MetaMask / eth-phishing-detect

Utility for detecting phishing domains targeting Web3 users
Other
1.09k stars 946 forks source link

Bitballoon incorrectly flagged #1081

Closed sevwebdev closed 6 years ago

sevwebdev commented 6 years ago

I can't seem to be able to access bitballoon.com anymore (and a few of my websites are hosting on it). I believe it has been incorrectly flagged

409H commented 6 years ago

Are you saying MetaMask is blocking access? Malwarebytes redirects away for me

sevwebdev commented 6 years ago

yes

On Sat, Mar 3, 2018 at 8:37 PM, H notifications@github.com wrote:

Are you saying MetaMask is blocking access? Malwarebytes redirects away for me

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/MetaMask/eth-phishing-detect/issues/1081#issuecomment-370173912, or mute the thread https://github.com/notifications/unsubscribe-auth/AVl_AHSrEvPc18_2-Snuw9cG-B3GbBjbks5tavEBgaJpZM4Sa2I5 .

-- Severine Baudrand 0638931533

sevwebdev commented 6 years ago

MetaMask is blocking access yes Here is a screenshot of what I see when I try to go on https://www. bitballoon.com https://www.bitballoon.com Do you think you can do something ? Or do I have to deactivate MetaMask ? Thank you !

On Sat, Mar 3, 2018 at 9:43 PM, Severine Baudrand < severine.baudrand@gmail.com> wrote:

yes

On Sat, Mar 3, 2018 at 8:37 PM, H notifications@github.com wrote:

Are you saying MetaMask is blocking access? Malwarebytes redirects away for me

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/MetaMask/eth-phishing-detect/issues/1081#issuecomment-370173912, or mute the thread https://github.com/notifications/unsubscribe-auth/AVl_AHSrEvPc18_2-Snuw9cG-B3GbBjbks5tavEBgaJpZM4Sa2I5 .

-- Severine Baudrand 0638931533

-- Severine Baudrand 0638931533

409H commented 6 years ago

Ah, I blacklisted bitballoon because it was being used to host a lot of trust-trading scam sites (see https://urlscan.io/result/2adb135c-346f-45ea-a006-aba4b9c56a95#summary)

409H commented 6 years ago

Please allow ~10minutes for caches to update

sevwebdev commented 6 years ago

Thank you for fixing my problem :)

On Sun, Mar 4, 2018 at 1:24 AM, H notifications@github.com wrote:

Please allow ~10minutes for caches to update

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/MetaMask/eth-phishing-detect/issues/1081#issuecomment-370191197, or mute the thread https://github.com/notifications/unsubscribe-auth/AVl_AKvF6JuLjkwUo8sXLQlWQCJ-ge6Fks5tazRQgaJpZM4Sa2I5 .

-- Severine Baudrand 0638931533

x-ji commented 6 years ago

BitBalloon seems to be still blocked in my case?

sevwebdev commented 6 years ago

Yes, it is blocked again for me as well

On Sat, Apr 7, 2018 at 11:14 AM, JI Xiang notifications@github.com wrote:

BitBalloon seems to be still blocked in my case?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/MetaMask/eth-phishing-detect/issues/1081#issuecomment-379455558, or mute the thread https://github.com/notifications/unsubscribe-auth/AVl_AJ8Mr5Gt8TsRIHRKIH_83FpGQGL5ks5tmIOJgaJpZM4Sa2I5 .

-- Severine Baudrand 0638931533

409H commented 6 years ago

Hi, I blacklisted the domain bitballoon.com because it was the goto place to host trust trading scam sites, and blacklisting that domains blacklists all subdomains

0xs34n commented 6 years ago

My bitballoon website is blacklisted as well. Is there a workaround for this?

409H commented 6 years ago

@seanjameshan please open a new issue with your bitballoon domain and I shall review&whitelist

hypeboard commented 6 years ago

I have started a petition to try and get MetaMask to respond to whitelist requests in a timely manner. If you feel they are hurting your ability to do business please sign https://www.change.org/p/metamask-io-have-metamask-io-respond-to-whitelist-requests-in-a-timely-manner

blurpesec commented 6 years ago

I think that this should be unbanned. There is a lot of risk associated with it, but I believe that Metamask shouldn't be blocking users from using a legitimate website until there is a method to turn on/off the domain blocking section of MetaMask extension. See PR: #1874