<div class="pull-right">https://images.hive.blog/0x0/https://images.hive.blog/DQmTEuN8ozUBFDb8t2duJvDWb4c22j1J3kCYWKgph2mHmyo/image.png</div>

<h4><br><br><br><br><br><br><br><br>@keys-defender activity report for the month of MAY</h4>

<br> &nbsp; <br>

-----
-----

<br>

<div class="pull-right">https://images.hive.blog/640x0/https://cdn.steemitimages.com/DQmTm1AGHbfXy11dRhwRujkuPK9JHEB7Du6bBBV8hA8KDdn/image.png</div>

K E Y S  &nbsp; P R O T E C T I O N:

-----

<h6><a href="https://hive.blog/steem/@gaottantacinque/the-keys-defender-bot-is-live-in-beta-mode">PRIVATE KEYS LEAKS</a> protected:</h6>

-----

<br>

<div class="phishy"><h4>1.  @thephotowala</h4></div>

- Chain: Hive</b> (Hive only account 😎)
- Type: <b>Memo key</b>
- Operation in which the key was leaked: <i>transfer</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 8.40
<br>- Reputation: 39
<br>- Followers: 7
<br>- Account age: Joined April 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://hiveblocks.com/tx/23ecba56e3a3370b9911462357dcbc3d0108ef92">Immediate automated reply</a>
<br>- <a href="https://peakd.com/hive-138876/@keys-defender/7hkacu-leak-compromised-memo-key-successfully-protected">Disclosure</a>
</div>

<br><br><br><br>&nbsp;
<br><div class="phishy"><h4>2.  @bukkyi4u</h4></div>

- Chain: ~~Steem~~</b> (~~Steem~~ only account 👎)
- Type: <b>Posting key</b>
- Operation in which the key was leaked: <i>post publishing</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 455.00
<br>- Reputation: 60
<br>- Followers: 8
<br>- Account age: Joined March 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://steemit.com/hive-108451/@keys-defender/re-bukkyi4u-ngswhenapplicablesub-1620520039993">Immediate automated reply</a>
<br>- <a href="https://peakd.com/hive-133987/@keys-defender/leak-compromised-posting-key-successfully-protected-qsvb4a">Disclosure</a>
</div>
<br><br><br><br>&nbsp;
<br><br><br><div class="phishy"><h4>3.  @random7</h4></div>

- Chain: Hive</b> (Hive only account 😎)
- Type: <b>Active key</b>
- Operation in which the key was leaked: <i>transfer</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 6.94
<br>- Reputation: 38
<br>- Followers: 0
<br>- Account age: Joined January 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://hiveblocks.com/tx/e52163daf89637f2c492d45fa9c8ae7ca4e23c29">Immediate automated reply</a>
<br>- <a href="https://peakd.com/hive-148441/@keys-defender/leak-compromised-active-key-successfully-detected">Disclosure</a>
</div>
<br><br><br><br>&nbsp;
<br><br><br><div class="phishy"><h4>4.  @mark-greek</h4></div>

- Chain: ~~Steem~~</b> (Steem only account 👎)
- Type: <b>Posting key</b>
- Operation in which the key was leaked: <i>transfer</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 0.03
<br>- Reputation: 25
<br>- Followers: 0
<br>- Account age: Joined May 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://steemit.com/sosial/@keys-defender/re-mark-greek-ngswhenapplicablesub-1621011213201">Immediate automated reply</a>
<br>- <a href="https://peakd.com/hive-193212/@keys-defender/ohwnk-leak-compromised-posting-key-successfully-protected">Disclosure</a>
</div>

<br><br><br><br>&nbsp;
<br><div class="phishy"><h4>5.  @ivonne</h4></div>

- Chain: ~~Steem~~ </b> (Hive and Steem account)
- Type: <b>Posting key</b>
- Operation in which the key was leaked: <i>comment</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 559 on steem + 4 on hive
<br>- Reputation: 56
<br>- Followers: 222
<br>- Account age: Joined Jan 2018
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://steemd.com/b/53822219#1a0d45ac32735b84e081cca9e01dc9f165f930ca">Immediate automated warning</a>
<br>- <a href="https://peakd.com/hive-138876/@keys-defender/leak-compromised-posting-key-successfully-protected-qtc8r8">Disclosure</a>
</div>

<br><br><br><br><br>&nbsp;
<br><div class="phishy"><h4>6.  @florrs0616</h4></div>

- Chain: ~~Steem~~</b> (Steem only account 👎)
- Type: <b>Posting key</b>
- Operation in which the key was leaked: <i>post edit</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 0.0
<br>- Reputation: 25
<br>- Followers: 8
<br>- Account age: Joined February 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://steemd.com/sinimportarlasituacion/@keys-defender/re-florrs0616-ngswhenapplicablesub-1621584508021">Immediate automated reply</a>
<br>- <a href="https://hiveblocks.com/hive-133987/@keys-defender/leak-compromised-posting-key-successfully-protected-qtl64b">Disclosure</a>
</div>


<br><br><br><br><br>&nbsp;
<br><div class="phishy"><h4>7.  @abhi369</h4></div>

- Chain: Hive</b> (Hive only account 😎)
- Type: <b>Active key</b>
- Operation in which the key was leaked: <i>transfer</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 0.0
<br>- Reputation: 25
<br>- Followers: 8
<br>- Account age: Joined May 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- <a href="https://hiveblocks.com/tx/36448643ced53dd7ced05980d38c26b979af909a">Immediate automated reply</a>
<br>- <a href="https://peakd.com/hive-148441/@keys-defender/leak-compromised-active-key-successfully-protected-qtqvnl">Disclosure</a>

<i>+</i>
Auto-transfer to savings:
https://media.discordapp.net/attachments/815848540730294302/851917093510316082/Screen_Shot_2021-06-08_at_4.10.27_PM.png
</div>

<br><br><br><br>

<br><br><br><br><br>&nbsp;
<br><div class="phishy"><h4>8.  @iv********es</h4></div>

- Chain: ~~Steem~~</b> (Steem only account 👎)
- Type: <b>Active key</b>
- Operation in which the key was leaked: <i>transfer</i>

<div class="pull-left">
<h5>Leaked account stats:</h5>
- Estimated Account Value: $ 4.60
<br>- Reputation: 48
<br>- Followers: 59
<br>- Account age: Joined March 2021
</div>

<div class="pull-right"><br>
@keys-defender's <b>actions</b>:
<br>- none (steem only account and no keys shared with Hive)
<br>- <a href="https://peakd.com/hive-138876/@keys-defender/leak-compromised-active-key-successfully-protected-qu07h7">Disclosure</a>
</div>

<br><br><br><br><br><br><br>
<sub>
`NOTE: @keys-defender still scans the STEEM blockchain because your private keys are shared across the two chains unless you reset your password at https://wallet.hive.blog/@your-username-here/password ! - do it.`
</sub>

-----

<div>
  <div class="pull-left"><sub><b>TOTAL KEYS FOUND since <a href="https://hive.blog/@gaottantacinque/the-keys-defender-bot-is-live-in-beta-mode">launch</a>:</b></sub></div>
<br><br>


<sub>Cold scan</sub>
- <sub>part 1:</sub>
  - <sub>3x PRIVATE MEMO KEYS</sub>
  - <sub>39x PRIVATE POSTING KEYS</sub>
  - <sub>2x PRIVATE ACTIVE KEYS</sub>
+ <sub>part 2</sub>
  - <sub>1x PRIVATE ACTIVE KEY</sub>
  - <sub>55x PRIVATE POSTING KEYS</sub>
  - <sub>13x PRIVATE MEMO KEYS</sub>
<br>
+ <sub><i>+</i> Live scan:</sub>
<sub>o a a a a a a p p a a p p a a a p p p p p a p p p p p p m m p p p a p o p m a m m p p p p p p p p p p p p p p p p p p a m p m m m m m p m p p p p m p p `m p a p p p a a`</sub>

= TOT:
&nbsp; &nbsp; 30 memo keys, 144 posting keys, 20 active keys, 2 owner keys.

<div>

<br>

-----

<div class="pull-right"><br><div class="pull-right">&nbsp;</div><div class="pull-right"><img src="https://images.hive.blog/DQmc9ShVFSN9pLthKvHiEnXQCyKSiGCpWw5XcM4kuUNiwLQ/image.png"></div></div>


<h6><a href="https://hive.blog/hive/@keys-defender/new-feature-phishing-detection-and-auto-reply">PHISHING LINKS</a> detected (and auto-replied to): &nbsp; 0 ✔️ (keeping the bad guys away! 😎)</h6>

<h6><a href="https://peakd.com/hive-169321/@keys-defender/new-commands-and-ban-lists">SCAM LINKS:</a>
- new reports: 1
- detected (and auto-replied to): &nbsp; 3 ❗ </h6> 


![image.png](https://files.peakd.com/file/peakd-hive/keys-defender/EoCapD5tcuK3U75GtahkFvXmEwMg53j2XQ5GEHZnFowpki5NiuGY8SFL52GG2sNRz2L.png)


<sub>https://peakd.com/@spencer567ss/qu2d5n</sub>
<sub>https://peakd.com/@james56da/qsikgo</sub>

<br>

-----

<div class="pull-right"><div class="pull-right">&nbsp; &nbsp;</div><div class="pull-right"><img src="https://images.hive.blog/DQmXJCLiMBWPyk4cLbdeF4hn6CWwDFFKaaN2tCZpHWuv2Ex/image.png"></div></div>

<h6><a href="https://hive.blog/hive-139531/@keys-defender/new-feature-code-injections-attempts-detection-xss-sql-injections-csrf">CODE INJECTIONS</a> detected on Hive: &nbsp; 1</h6> 

Nothing harmful, just a test: https://hiveblocks.com/test/@brutalisti/test

&nbsp;

-----

<h6><a href="https://hive.blog/hive-192847/@keys-defender/new-features-extended-phishing-protection">UNSAFE LINKS</a> detected:</h6>

- Shortened links: 23.4/h -> ~16,848/month. [Auto-replies/warnings](https://hive.blog/@keys-defender/comments) throttled 1/20.
- HTTP links: 17.6/h -> ~12,672/month. [Auto-replies/warnings](https://hive.blog/@keys-defender/comments) throttled 1/20.

<sub>NOTE: links that do not use a secure protocol (https) and shortened links (eg. bit.ly) are NOT a threat per se but can lead to theft of credentials if misused or used in a malicious attack.</sub>


&nbsp;

Apologies to @asgarth and @jarvie for autoreplying to shortened gmaps links on their contest (<a href="https://peakd.com/c/hive-146701">"guess where this picture was taken"</a>), they didnt enjoy that.. 😅


![image.png](https://files.peakd.com/file/peakd-hive/keys-defender/23tGZmwSTEQqBQ5jKBAjyJdZ52tpv6HHhptcPmLrqhct6sVVoHbXonNAdtk7taDKHiaQr.png)

.. 🤣

I could have sweared I already whitelisted those but apparently I did not. I now added to my backlog to allow top40 witnesses and whitelisted users to whiteslist new domains. That will prevent this issue in the future.

<div class="pull-left">
<div class="pull-right"><div class="pull-right">
https://images.hive.blog/DQmRxJgDd8Fn9ykXTY2omBEXRRxjXHvFPCcXHoHEZJTMFqo/image.png <br>
https://images.hive.blog/DQmWbiUZDpWrn1nZzPGqJuCUmpMfR4T1ZeTpZbaYibmH4c2/image.png
</div></div>
</div>

<div class="pull-left"><div class="pull-right">
<img src="https://images.hive.blog/DQmS8Gd15Z8wt16FebN2vbPcKT95ykiDGvgYfDucsK8UJqC/image.png">
</div>
</div>


<br><br><br><br>

<br><br>

-----
-----

O T H E R  &nbsp; A C T I V I T I E S: &nbsp; --> This section will eventually be moved to @hive-defender 

-----

<div class="pull-right"><div class="pull-right"><img src="https://images.hive.blog/DQmNvkuxeuRyKcvXensSNfpU5zAs6BExx5WfRLCnVD6UHvM/image.png"></div></div>

<h6>Confirmed <a href="https://hive.blog/hivedev/@keys-defender/new-feature-added-to-keys-defender-plagiarism-detection">re-posting</a> authors: &nbsp; 0 </h6>

No one is monitoring my bot's (a bit noisy) warnings.. :(

-----

<div class="pull-right"><div class="pull-right"><div class="pull-right"> &nbsp; </div><div class="pull-right"><img src="https://images.hive.blog/DQmXWZQW2qQraNYTFyR2QuxwuUZLHeGhBarTXxeDn4dAVfh/image.png"></div></div></div>

<h6><a href="https://hive.blog/hive-192847/@keys-defender/anti-spam-efforts">Downvotes</a> of @keys-defender (and its trail) against abusers: &nbsp;</h6>

https://hive.blog/@amaliasteva -> plag
https://hive.blog/@dame.art/posts / https://hive.blog/@dameart/posts ->  reposting
https://hive.blog/@willy7855/posts -> plag
https://hive.blog/@eloy-drawing/posts -> id theft

Blacklisted farmer: https://peakd.com/@crystalan/payout

<i>+</i> Various reports thanks to my bot auto-detecting suspicious behavior:

![image.png](https://files.peakd.com/file/peakd-hive/keys-defender/23tvCb1BcS4a3DXb344yjMBS3JB3pN8jcJhuYRd1D34rnWU4iA3CvSv3dUKUkTyGsFjWy.png)


&nbsp;
- <sub><i>@keys-defender currently follows the hiveflagreward team's downvote trail</i></sub>

- <sub><i>@keys-defender is downvoting: [farming waves](https://hive.blog/hive-169321/@gaottantacinque/10-line-script-that-anyone-can-use-to-downvote-abuse-help-counteract-ongoing-farming-on-hive), [phishing waves](https://hive.blog/hive-138876/@keys-defender/new-phishing-wave-do-not-fall-for-it-there-is-no-mainnet-launch) and old [hive haters](https://hive.blog/hive-192847/@keys-defender/anti-spam-efforts).</i></sub>

<br><p>Followers of my downvote-trail:</p></sub> &nbsp; 7 <sub> &nbsp; (plus their own trail - about <b>$ 10</b> downvote power in total)</p> -> <p><B><a href="https://hive.vote/dash.php?i=15&id=3&user=keys-defender&type=2">PLEASE JOIN</a></B></p>

<br>

-----

&nbsp;
<h4>DEVELOPMENT UPDATE:</h4>

Not much development in May. I put on my calendar to do hive coding every wednesday night this month. 🤞

&nbsp;
<b>- Future development -</b>
My priorities remain the same:
1. Mute lists and tests in testing community using @key-defender.shh - waiting for @blocktrades's [fix](https://gitlab.syncad.com/hive/hivemind/-/issues/145) in hivemind to be released. (is it out?)
2. Formula to counteract exact votes (plus UI?) -- ** *deferred* **
3. Universal script to use new banlists. + other improvements + PR for condenser
4. Allow community to remove entries from ban lists
5. pwnd emails check (quick feature)
6. Abuse reports (rewarded) and separate abuse lists (plagiarism, farming, etc)
7. Tech-only proposal to cover expenses ??
8. Old (huge) backlog. Eg. bug fixes ( boring.. =] ).

😎
<br>

-----

<div class="pull-right">
<sub><b>My security disclosures for Hive:</b></sub>
<br><sub>- <sub><a href="https://hive.blog/hive-139531/@gaottantacinque/stored-xss-vulnerability-in-one-of-the-hive-frontends">XSS vulnerabilities in #########.com</a></sub></sub>
<br><sub>- <sub><a href="https://hive.blog/hive-139531/@gaottantacinque/defacement-phishing-vulnerability-in-one-of-the-most-used-hive-tools">XSS vulnerabilities in hive-db.com</a></sub>
<br>- <sub><a href="https://hive.blog/hive/@gaottantacinque/xss-found-in-one-of-drako-s-websites-will-add-details-after-it-s-patched">XSS vulnerabilities in scribe.hivekings.com</a></sub>
<br>- <sub><a href="https://hive.blog/hive/@gaottantacinque/hiveblockexplorer-com-is-vulnerable-to-stored-xss">XSS vulnerabilities in hiveblockexplorer.com</a></sub>
<br>- <sub><a href="https://hive.blog/steemit/@gaottantacinque/steemit-got-hacked">Malicious ads redirecting all Steemit iOS users to a phishing site</a></sub>
<br>- <sub><a href="https://hive.blog/security/@gaottantacinque/steemit-chat-is-unsafe">Reverse tabnabbing and clickjacking in steem.chat and steeemit registration page</a></sub>
</sub>
<br><br>
<sub><b>Other contributions:</b></sub>
<br><sub>- <sub><a href="https://hive.blog/hive-139531/@keys-defender/phishing-on-hive-no-more-solution-for-all-frontends">Universal script to prevent phishing in all Hive frontends</a></sub></sub>
<br><sub>- <sub><a href="https://peakd.com/hive-169321/@keys-defender/new-commands-and-ban-lists">Commands for community reports and ban lists</a><br><br></sub></sub>
</div>

<b>Keys-Defender features:</b><div class="pull-left">
<div>
- <sub><a href="https://hive.blog/steem/@gaottantacinque/the-keys-defender-bot-is-live-in-beta-mode"><b>Keys protection</b></a><sub>[live scan of transfers / posts / comments / other_ops. Auto-transfers to savings, auto-reset of keys, ..] {see automatic <a href="https://hive.blog/hive-138876/@keys-defender/keys-defender-compromised-posting-key-successfully-detected">posts on leak</a> and <a href="https://hive.blog/hive/@keys-defender/successfullyprotected-1600122002275">monthly reports</a>}</sub></sub>
<br><i>-</i> <sub><a href="https://hive.blog/hive/@keys-defender/new-feature-phishing-detection-and-auto-reply"><b>Phishing protection</b></a>
<sub>[live scan of commentsa and posts to warn users against known phishing campaigns and compromised domains, scan of memos]</sub></sub>
<br><i>-</i> <sub><a href="https://hive.blog/hivedev/@keys-defender/new-feature-added-to-keys-defender-plagiarism-detection"><b>Re-posting detection</b></a>
<sub>[mitigates the issue of re-posters]</sub></sub>
<br><i>-</i> <sub><a href="https://hive.blog/hive-139531/@keys-defender/new-feature-code-injections-attempts-detection-xss-sql-injections-csrf"><b>Code injections detection</b></a>
<sub>[live scan of blocks for malicious code targeting dapps of the Hive ecosystem]</sub></sub>
<br><i>-</i> <sub><a href="https://hive.blog/hive-192847/@keys-defender/anti-spam-efforts"><b>Anti abuse efforts</b></a>
<sub>[counteracts <a href="https://hive.blog/hive-192847/@keys-defender/anti-spam-efforts">spam from hive haters</a> and <a href="https://hive.blog/hive-169321/@gaottantacinque/10-line-script-that-anyone-can-use-to-downvote-abuse-help-counteract-ongoing-farming-on-hive">milking campaigns</a></a>]</sub></sub>
<br><br>
</div>
</div>

-----

<div class="pull-right"> <a href="https://discord.gg/SXuwsH7"> <sub><sub>Discord chat</sub></sub> <br><img src="https://images.hive.blog/DQmSFrtHjrjsR3y5R6SuBJLcDG9iQYtVebsBdpRHS3YwAgv/image.png"></a></div>
<div class="pull-left"><h6>To support this project:</h6>
<div class="pull-right">https://images.hive.blog/DQmWmRN7k741DbkG5jL19Y5h1H5tqhpHLJUtGiTgPUy3C4y/image.png</div>
</div>
<div class="pull-right">
<div class="pull-left">
- <b><sub>Delegations:</sub></b><br>
<sub><a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=10%20HP">10</a>, <a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=100%20HP">100</a>, <a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=200%20HP">200 HP</a>,<br><a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=500%20SP">500 HP</a>, <a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=1000%20SP">1000 HP</a></sub></div>
</siv>
<div class="pull-right">- <b><sub>Curation trail</sub></b>
<br><sub><sub>Follow <a href="https://hive.vote/dash.php?trail=keys-defender&i=1">my curation trail on hive.vote</a> to upvote all my posts with a fixed weight.</sub></sub></div>

</div>

-----

<div class="phishy"><b><sub>I do NOT receive funding through a proposal or running a node witness</b>.<br><b> &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; If you like what I'm doing please <p><b>upvote</b></p>, <a href="https://hivesigner.com/sign/delegateVestingShares?delegator=&delegatee=keys-defender&vesting_shares=100%20SP"><b>delegate 👆</b></a> or <a href="https://hive.vote/dash.php?trail=keys-defender&i=1"><b>auto-vote 👆</b></a> my posts.
Thx! 😊</sub></b></div>