# MetaMask/eth-phishing-detect

Utility for detecting phishing domains targeting Web3 users

Repository: https://github.com/MetaMask/eth-phishing-detect
Canonical: https://ross.abutalabs.com/products/eth-phishing-detect
Language: TypeScript
License: NOASSERTION
License Family: other
Last push: 2026-08-26T18:42:17+00:00

## Health v2 (maintenance only)
Score: 67/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 8, longevity 100
- inputs: {"age_days": 3318, "days_push": 7, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1320, forks 1101 (observed 2026-08-28T04:04:21.679197+00:00)

## What it is
A TypeScript utility and curated blocklist of malicious domains targeting Web3 and Ethereum users, maintained by MetaMask. It provides CLI and library functions for managing blocklist and allowlist entries, with the active phishing detection logic now moved into the MetaMask core phishing-controller package.

## Use cases
- check if a domain is a known crypto phishing site
- maintain a blocklist of malicious web3 domains
- add or remove domains from a phishing allowlist or blocklist
- integrate phishing domain detection into a wallet or browser extension
- audit history of domain blocklist submissions
- protect users from sites that steal cryptocurrency signing keys

## When to choose
- you need a curated, community-maintained list of Web3 phishing domains
- you are building a crypto wallet or browser extension that must warn users about phishing sites
- you want CLI and library helpers to manage blocklist/allowlist entries with safeguards against false positives

## When to avoid
- you need general-purpose (non-crypto) phishing or malware detection
- you need the runtime phishing detection engine itself, which now lives in MetaMask core's phishing-controller package
- you require real-time domain reputation scoring rather than a static curated list

## Facets
- artifact type: library
- maturity: maintenance
- function: security, cli, developer-tools
- domain: security, blockchain, developer-tools
- platform: cli, cross-platform
- tags: phishing-detection, blocklist, web3, ethereum, domain-blocklist, typescript, cryptocurrency, nodejs

## Member repositories
- MetaMask/eth-phishing-detect (main) score 67

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:21.679197+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:47:25.045349+00:00, confidence not recorded.
  - readme: https://github.com/MetaMask/eth-phishing-detect (fetched 2026-08-28T04:04:21.679197+00:00, sha c0198879158a)
  - registry_npm: https://registry.npmjs.org/eth-phishing-detect (fetched 2026-08-29T12:06:27.022229+00:00, sha 7bf74e6d0703)
- Data as of 2026-08-30T08:39:29.467469+00:00.