MetaMask / eth-phishing-detect

eth-phishing-detect List of malicious domains targeting Web3 users. For checking why a given domain was blocked, there is a third-party search tool maintained by ChainPatrol. Blocking Policy We are constantly evolving the ideal policy that guides this list, but a few clearly defined rules have emerged. We will be quick and decisive to block websites that: • Impersonate other known and established sites. • Use their interfaces to collect user signing keys (especially cryptocurrency keys) and send them back to home servers. There are other grounds for blocking, and we will ultimately do our best to keep our users safe. Basic usage UPDATE: The phishing detector has been moved here. Contributions To keep a tidy file, use the CLI or library functions to modify the list. Adding new domains Removing existing domains Safeguards We maintain a list of domains pulled from various sources in . Each file is plaintext with one host per domain. These domains are used to reduce the risk of false positives. If you need to block a domain that is featured on one of these lists, you'll need to add a bypass to . To update the lists, run . Note that you'll need a CoinMarketCap Pro API key. Auditing submissions & removals Running the command below will pull all pull requests associated to example.com.