MetaMask / MetaMask/phishing-warning

Display different warning for fuzzylist matches (i.e. suspected imitation websites)

Open
#37 0 comments 1 reaction 0 assignees View on GitHub
enhancement
Dominant language
TypeScript
Stars
20
Forks
17
PR merge metrics
No merged PRs in 30d

Description

Currently we have a list of malicious sites that we check against, and a list of sites that are at risk of being imitated (the "fuzzylist"). But we show the same warning for both. Most of the complaints we get in `eth-phishing-detect` about wrongly-blocked sites are due to the fuzzylist blocking something that _clearly_ isn't an imitator, it just has a similar name.

We could show a different warning for the fuzzylist matches. Instead of saying the site is malicious, we could tell the user that it looks like it might be a ____ imitator, and if so to not trust it. Maybe warrants more of a "cautionary" warning in general.

Contributor guide

No contributing guide indexed for this repository

Research direction

No files, tests, or entry points are named. Start by locating the warning-rendering path and where fuzzylist matches are distinguished from malicious-site matches; done means fuzzylist matches receive a separate cautionary warning without changing the malicious-site warning.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.