Why we flag

What we flag

We warn on domains and contracts that appear in trusted blocklists or that our team has reviewed. Our goal is to reduce wallet-drain and phishing risk, not to block legitimate sites.

• Phishing & scam domains — Sites that mimic wallets, exchanges, or projects to steal credentials or funds.
• Impersonation — Domains that look like known brands (e.g. uniswaq.org vs uniswap.org).
• Risky contracts & tokens — Honeypots, drainers, or tokens tied to known scams.

Where we get data

We combine multiple sources and refresh regularly:

• OpenPhish — Phishing URL feed.
• CryptoScamDB — Crypto-specific scam domains and contracts.
• Community lists — Curated GitHub blocklists (e.g. AntiScam-Squad).
• User reports — Domains and contracts reported via the extension; we review before adding.

Sample detections

Examples of the kind of entries we flag (anonymized where needed). Each row shows the type of threat, reason, and source.

Type	Reason	Source	Confidence
Domain	Phishing site mimicking wallet provider	OpenPhish	High
Domain	Known scam / crypto drainer	CryptoScamDB	High
Domain	Impersonation of DEX	Community list	Medium
Contract	Honeypot / non-transfer token	CryptoScamDB	High
Domain	Reported by user, verified	RugsAlert	Medium

Recently flagged domains

A short feed of domains we’ve recently added to our blocklist (curated). We update this regularly.

• phishing-wallet-[redacted].com Phishing / wallet drainer OpenPhish · High
• fake-dex-[redacted].io DEX impersonation CryptoScamDB · High
• scam-airdrop-[redacted].xyz Fake airdrop / credential harvest Community · Medium
• drainer-[redacted].com Known drainer domain CryptoScamDB · High
• user-reported-[redacted].net User report, reviewed RugsAlert · Medium

Think we got something wrong? Report it or use “Report it” in the extension.