MetaMask/eth-phishing-detect

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1320 stars · 1101 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A TypeScript utility and curated blocklist of malicious domains targeting Web3 and Ethereum users, maintained by MetaMask. It provides CLI and library functions for managing blocklist and allowlist entries, with the active phishing detection logic now moved into the MetaMask core phishing-controller package.

Use cases

• check if a domain is a known crypto phishing site
• maintain a blocklist of malicious web3 domains
• add or remove domains from a phishing allowlist or blocklist
• integrate phishing domain detection into a wallet or browser extension
• audit history of domain blocklist submissions
• protect users from sites that steal cryptocurrency signing keys

When to choose

• you need a curated, community-maintained list of Web3 phishing domains
• you are building a crypto wallet or browser extension that must warn users about phishing sites
• you want CLI and library helpers to manage blocklist/allowlist entries with safeguards against false positives

When to avoid

• you need general-purpose (non-crypto) phishing or malware detection
• you need the runtime phishing detection engine itself, which now lives in MetaMask core's phishing-controller package
• you require real-time domain reputation scoring rather than a static curated list

Facets

library · maturity maintenance

security cli developer-tools security blockchain developer-tools cli cross-platform phishing-detection blocklist web3 ethereum domain-blocklist typescript cryptocurrency nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="MetaMask/eth-phishing-detect")