blocklistproject / Lists

Primary Block Lists
The Unlicense
3.82k stars 347 forks source link

[Add request] - discord phishing links #613

Closed SodaWithoutSparkles closed 2 years ago

SodaWithoutSparkles commented 2 years ago

URL you wish to be added: premiums-gift.com discqrde.com Edit: https://e-giftnitro.com/

Why you believe this should be added: "free discord nitro"

Add to list: phishing

Other info you think we should know: seen in discord

spirillen commented 2 years ago

Hey @SodaWithoutSparkles I've tryed to access both domain to verify, but they do not respond

Subject                                                                                              Status      Source     Expiration Date   Registrar                      HTTP Code  Checker      
---------------------------------------------------------------------------------------------------- ----------- ---------- ----------------- ------------------------------ ---------- -------------
premiums-gift.com                                                                                    ACTIVE      WHOIS      29-dec-2022       REGISTRAR OF DOMAIN NAMES REG.RU LLC Unknown    AVAILABILITY 
WARNING:urllib3.connectionpool:Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'ConnectTimeoutError(<urllib3.connection.HTTPConnection object at 0x7fba5f080490>, 'Connection to 185.112.83.89 timed out. (connect timeout=5.0)')': /
discqrde.com                                                                                         ACTIVE      WHOIS      09-jan-2023       Regional Network Information Center, JSC dba RU-CENTER Unknown    AVAILABILITY
SodaWithoutSparkles commented 2 years ago

Be careful of actually getting phished. Use caution. Use incognito mode.

https://discqrde.com/UFDeEmMeCVocD https://premiums-gift.com/

spirillen commented 2 years ago

Be careful of actually getting phished. Use caution. Use incognito mode.

https://discqrde.com/UFDeEmMeCVocD https://premiums-gift.com/

Don't worry, personally I'm on the safe site, however you should add backtics around the links :wink:

SodaWithoutSparkles commented 2 years ago

Don't worry, personally I'm on the safe site, however you should add backtics around the links :wink:

Good idea. Hope that they wont decide to copy and paste the links!

Edit: I think the gift one was alreadly taken down, maybe by discord Trust and Safety team, as I reported in the discord app and filed an report using email. Filing a email report seems quite useful...

spirillen commented 2 years ago

Yeah premiums-gift.com seems dead,

but I'm not going to trust it stays dead...

drill premiums-gift.com @JEWEL.NS.CLOUDFLARE.COM
;; ->>HEADER<<- opcode: QUERY, rcode: NOERROR, id: 51287
;; flags: qr aa rd ; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 
;; QUESTION SECTION:
;; premiums-gift.com.   IN      A

;; ANSWER SECTION:
premiums-gift.com.      300     IN      A       172.67.137.128
premiums-gift.com.      300     IN      A       104.21.81.20
pyfunceble -d  premiums-gift.com

Subject                                                                                              Status      Source     Expiration Date   Registrar                      HTTP Code  Checker      
---------------------------------------------------------------------------------------------------- ----------- ---------- ----------------- ------------------------------ ---------- -------------
premiums-gift.com                                                                                    ACTIVE      WHOIS      29-dec-2022       REGISTRAR OF DOMAIN NAMES REG.RU LLC Unknown    AVAILABILITY 

Execution Time: 00:00:00:2.831547
SodaWithoutSparkles commented 2 years ago

Edit: https://e-giftnitro.com/

Same reason

iam-py-test commented 2 years ago

Blocklisted in my lists and reported. Thanks

gap579137 commented 2 years ago

These have been added and will be included in the next push