{%hackmd C76nuH1pTfedlTW7n2cwbQ %}

# Angel Drainer Data

"@Drakannew" - angel drainer telegram name

https://privatebin.net/?dbdd67cbd26d924d#8vqyQtDCjD2JgDqhPWtKBjLyg6iZ5XRGsUzJrSbA6FNL

## Telegram Data

All official Angel Drainer representatives are listed below. Don't fall for scam and enjoy your work at Angel 🖤
People
@drainer
@drakannew
@stop
@leest
@angelsupport
Bots
@zerozerozerothanks_bot
@drakardxangel_bot

If you still have questions
@leest - Technical support
@drakannew - Technical support and web developer
@angelsupport - support :D

Drakan = drakannew

https://urlscan.io/result/7fe7fa0e-9190-48dd-ad09-9cc5d3325fb1/

https://urlscan.io/result/919398f2-6ad1-4300-83a4-27a624c26482/#transactions

<br />
#C2 Data
Sourced From: https://dune.com/queries/3286268

SELECT
  block_time AS change_time,
  to AS contract_address,
  lower(
    from_utf8(
      from_hex(substring(cast(data AS VARCHAR), 139, 64))
    )
  ) as domain
FROM
  ethereum.transactions
WHERE
--   (
--     "to" = 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5
--     OR "to" = 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f
--   ) AND 
  substring(cast(data AS VARCHAR), 1, 10) = '0xe1cb37ae'
  AND success = true ORDER BY block_time DESC;

| change_time | contract_address | domain |
|:---------------- | ------------------------------------------ | --------------------------- |
| 2024-05-05 09:15 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | datapulseprotocol[.]me |
| 2024-04-26 15:24 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | global-nexusconnect[.]in |
| 2024-04-24 07:52 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | globallink-connect[.]one |
| 2024-04-22 14:18 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | global-nexusconnect[.]link |
| 2024-04-18 17:20 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | fastmap-api-661[.]com |
| 2024-04-17 11:43 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | w3scanapi[.]com |
| 2024-04-15 15:46 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | openweatherapi[.]com |
| 2024-04-12 11:30 | 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5 | doubleadscdn[.]com |
| 2024-04-12 10:27 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | doubleadsclick[.]com |
| 2024-02-26 04:08 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | ipjsonapi[.]com |
| 2024-02-22 10:59 | 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5 | dd5889a9b4e234dbb210787[.]com |
| 2024-01-26 01:05 | 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5 | lorem[.]ipsum |
| 2024-01-23 11:21 | 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5 | cdn-npmjs[.]com |
| 2024-01-19 20:49 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | nftfastapi[.]com |
| 2024-01-15 12:10 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | 4378uehdkf[.]com |
| 2024-01-15 11:26 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | 65a044a0023ca[.]com |
| 2024-01-11 18:25 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | 87634rh4r4r3rfekj[.]com |
| 2024-01-11 16:01 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | coingecko-priceapi[.]com |
| 2024-01-11 16:01 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | 87634rh4r4r3rfekj[.]com |
| 2024-01-11 11:39 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | dsf894frlkjh43r9834r[.]com |
| 2024-01-11 10:49 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | githubusercomment[.]com |
| 2024-01-11 10:19 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | io-walletconnect[.]com |
| 2024-01-10 20:16 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | githubuserconnect[.]com |
| 2024-01-10 12:24 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | web3modal-api[.]com |
| 2023-12-14 19:48 | 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f | cloudweb3-api[.]com |

## Angel Monitoring Urlscan Query May 9, 2024

domain:("datapulseprotocol.me" OR "global-nexusconnect.in" OR "globallink-connect.one" OR "global-nexusconnect.link" OR "fastmap-api-661.com" OR "w3scanapi.com" OR "openweatherapi.com" OR "doubleadscdn.com" OR "doubleadsclick.com" OR "ipjsonapi.com" OR "dd5889a9b4e234dbb210787.com" OR "lorem.ipsum" OR "cdn-npmjs.com" OR "nftfastapi.com" OR "4378uehdkf.com" OR "65a044a0023ca.com" OR "87634rh4r4r3rfekj.com" OR "coingecko-priceapi.com" OR "dsf894frlkjh43r9834r.com" OR "githubusercomment.com" OR "io-walletconnect.com" OR "githubuserconnect.com" OR "web3modal-api.com" OR "cloudweb3-api.com")

[angel_drainer_monitoring](https://urlscan.io/search/#domain%3A(%22datapulseprotocol.me%22%20OR%20%22global-nexusconnect.in%22%20OR%20%22globallink-connect.one%22%20OR%20%22global-nexusconnect.link%22%20OR%20%22fastmap-api-661.com%22%20OR%20%22w3scanapi.com%22%20OR%20%22openweatherapi.com%22%20OR%20%22doubleadscdn.com%22%20OR%20%22doubleadsclick.com%22%20OR%20%22ipjsonapi.com%22%20OR%20%22dd5889a9b4e234dbb210787.com%22%20OR%20%22lorem.ipsum%22%20OR%20%22cdn-npmjs.com%22%20OR%20%22nftfastapi.com%22%20OR%20%224378uehdkf.com%22%20OR%20%2265a044a0023ca.com%22%20OR%20%2287634rh4r4r3rfekj.com%22%20OR%20%22coingecko-priceapi.com%22%20OR%20%22dsf894frlkjh43r9834r.com%22%20OR%20%22githubusercomment.com%22%20OR%20%22io-walletconnect.com%22%20OR%20%22githubuserconnect.com%22%20OR%20%22web3modal-api.com%22%20OR%20%22cloudweb3-api.com%22))

23 Unique Domains

---

Smart Contract initialized by Angel_Drainer <br />
[ 0x0000d38a234679F88dd6343d34E26DCB50C30000 ]

Link to Query: https://dune.com/queries/3712833?sidebar=none

Dune Query Below:

select * 
from evms.creation_traces 
where "from" = 0x0000d38a234679F88dd6343d34E26DCB50C30000

Contract initialization signature: `0x60806040`

Sample Transaction: https://oko.palkeo.com/0x819a020342c1d26ca0e521b3918826658595a6b2c1c9771b61641550a6681686/

| contract_addresses |
|:------------------------------------------ |
| 0xbf809a4d5dc34b9c800e8d150a085118542c7d2f |
| 0x772389b41c35fe3e654ffd6d1772d8dfdf8588a3 |
| 0x77868ed0c48eee9e88e9844b5507ae2cb21f2678 |
| 0x7dc6b144817afc7aaaf2c0cd173d13ee9cb60126 |
| 0x2cddee1d160fd91afba1a3206191ddc101437229 |
| 0x539c1f936f4d4e077e05497db39fd3c1a9883449 |
| 0x0ff1895e5adb23fc8fd4312ff7bf82227f0247c0 |
| 0x7e53a656d3d68f5d0d17b0f785b94dfc38240dd2 |
| 0x500f4ec0fe21d5816a8452677195bca77e2f98b0 |
| 0x6ec59fd0a6eaad3174a1520fe56a0109f28e069f |
| 0x594dc7e318384c15142aac6ad439dcb4382a0971 |
| 0x847981f45fc94901999d98c8d2aed09ac16cd270 |
| 0xeb63622d8c27f3f0eb09191b58e676cb2dda98de |
| 0x09848783033e560877c182a80a01e4bfd1ce8f54 |
| 0x003d5f7fb4ec8fc612cd3bcf6b498be3f7211597 |
| 0x0fb3f3c5135ac4d5b6e165b6d27cc08f3293cd09 |
| 0xf26a42dd2b2753378af0d31cacbe504d0da96b30 |
| 0x595afc09f30fc25735efe3dccbfd176497f6bc79 |
| 0xbbb0e9fd8ab045bbadbcf4e3b7622ccba719c479 |
| 0x0b467ceb2b15363eee10f72e7eb4f3bc6ac0a0bf |
| 0x532ce3d554e376c49f18f156e7b0acf4d0cdb275 |
| 0x3d55a808b017764f4c3539465a968c08b313c42d |
| 0xe7fe815edbe9befe0abfa4ee3057eeb639cfd219 |
| 0xed469b1a15cbf6a238067e59ff0ba0ee768c0648 |
| 0x254d5db7f6ab1f97454f808b418420a1f03fd060 |
| 0x34ffa1e20bdc90db038c2b78a2ec017577665305 |
| 0x8fc31a7762b298a1f5fa627074b4d2c5e80ea449 |
| 0xe063d01b61f13fc96733880084e1c78fee7e3578 |
| 0x45ea18acf44bdd53c8d7bb05373e1ce983c80d9c |
| 0x706401067bd19ea554474def1f886bfa007cd335 |
| 0x1daab6971278bc3e1a465a17a4be3f1c2b5db17c |
| 0x119f0d43fdfcdc1f16ff4232a66dbf298ce17a92 |
| 0xb0ed2aacac545bb2c3ae77289b964de905aa3cca |
| 0x3c7af2a9dc943e0af0a2915089daa809aab856d1 |
| 0x05f8b221dc68f4a9323d333ee8efc7cfd1b23816 |
| 0x8b7494f6aec46853d000c5641643105c33c7afdc |
| 0xa21b0e1698057a62a26fab84f4d7e38f8d1cf019 |
| 0x296ec5f990935f8082a29eb0b7085aad33ddf664 |
| 0x941e09c78cc72b5c264c17ba6327c06a0faad6e5 |
| 0x36285df7ab7b0a694b55addc1544c3bfd3809509 |
| 0xd98b94ad202781b78549d1609337aaa2a24504c9 |
| 0x43372ddad6475b355f3104af3aeca63a0fb28952 |
| 0xbf406edfb3447562d4fc3b09e9670f4c53fbc09d |
| 0x82352749783e8e6c49f1a52a62d9a5496327b931 |
| 0x79153e336cbf227bd199ea1bbcfd240deebcfdd6 |
| 0xc72c5d2f77e0be1fb55a98fde21f314bcbab7abd |
| 0x0aef934e05e265425c5214d35b9fbb841d3f4ca1 |

| Likely Angel_Drainer Addresses(Pending Verification) |
|:---------------------------------------------------- |
| 0x0000d38a234679F88dd6343d34E26DCB50C30000 |
| 0x00002EbEC71F959A906058752307b312beD30000 |
| 0x003D5f7fB4eC8fC612CD3BCF6B498be3F7211597 |
| 0x412f10AAd96fD78da6736387e2C84931Ac20313f |
| 0xe7B53eA4FfCA10891767302B501Bf6DFa49Ed863 |
| 0x87882BA3dfe0E63749a64E6117Af76E22CB10943 |
| 0xF0f683E10B4d7743E93C53557fBa9b942B1f4CA8 |
| 0xd7C5903f7605AFbD59D0F2B1b19CD2000abeCE06 |
| 0xADE57e1b75687fda1187f73652366a3470C9311E |
| 0x4F863DA8eD6818FD5d5A6d606Bdf9A354Cc989D5 |
| 0xe6397ce8864E6C09e72aFCbdFA29397a3DEA577b |
| 0x98F5f2Ca2939090642F5bA36F3A73594677fF29d |
| 0xBBaE6C5377013240c76b7d3eBfAB4e85D7a87342 |
| 0x4B7bceB6db23227CC14b01a83A43e0A6E735ba75 |
| 0xb38188280B608C3EcFc8E7CC15BBf38f1EB5fFBB |
| 0x55DFf20D2C81630306F2d14179735BB911680A3a |
| 0x5Ce5368fCb76af3c8FFA7DA0C7e2d17c4221D0Ed |
| 0xD117CC04aA1580810F5764E481702246505B23f8 |
| 0x8292a2032E9B683e5B972f644557CA3E6214Aece |
| 0x8232fc3a14594932d10068816781767BbF78c53E |
| 0x00003ffA7857408ab714c28B1451914330240000 |
| 0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2 |

2024-09-23
| # | url |
|----|------------------------------------------------------------------------|
| 0 | hxxps[://]chaingptteamservice[.]pages[.]dev/5b79a7ec1[.]b0[.]js |
| 1 | hxxps[://]chaingptteamservice[.]pages[.]dev/ |
| 2 | hxxps[://]beefyhelpdesk[.]pages[.]dev/ |
| 3 | hxxps[://]saferewardintel[.]pages[.]dev/ |
| 4 | hxxps[://]saferewardservice[.]pages[.]dev/ |
| 5 | hxxps[://]saferewardgasservice[.]pages[.]dev/ |
| 6 | hxxps[://]securedbonusdata[.]pages[.]dev/ |
| 7 | hxxps[://]safesecurebonusintel[.]pages[.]dev/ |
| 8 | hxxps[://]secureintelbonus[.]pages[.]dev/ |
| 9 | hxxps[://]securerewardvault[.]pages[.]dev/ |
| 10 | hxxps[://]safebonusdata[.]pages[.]dev/ |
| 11 | hxxps[://]securerewardintel[.]pages[.]dev/ |
| 12 | hxxps[://]securerewarddata[.]pages[.]dev/ |
| 13 | hxxps[://]securerewardinfo[.]pages[.]dev/ |
| 14 | hxxps[://]safebonusvault[.]pages[.]dev/ |
| 15 | hxxps[://]securebonusintel[.]pages[.]dev/ |
| 16 | hxxps[://]securebonusdata[.]pages[.]dev/ |
| 17 | hxxps[://]securereserviceintel[.]pages[.]dev/ |
| 18 | hxxps[://]securerewardinput[.]pages[.]dev/ |