(); 48 | }); 49 | }); 50 | $("#1no").click(function() { 51 | $(".question1").fadeOut('', function() { 52 | $(".question8").fadeIn(); 53 | }); 54 | }); 55 | 56 | $("#2senda").click(function() { 57 | args['from'] = $("#from").val(); 58 | args['to'] = $("#to").val(); 59 | $(".question2a").fadeOut('', function() { 60 | $(".question3").fadeIn(); 61 | }); 62 | }); 63 | $("#2sendb").click(function() { 64 | $(".question2b").fadeOut('', function() { 65 | $(".question1").fadeIn(); 66 | }); 67 | }); 68 | $("#2returna").click(function() { 69 | $(".question2a").fadeOut('', function() { 70 | $(".question1").fadeIn(); 71 | }); 72 | }); 73 | 74 | $("#3yes").click(function() { 75 | $(".question3").fadeOut('', function() { 76 | $(".question4a").fadeIn(); 77 | }); 78 | }); 79 | $("#3notsure").click(function() { 80 | $(".question3").fadeOut('', function() { 81 | $(".question4b").fadeIn(); 82 | }); 83 | }); 84 | $("#3notsure2").click(function() { 85 | $(".question3").fadeOut('', function() { 86 | $(".question4b").fadeIn(); 87 | }); 88 | }); 89 | $("#3no").click(function() { 90 | $(".question3").fadeOut('', function() { 91 | $(".question5").fadeIn(); 92 | }); 93 | }); 94 | 95 | $("#4senda").click(function() { 96 | reportType = 'urgentDomainReport'; 97 | args['domain'] = $("#privdomain").val(); 98 | $(".question4a").fadeOut('', function() { 99 | $(".captcha").fadeIn(); 100 | }); 101 | }); 102 | $("#4sendb").click(function() { 103 | $(".question4b").fadeOut('', function() { 104 | $(".question3").fadeIn(); 105 | }); 106 | }); 107 | $("#4returna").click(function() { 108 | $(".question4a").fadeOut('', function() { 109 | $(".question3").fadeIn(); 110 | }); 111 | }); 112 | 113 | $("#5yes").click(function() { 114 | $(".question5").fadeOut('', function() { 115 | $(".question6").fadeIn(); 116 | }); 117 | }); 118 | $("#5no").click(function() { 119 | $(".question5").fadeOut('', function() { 120 | $(".question8").fadeIn(); 121 | }); 122 | }); 123 | 124 | $("#6website").click(function() { 125 | $(".question6").fadeOut('', function() { 126 | $(".question7a").fadeIn(); 127 | }); 128 | }); 129 | $("#6message").click(function() { 130 | $(".question6").fadeOut('', function() { 131 | $(".question7b").fadeIn(); 132 | }); 133 | }); 134 | $("#6else").click(function() { 135 | $(".question6").fadeOut('', function() { 136 | $(".question7c").fadeIn(); 137 | }); 138 | }); 139 | 140 | $("#7senda").click(function() { 141 | reportType = 'urgentDomainAddressReport'; 142 | args['message'] = $("#addresswebsite").val(); 143 | $(".question7a").fadeOut('', function() { 144 | $(".captcha").fadeIn(); 145 | }); 146 | }); 147 | $("#7sendb").click(function() { 148 | reportType = 'urgentMessageAddressReport'; 149 | args['message'] = $("#addressmessage").val(); 150 | $(".question7b").fadeOut('', function() { 151 | $(".captcha").fadeIn(); 152 | }); 153 | }); 154 | $("7sendc").click(function() { 155 | reportType = 'urgentUniqueAddressReport'; 156 | args['message'] = $("#addressunique").val(); 157 | $(".question7c").fadeOut('', function() { 158 | $(".captcha").fadeIn(); 159 | }); 160 | }); 161 | $("#7returnc").click(function() { 162 | $(".question7c").fadeOut('', function() { 163 | $(".question6").fadeIn(); 164 | }); 165 | }); 166 | 167 | $("#8domain").click(function() { 168 | $(".question8").fadeOut('', function() { 169 | $(".question9a").fadeIn(); 170 | }); 171 | }); 172 | $("#8address").click(function() { 173 | $(".question8").fadeOut('', function() { 174 | $(".question9b").fadeIn(); 175 | }); 176 | }); 177 | $("#8else").click(function() { 178 | $(".question8").fadeOut('', function() { 179 | $(".question9c").fadeIn(); 180 | }); 181 | }); 182 | 183 | $("#9senda").click(function() { 184 | reportType = 'generalDomainReport'; 185 | args['domain'] = $("#gendomain").val(); 186 | $(".question9a").fadeOut('', function() { 187 | $(".question10").fadeIn(); 188 | }); 189 | }); 190 | $("#9sendb").click(function() { 191 | reportType = 'generalAddressReport'; 192 | args['address'] = $("#address").val(); 193 | $(".question9b").fadeOut('', function() { 194 | $(".question10").fadeIn(); 195 | }); 196 | }); 197 | $("#9sendc").click(function() { 198 | reportType = 'uniqueReport'; 199 | args['unique'] = $("#uniquerep").val(); 200 | $(".question9c").fadeOut('', function() { 201 | $(".captcha").fadeIn(); 202 | }); 203 | }); 204 | $("#9returna").click(function() { 205 | $(".question9a").fadeOut('', function() { 206 | $(".question8").fadeIn(); 207 | }); 208 | }); 209 | $("#9returnb").click(function() { 210 | $(".question9b").fadeOut('', function() { 211 | $(".question8").fadeIn(); 212 | }); 213 | }); 214 | $("#9returnc").click(function() { 215 | $(".question9c").fadeOut('', function() { 216 | $(".question8").fadeIn(); 217 | }); 218 | }); 219 | 220 | $("#10send").click(function() { 221 | args['reason'] = $("#reason").val(); 222 | $(".question10").fadeOut('', function() { 223 | $(".captcha").fadeIn(); 224 | }); 225 | }); 226 | $("#10return").click(function() { 227 | $(".question10").fadeOut('', function() { 228 | if (reportType == 'generalDomainReport') { 229 | $(".question9a").fadeIn(); 230 | } else if (reportType == 'generalAddressReport') { 231 | $(".question9b").fadeIn(); 232 | } 233 | }); 234 | }); 235 | 236 | }); -------------------------------------------------------------------------------- /_static/js/reportaddress.js: -------------------------------------------------------------------------------- 1 | var args = {}; 2 | 3 | function finish() { 4 | $(".captcha").fadeOut('', function() { 5 | $(".loading").fadeIn('', function() { 6 | $.post("https://lu1t.nl/report.php", { 7 | reportType: 'generalAddressReport', 8 | args: args 9 | }).done(function(data) { 10 | $(".loading").fadeOut('', function() { 11 | $(".end").fadeIn(); 12 | }); 13 | }); 14 | }); 15 | }); 16 | } 17 | 18 | function reCaptchaVerify(response) { 19 | if (response === document.querySelector('.g-recaptcha-response').value) { 20 | args['captcha'] = response; 21 | finish(); 22 | } 23 | } 24 | 25 | function reCaptchaExpired() { 26 | /* do something when it expires */ 27 | } 28 | 29 | function reCaptchaCallback() { 30 | grecaptcha.render('g-recaptcha', { 31 | 'sitekey': '6LfTSysUAAAAAOIYE_x9aZuqBNRlzTRbHlMRpAiK', 32 | 'callback': reCaptchaVerify, 33 | 'expired-callback': reCaptchaExpired 34 | }); 35 | } 36 | 37 | window.addEventListener("load", function() { 38 | var results = new RegExp('[\?&]([^&#]*)').exec(window.location.href); 39 | if (results != null) { 40 | $("#address").val(decodeURIComponent(results[1]).toString() || 0); 41 | } 42 | $("#9sendb").click(function() { 43 | args['address'] = $("#address").val(); 44 | $(".question9b").fadeOut('', function() { 45 | $(".question10").fadeIn(); 46 | }); 47 | }); 48 | 49 | $("#10send").click(function() { 50 | args['reason'] = $("#reason").val(); 51 | $(".question10").fadeOut('', function() { 52 | $(".captcha").fadeIn(); 53 | }); 54 | }); 55 | 56 | }); -------------------------------------------------------------------------------- /_static/js/reportdomain.js: -------------------------------------------------------------------------------- 1 | var reportType; 2 | var args = {}; 3 | 4 | function finish() { 5 | $(".captcha").fadeOut('', function() { 6 | $(".loading").fadeIn('', function() { 7 | $.post("https://lu1t.nl/report.php", { 8 | reportType: 'generalDomainReport', 9 | args: args 10 | }).done(function(data) { 11 | $(".loading").fadeOut('', function() { 12 | $(".end").fadeIn(); 13 | }); 14 | }); 15 | }); 16 | }); 17 | } 18 | 19 | function reCaptchaVerify(response) { 20 | if (response === document.querySelector('.g-recaptcha-response').value) { 21 | args['captcha'] = response; 22 | finish(); 23 | } 24 | } 25 | 26 | function reCaptchaExpired() { 27 | /* do something when it expires */ 28 | } 29 | 30 | function reCaptchaCallback() { 31 | grecaptcha.render('g-recaptcha', { 32 | 'sitekey': '6LfTSysUAAAAAOIYE_x9aZuqBNRlzTRbHlMRpAiK', 33 | 'callback': reCaptchaVerify, 34 | 'expired-callback': reCaptchaExpired 35 | }); 36 | } 37 | 38 | window.addEventListener("load", function() { 39 | var results = new RegExp('[\?&]([^&#]*)').exec(window.location.href); 40 | if (results != null) { 41 | $("#gendomain").val(decodeURIComponent(results[1]).toString() || 0); 42 | } 43 | $("#9senda").click(function() { 44 | args['domain'] = $("#gendomain").val(); 45 | $(".question9a").fadeOut('', function() { 46 | $(".question10").fadeIn(); 47 | }); 48 | }); 49 | 50 | $("#10send").click(function() { 51 | args['reason'] = $("#reason").val(); 52 | $(".question10").fadeOut('', function() { 53 | $(".captcha").fadeIn(); 54 | }); 55 | }); 56 | 57 | }); -------------------------------------------------------------------------------- /_static/js/scam.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("#shr").val(location.href); 3 | $("#gen").click(function() { 4 | $('#abusemodal').modal('show'); 5 | }); 6 | $("#history").click(function() { 7 | $('#historymodal').modal('show'); 8 | }); 9 | $("#share").click(function() { 10 | $('#sharemodal').modal('show'); 11 | }); 12 | }); 13 | 14 | function copyshr() { 15 | document.getElementById("shr").select(); 16 | document.execCommand("copy"); 17 | } 18 | 19 | function copyabuse() { 20 | document.getElementById("abuse").select(); 21 | document.execCommand("copy"); 22 | } -------------------------------------------------------------------------------- /_static/js/scams.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("th").click(function() { 3 | if($(this).html() != 'Info') { 4 | $("th").removeClass("sorted descending"); 5 | $(this).addClass("sorted descending"); 6 | path = window.location.pathname.split("/"); 7 | if(!(2 in path) || path[2] == '') { 8 | window.location = "/scams/1/" + $(this).html().toLowerCase(); 9 | } else { 10 | window.location = "/scams/" + path[2] + "/" + $(this).html().toLowerCase(); 11 | } 12 | } 13 | }); 14 | }); -------------------------------------------------------------------------------- /_static/js/search.js: -------------------------------------------------------------------------------- 1 | function hideEverything() { 2 | $("#verified").hide(); 3 | $("#blocked").hide(); 4 | $("#neutral").hide(); 5 | $("#helpmessage").hide(); 6 | } 7 | 8 | 9 | window.addEventListener("load", function() { 10 | $('.ui.button').click(function() { 11 | $.getJSON("/api/check/" + encodeURIComponent($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]), function(result) { 12 | if (result.result == 'verified') { 13 | hideEverything(); 14 | var strLink = ''; 15 | $("#verifiedmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' is a verified domain. You can trust the contents.'); 16 | strLink = 'Details on this domain '; 17 | $("#verifiedmessage").html($("#verifiedmessage").html() + ' ' + strLink); 18 | $("#verified").css('display', 'flex'); 19 | } else if (result.result == 'neutral') { 20 | hideEverything(); 21 | if(result.type == 'address'){ 22 | $("#neutralmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' wasn\'t a recognized ETH address.'); 23 | strLink = 'View this address on Etherscan '; 24 | $("#neutralmessage").html($("#neutralmessage").html() + ' ' + strLink); 25 | $("#neutral").css('display', 'flex'); 26 | } 27 | else{ 28 | $("#neutralmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' wasn\'t recognized as a malicious domain, nor as verified domain. Be careful!'); 29 | strLink = 'Details on this domain '; 30 | $("#neutralmessage").html($("#neutralmessage").html() + ' ' + strLink); 31 | $("#neutral").css('display', 'flex'); 32 | } 33 | } else if (result.result == 'whitelisted') { 34 | hideEverything(); 35 | var strLink = ''; 36 | $("#verifiedmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' is a whitelisted address. You can trust it.'); 37 | strLink = 'Details on this address '; 38 | $("#verifiedmessage").html($("#verifiedmessage").html() + ' ' + strLink); 39 | $("#verified").css('display', 'flex'); 40 | } else if (result.result == 'blocked') { 41 | hideEverything(); 42 | blocked = true; 43 | var strLink = ''; 44 | if (result.type == 'domain' && 'category' in result.entries[0]) { 45 | $("#blacklistmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' was put on the blacklist for ' + result.entries[0].category.toLowerCase() + '.'); 46 | strLink = 'Details on this domain '; 47 | } else if(result.type == 'address') { 48 | $("#blacklistmessage").html('' + encodeURI($("input").val().toLowerCase()) + ' was put on the blacklist and is associated with '+ result.entries.length +' blocked domain(s).'); 49 | strLink = 'Details on this address '; 50 | } else if(result.type == 'ip') { 51 | $("#blacklistmessage").html('' + encodeURI($("input").val().toLowerCase().replace('http://','').replace('https://','').replace('www.','').split(/[/?#]/)[0]) + ' was put on the blacklist and is associated with '+ result.entries.length +' blocked domain(s)'); 52 | strLink = 'Details on this domain '; 53 | } 54 | $("#blacklistmessage").html($("#blacklistmessage").html() + ' ' + strLink); 55 | $("#blocked").css('display', 'flex'); 56 | } 57 | }); 58 | }); 59 | }); 60 | -------------------------------------------------------------------------------- /_static/js/verified.js: -------------------------------------------------------------------------------- 1 | window.addEventListener("load", function() { 2 | $("#shr").val(location.href); 3 | $("#gen").click(function() { 4 | $('#abusemodal').modal('show'); 5 | }); 6 | $("#history").click(function() { 7 | $('#historymodal').modal('show'); 8 | }); 9 | $("#share").click(function() { 10 | $('#sharemodal').modal('show'); 11 | }); 12 | }); 13 | 14 | function copyshr() { 15 | document.getElementById("shr").select(); 16 | document.execCommand("copy"); 17 | } 18 | 19 | function copyabuse() { 20 | document.getElementById("abuse").select(); 21 | document.execCommand("copy"); 22 | } -------------------------------------------------------------------------------- /_static/logo/favicon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/logo/favicon.png -------------------------------------------------------------------------------- /_static/logo/favicon.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 6 | 7 | 8 | 10 | 12 | 13 | 14 | 16 | 17 | 18 | 19 | 20 | -------------------------------------------------------------------------------- /_static/logo/logotype-a.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 7 | 8 | 9 | 10 | 12 | 14 | 15 | 16 | 18 | 19 | 20 | 21 | 22 | 23 | 25 | 28 | 32 | 36 | 39 | 44 | 47 | 52 | 58 | 62 | 68 | 69 | 70 | 71 | 72 | -------------------------------------------------------------------------------- /_static/logo/logotype-b.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 7 | 8 | 9 | 10 | 11 | 14 | 18 | 22 | 25 | 30 | 33 | 38 | 44 | 48 | 54 | 55 | 56 | 57 | 58 | 60 | 62 | 63 | 64 | 66 | 68 | 69 | 70 | 71 | 72 | -------------------------------------------------------------------------------- /_static/logo/logotype-readme.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MrLuit/EtherScamDB/cb83df07a8570459f568c74eb9819b0aa92ec137/_static/logo/logotype-readme.png -------------------------------------------------------------------------------- /_utils/lookup.js: -------------------------------------------------------------------------------- 1 | const request = require('request') 2 | 3 | class weblookup { 4 | lookup (input) { 5 | return new Promise(function(resolve, reject) { 6 | var result = request(input, 7 | {timeout: 30*1000}, function(e, response, body) { 8 | if(e || !([200, 301, 302].includes(response.statusCode))) { 9 | resolve(e) 10 | } 11 | else if(!e && response.statusCode == 200){ 12 | resolve(JSON.parse(body)) 13 | } 14 | }); 15 | }); 16 | } 17 | } 18 | module.exports = weblookup 19 | -------------------------------------------------------------------------------- /_utils/webcheck.js: -------------------------------------------------------------------------------- 1 | const request = require('request') 2 | 3 | class web { 4 | lookup (input) { 5 | return new Promise(function(resolve, reject) { 6 | var result = request('https://urlscan.io/api/v1/search/?q=domain:' + encodeURIComponent(input),{timeout: 30*1000}, function(e, response, body) { 7 | if(e || !([200, 301, 302].includes(response.statusCode))) { 8 | resolve(e) 9 | } 10 | else if(!e && response.statusCode == 200){ 11 | resolve(JSON.parse(body)) 12 | } 13 | }); 14 | }); 15 | } 16 | } 17 | module.exports = web 18 | -------------------------------------------------------------------------------- /config.example.js: -------------------------------------------------------------------------------- 1 | module.exports = { 2 | "port": 8080, 3 | "cache_refreshing_interval": 1000 * 60 * 30, 4 | "Google_SafeBrowsing_API_Key": null, 5 | "Github_Hook_Secret": null, 6 | "VirusTotal_API_Key": null, 7 | "Urlscan_API_Key": null, 8 | "AbuseIPDB_API_Key": null, 9 | "repository": { 10 | author: "MrLuit", 11 | name: "EtherScamDB", 12 | branch: "master" 13 | }, 14 | "perform_dns_lookup": false 15 | }; 16 | -------------------------------------------------------------------------------- /package.json: -------------------------------------------------------------------------------- 1 | { 2 | "name": "etherscamdb", 3 | "version": "2.0.0", 4 | "main": "run.js", 5 | "license": "MIT", 6 | "scripts": { 7 | "start": "cross-env NODE_ENV=development DEBUG=* node run.js", 8 | "test": "mocha ./tests/validate_data.js" 9 | }, 10 | "repository": { 11 | "type": "git", 12 | "url": "git://github.com/MrLuit/EtherScamDB.git" 13 | }, 14 | "dependencies": { 15 | "body-parser": "^1.18.2", 16 | "cross-env": "^5.2.0", 17 | "dateformat": "^2.2.0", 18 | "debug": "^3.1.0", 19 | "download-file": "^0.1.5", 20 | "eth-phishing-detect": "^1.1.12", 21 | "express": "^4.16.3", 22 | "express-csp-header": "^2.3.1", 23 | "fs-extra": "^5.0.0", 24 | "helmet": "^3.21.1", 25 | "js-yaml": "^3.9.0", 26 | "request": "^2.87.0", 27 | "rimraf": "^2.6.2", 28 | "shuffle-array": "^1.0.1", 29 | "url": "^0.11.0" 30 | }, 31 | "devDependencies": { 32 | "mocha": "^5.2.0" 33 | } 34 | } 35 | -------------------------------------------------------------------------------- /run-locally.md: -------------------------------------------------------------------------------- 1 | ## EtherScamDB 2 | 3 | ### Requirements: 4 | 5 | * node js (working on v8.9.4) 6 | * npm (working on v5.6.0) 7 | * git 8 | 9 | ### Spin-Up Process: 10 | 11 | * `git clone https://github.com/mrluit/etherscamdb.git` - This will clone the project locally. 12 | * `cd etherscamdb` - Navigate into your newly-created project folder. 13 | * Rename the `config.example.js` file to `config.js` 14 | * Input API keys for abuseipdb, github, google safebrowsing, and urlscan. 15 | * Ensure the option `ping_domains` is set to `0` so you don’t contact any of the bad domains on your local machine. 16 | * `npm install` - This will install required dependencies 17 | * `npm update` - This will create and update a new `_cache/cache.json` file inside the project folder. 18 | * `npm run` - This will start the project running locally at `http://localhost:8080` 19 | 20 | ### Why should I run it myself? 21 | 22 | Running it yourself will mean you can have your own instance of EtherScamDb so you will have a GUI and an API in case for 23 | whatever reason the etherscamdb.info domain is down. This is important to know as products start integrating with our APIs 24 | and you will want to have the option of privacy - for example, checking our APIs for specific addresses especially in an 25 | integration where we are checking if the address is blacklisted could be a privacy concern for you. 26 | -------------------------------------------------------------------------------- /tests/validate_data.js: -------------------------------------------------------------------------------- 1 | const assert = require('assert'); 2 | const yaml = require('js-yaml'); 3 | const fs = require('fs'); 4 | describe('YAML Validator', function() { 5 | describe('scams.yaml', function() { 6 | it('should contain valid YAML', function(){ 7 | assert.doesNotThrow(() => yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8'))); 8 | }); 9 | it('every entry should have an ID', function() { 10 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8')).filter(entry => !('id' in entry)),[]); 11 | }); 12 | it('every entry should have a name', function() { 13 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8')).filter(entry => !('name' in entry)),[]); 14 | }); 15 | it('every entry should have a url', function() { 16 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8')).filter(entry => !('url' in entry)),[]); 17 | }); 18 | it('every ID should be numeric', function() { 19 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8')).filter(entry => isNaN(parseInt(entry.id))),[]); 20 | }); 21 | it('every url should specify its protocol (http:// or https:// or mailto:)', function() { 22 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/scams.yaml', 'utf8')).filter(entry => !entry.url.startsWith('http://') && !entry.url.startsWith('https://') && !entry.url.startsWith('mailto:')),[]); 23 | }); 24 | }); 25 | describe('legit_urls.yaml', function() { 26 | it('should contain valid YAML', function(){ 27 | assert.doesNotThrow(() => yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8'))); 28 | }); 29 | it('every entry should have an ID', function() { 30 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8')).filter(entry => !('id' in entry)),[]); 31 | }); 32 | it('every entry should have a name', function() { 33 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8')).filter(entry => !('name' in entry)),[]); 34 | }); 35 | it('every entry should have a url', function() { 36 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8')).filter(entry => !('url' in entry)),[]); 37 | }); 38 | it('every ID should be numeric', function() { 39 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8')).filter(entry => isNaN(parseInt(entry.id))),[]); 40 | }); 41 | it('every url should specify its protocol (http:// or https://)', function() { 42 | assert.deepEqual(yaml.safeLoad(fs.readFileSync('./_data/legit_urls.yaml', 'utf8')).filter(entry => !entry.url.startsWith('http://') && !entry.url.startsWith('https://')),[]); 43 | }); 44 | }); 45 | }); 46 | describe('JSON Validator', function() { 47 | describe('twitter.json', function() { 48 | it('should contain valid JSON', function(){ 49 | assert.doesNotThrow(() => JSON.parse(fs.readFileSync('./_data/twitter.json', 'utf8'))); 50 | }); 51 | }); 52 | describe('metamaskImports.json', function() { 53 | it('should contain valid JSON', function(){ 54 | assert.doesNotThrow(() => JSON.parse(fs.readFileSync('./_data/metamaskImports.json', 'utf8'))); 55 | }); 56 | }); 57 | }); -------------------------------------------------------------------------------- /update.js: -------------------------------------------------------------------------------- 1 | process.env.UV_THREADPOOL_SIZE = 128; 2 | const debug = require('debug')('update'); 3 | const dns = require('dns'); 4 | const url = require('url'); 5 | const yaml = require('js-yaml'); 6 | const fs = require('fs'); 7 | const request = require("request"); 8 | const shuffle = require('shuffle-array'); 9 | const config = require('./config'); 10 | 11 | let scams = yaml.safeLoad(fs.readFileSync('_data/scams.yaml')); 12 | let urlscan_timeout = 0; 13 | let scams_checked = 0; 14 | let requests_pending = 0; 15 | let new_cache = { 16 | 'scams': [], 17 | 'legiturls': [], 18 | 'blacklist': [], 19 | 'addresses': {}, 20 | 'whitelistaddresses': {}, 21 | 'ips': {}, 22 | 'whitelist': [], 23 | 'inactives': [], 24 | 'actives': [], 25 | 'updated': (new Date()).getTime() 26 | }; 27 | 28 | let blDnsLookup = true; 29 | 30 | if (!fs.existsSync('_cache')) { 31 | fs.mkdirSync('_cache'); 32 | } 33 | 34 | yaml.safeLoad(fs.readFileSync('_data/legit_urls.yaml')).sort(function(a, b) { 35 | return a.name - b.name; 36 | }).forEach(function(legit_url) { 37 | new_cache.legiturls.push(legit_url); 38 | 39 | new_cache.whitelist.push(url.parse(legit_url.url).hostname.replace("www.", "")); 40 | new_cache.whitelist.push('www.' + url.parse(legit_url.url).hostname.replace("www.", "")); 41 | if ('addresses' in legit_url) { // (if 'addresses' exists in legit_urls) 42 | legit_url.addresses.forEach(function(whitelistaddress) { 43 | if (!(whitelistaddress.toLowerCase() in new_cache.whitelistaddresses)) { 44 | new_cache.whitelistaddresses[whitelistaddress.toLowerCase()] = []; 45 | } 46 | var currwhitelistindex = whitelistaddress.toLowerCase(); 47 | new_cache.whitelistaddresses[currwhitelistindex] = legit_url; 48 | for(var i = 0 ; i < new_cache.whitelistaddresses[currwhitelistindex].addresses.length; i++){ 49 | new_cache.whitelistaddresses[currwhitelistindex].addresses[i] = new_cache.whitelistaddresses[currwhitelistindex].addresses[i].toLowerCase(); 50 | } 51 | }); 52 | } 53 | }); 54 | setInterval(function() { 55 | debug(scams_checked + '/' + scams.length + ' (' + requests_pending + ' requests pending)'); 56 | }, 1000); 57 | 58 | if('perform_dns_lookup' in config && config.perform_dns_lookup === false) { 59 | blDnsLookup = false; 60 | console.log("Not performing DNS lookups due to configuration.\r\nChange \"perform_dns_lookup\" config to true"); 61 | } 62 | 63 | scams.forEach(function(scam, index) { 64 | if ('url' in scam) { 65 | if (!scam.url.includes('http://') && !scam.url.includes('https://')) { 66 | debug('Warning! Entry %s doesnt have the url protocol (http or https) specified. Please update!',scam.id); 67 | scam.url = 'http://' + scam.url; 68 | } 69 | if (scam.addresses != null) { 70 | scam.addresses.forEach(function(address, index) { 71 | //debug("Casting " + scam.addresses[index] + " as " + scam.addresses[index].toLowerCase()) 72 | scam.addresses[index] = scam.addresses[index].toLowerCase(); 73 | }) 74 | } 75 | var scam_details = new_cache.scams[new_cache.scams.push(scam) - 1]; 76 | 77 | let dmn = url.parse(scam.url).hostname.replace("www.", ""); 78 | 79 | if(new_cache.whitelist.indexOf(dmn) > -1) { 80 | console.log("Domain '"+ dmn +"' is whitelisted - not adding it to the blacklist."); 81 | } else { 82 | new_cache.blacklist.push(dmn); 83 | new_cache.blacklist.push('www.' + dmn); 84 | } 85 | 86 | // Check to see if we should hit the domain or not 87 | if(blDnsLookup === false) { 88 | scam_details.status = "NotChecked"; 89 | scam_details.ip = "0.0.0.0"; 90 | 91 | if(index == (scams.length-1)) { 92 | var done_interval = setInterval(function() { 93 | if (requests_pending == 0) { 94 | clearInterval(done_interval); 95 | Object.keys(new_cache.ips).forEach(function(ip) { 96 | new_cache.blacklist.push(ip); 97 | }); 98 | fs.writeFileSync("_cache/cache.json", JSON.stringify(new_cache)); 99 | debug("Done"); 100 | process.exit(); 101 | } 102 | }, 500); 103 | } 104 | } else { 105 | dns.lookup(url.parse(scam.url).hostname, (err, address, family) => { 106 | if (!err) { 107 | scam_details.ip = address; 108 | } 109 | dns.resolveNs(url.parse(scam.url).hostname, (err, addresses) => { 110 | if (!err) { 111 | scam_details.nameservers = addresses; 112 | } 113 | requests_pending++; 114 | var r = request(scam.url, {timeout: 5*60*1000}, function(e, response, body) { 115 | requests_pending--; 116 | if (e || !([200, 301, 302].includes(response.statusCode))) { 117 | scam_details.status = 'Offline'; 118 | new_cache.inactives.push(scam); 119 | } else if (r.uri.href.indexOf('cgi-sys/suspendedpage.cgi') !== -1) { 120 | scam_details.status = 'Suspended'; 121 | new_cache.inactives.push(scam); 122 | } else { 123 | if ('subcategory' in scam && scam.subcategory == 'MyEtherWallet') { 124 | requests_pending++; 125 | request('http://' + url.parse(scam.url).hostname.replace("www.", "") + '/js/etherwallet-static.min.js', {timeout: 5*60*1000}, function(e, response, body) { 126 | requests_pending--; 127 | if (!e && response.statusCode == 200) { 128 | scam_details.status = 'Active'; 129 | new_cache.actives.push(scam); 130 | } else { 131 | scam_details.status = 'Inactive'; 132 | new_cache.inactives.push(scam); 133 | } 134 | }); 135 | } else if ('subcategory' in scam && scam.subcategory == 'MyCrypto') { 136 | requests_pending++; 137 | request('http://' + url.parse(scam.url).hostname.replace("www.", "") + '/js/mycrypto-static.min.js', {timeout: 5*60*1000}, function(e, response, body) { 138 | requests_pending--; 139 | if (!e && response.statusCode == 200) { 140 | scam_details.status = 'Active'; 141 | new_cache.actives.push(scam); 142 | } else { 143 | scam_details.status = 'Inactive'; 144 | new_cache.inactives.push(scam); 145 | } 146 | }); 147 | } else if (body == '') { 148 | scam_details.status = 'Inactive'; 149 | new_cache.inactives.push(scam); 150 | } else { 151 | scam_details.status = 'Active'; 152 | new_cache.actives.push(scam); 153 | } 154 | } 155 | /*if(scam_details.status != 'Offline' && 'Urlscan_API_Key' in config) { 156 | urlscan_timeout++; 157 | setTimeout(function() { 158 | request('https://urlscan.io/api/v1/scan/', { method: 'POST', json: { 'url': scam.url, 'public': 'off' }, headers: { 'API-Key': config.Urlscan_API_Key }}, function(err,response,body) { 159 | if(err || response.statusCode != 200) { 160 | debug(err); 161 | debug('Status code: ' + response.statusCode); 162 | } else if(body.message != 'Submission successful' || !('api' in body)) { 163 | debug(body.message); 164 | } else { 165 | setTimeout(function() { 166 | request(body.api, { method: 'POST', json: { 'url': scam.api, 'public': 'off' }, headers: { 'API-Key': config.Urlscan_API_Key }}, function(err,response,body) { 167 | if(err || response.statusCode != 200) { 168 | debug(err); 169 | debug('Status code: ' + response.statusCode); 170 | } else { 171 | debug(body); 172 | } 173 | }); 174 | }, 2000); 175 | } 176 | }); 177 | }, urlscan_timeout * 8000); 178 | }*/ 179 | if ('ip' in scam_details) { 180 | if (!(scam_details.ip in new_cache.ips)) { 181 | new_cache.ips[scam_details.ip] = []; 182 | } 183 | new_cache.ips[scam_details.ip] = scam_details; 184 | } 185 | if ('addresses' in scam_details) { 186 | scam_details.addresses.forEach(function(address) { 187 | if (!(address.toLowerCase() in new_cache.addresses)) { 188 | new_cache.addresses[address.toLowerCase()] = []; 189 | } 190 | //debug(new_cache.addresses); 191 | new_cache.addresses[address.toLowerCase()] = scam_details; 192 | }); 193 | } 194 | scams_checked++; 195 | if(index == (scams.length-1)) { 196 | var done_interval = setInterval(function() { 197 | if (requests_pending == 0) { 198 | clearInterval(done_interval); 199 | Object.keys(new_cache.ips).forEach(function(ip) { 200 | new_cache.blacklist.push(ip); 201 | }); 202 | fs.writeFileSync("_cache/cache.json", JSON.stringify(new_cache)); 203 | debug("Done"); 204 | process.exit(); 205 | } 206 | }, 500); 207 | } 208 | }); 209 | }); 210 | }); 211 | } 212 | } else { 213 | debug("Fatal error: Scam without URL found (%s)",scam.id); 214 | process.exit(); 215 | } 216 | }); 217 | --------------------------------------------------------------------------------