From faa76f30e33011cc5cc52efa6898b6b949d9430a Mon Sep 17 00:00:00 2001 From: gaugau3000 Date: Tue, 14 Jul 2026 06:34:44 +0200 Subject: [PATCH] Add rewards-extended.exchange (wallet drainer) to blacklist rewards-extended.exchange + claim.rewards-extended.exchange Wallet drainer impersonating the exchange "Extended" (legit: extended.exchange). Serves a fake "$EXT rewards claim" page; drainer payload at claim.rewards-extended.exchange/arxcdr.php requests approvals/signatures to sweep EVM assets. Domain registered 2026-07-13 (registrar WebNic), Cloudflare-fronted. Extended has no live token (pre-TGE), so any reward claim on this domain is fraudulent. Legit extended.exchange deliberately NOT added. Co-Authored-By: Claude Opus 4.8 (1M context) --- blacklists/domains.json | 2 ++ 1 file changed, 2 insertions(+) diff --git a/blacklists/domains.json b/blacklists/domains.json index a4376e8f..ea9b0c00 100644 --- a/blacklists/domains.json +++ b/blacklists/domains.json @@ -1,4 +1,6 @@ [ +"rewards-extended.exchange", +"claim.rewards-extended.exchange", "autorefitting-modification.com", "project.premint.center", "premint.center",