Hosts: Add MyEtherWallet and Metamask malicious crypto URLs ?

[kolya182]

MyEtherWallet is most Metamask most reputable and trusted web wallets in cryptocurrency (crypto) space. @StevenBlack would you considers adding them ?. Metamask already has curated host file https://github.com/MetaMask/eth-phishing-detect/blob/master/src/hosts.txt and for MEW (MyEtherWallet) i could write a script and to convert a https://github.com/MyEtherWallet/ethereum-lists/blob/master/src/urls/urls-darklist.json into host file.

[welcome[bot]]

Hello! Thank you for opening your first issue in this repo. It’s people like you who make these host files better!

[StevenBlack]

Thank you @kolya182 this is cool. I've been wanting a reliable list of sketch coin domains.

We presently have zero overlap with the 1,059 domains in the first list.

$ ./ghosts -c https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/master/src/hosts.txt
----------------------------------------
Base hosts file summary:
----------------------------------------
Location: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
Domains: 56,999
Bytes: 1.7 MB
----------------------------------------
----------------------------------------
Compared hosts file summary:
----------------------------------------
Location: https://raw.githubusercontent.com/MetaMask/eth-phishing-detect/master/src/hosts.txt
Domains: 1,059
Bytes: 28 kB
----------------------------------------
Intersection: 0 domains

[StevenBlack]

After transforming the second list with jq: zero intersection over 2,221 domains. (Used jq -r .[].id source > dest)

$ ./ghosts --clip

----------------------------------------
Base hosts file summary:
----------------------------------------
Location: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
Domains: 56,999
Bytes: 1.7 MB
----------------------------------------
----------------------------------------
Compared hosts from clipboard summary:
----------------------------------------
Location: clipboard
Domains: 2,221
Bytes: 47 kB
----------------------------------------
Intersection: 0 domains

[kolya182]

So what would be approach here ?. Let me know if i can help. Can't wait to install it on pi-hole.

[StevenBlack]

Let me know if i can help

Find a Bitcoin list that's just as good as this one is for Eth 😄

[StevenBlack]

@kolya182 I have a concern. MetaMask receives an avalanche of issues submitted, is there nobody dealing with that? I see a wall of issues with nobody acknowledging, or replying.

Active curation is a big deal in my mind. Your thoughts?

[kolya182]

Let me know if i can help

Find a Bitcoin list that's just as good as this one is for Eth 😄

1. https://raw.githubusercontent.com/CryptoScamDB/blacklist/master/data/urls.yaml
2. https://github.com/hoshsadiq/adblock-nocoin-list/blob/master/nocoin.txt
3. Bitcoin, Monero, Nimiq etc https://github.com/hoshsadiq/adblock-nocoin-list/blob/master/hosts.txt

Cryptocurrency mining malware urls:

1. https://blog.avast.com/greedy-cybercriminals-host-malware-on-github
2. https://github.com/anudeepND/blacklist/blob/master/CoinMiner.txt
3. https://raw.githubusercontent.com/greatis/Anti-WebMiner/master/blacklist.txt

Other hosts founded along the way:

1. https://gist.github.com/opus-x/3e673a9d5db2a214df05929a4eee6a57
2. https://github.com/Ultimate-Hosts-Blacklist/Ultimate.Hosts.Blacklist
3. Big db https://github.com/jerryn70/GoodbyeAds

[kolya182]

@kolya182 I have a concern. MetaMask receives an avalanche of issues submitted, is there nobody dealing with that? I see a wall of issues with nobody acknowledging, or replying.

Active curation is a big deal in my mind. Your thoughts?

Hi @StevenBlack , sorry for long delay

I'm convinced @danfinlay and @409H doing a great job maintaining the repository. Based on my experience in crypto it's just so many scammers out there imposing real projects, and not commenting on every PR make sense to me, but merging those that a really proven to be a scam. In general i think Metamask's list can be imported into hosts as is, because already has sufficient list of most scam resources and adds 5-10 new websites daily.