{
  "_comment": "T12 — CertStream brand patterns. Update as new phishing patterns emerge.",
  "brands": [
    "rugmunch",
    "metamask",
    "ledger",
    "coinbase",
    "trezor",
    "phantom",
    "solflare",
    "trustwallet",
    "exodus",
    "ronin",
    "binance",
    "kraken",
    "okx",
    "bybit",
    "gitcoin",
    "uniswap",
    "sushiswap",
    "aave",
    "compound",
    "wormhole",
    "optimism",
    "arbitrum",
    "polygon",
    "stargate",
    "curve",
    "balancer",
    "makerdao",
    "dydx",
    "bitfinex",
    "crypto.com",
    "kucoin",
    "huobi",
    "gate.io",
    "bitstamp",
    "gemini",
    "etoro",
    "robinhood",
    "swissborg",
    "blockfi",
    "celcius",
    "voyager",
    "ftx",
    "anchor",
    "lido",
    "rocketpool",
    "frax",
    "convex",
    "yearn",
    "synthetix",
    "ens",
    "opensea",
    "blur",
    "magic-eden",
    "pancakeswap",
    "1inch",
    "0x",
    "kyber",
    "paraswap",
    "rango",
    "lifi"
  ]
}