search

MetaMask / eth-phishing-detect

Utility for detecting phishing domains targeting Web3 users
Other
1.09k stars 945 forks source link

[Legitimate Site Blocked] metamask.market #5849

Closed teletonn closed 1 year ago

teletonn commented 2 years ago

http://metamask.market/

Hi! I've just registerd this domain, but can't access it, browser telling me its unsafe, but its NEW domain and its mine )) We don't want to compromise MetaMask, more, we'll give link and instruction to their site, because we'll building NFT Marketplace with metamask authorization in its center. How can we get out from this block? Thanks.

trn1ty commented 2 years ago

The fuzzy detection happening here is that you registered metamask.[TLD] and metamask.io is a legitimate website, and users of metamask.io are frequently targeted in phishing attacks.

metamask.market is rightfully blocked because this appears to be an official MetaMask site and is not. MetaMask is a registered trademark of ConsenSys Software Incorporated. A quick skim of 15 U.S.C. §1125 indicates that naming your site "MetaMask Market" or some form of it can make you liable for civil action by ConsenSys.

Your naming your domain metamask could have legal consequences and anyway for the context of this repository it's still too big of a risk (in my opinion without authority) to let metamask.market into the allowlist, on the off-chance it becomes a scam later. You should probably just rename your service.