# False positive malicious website

**URL:** <https://community.metamask.io/t/false-positive-malicious-website/30614>\
**Category:** Support\
**Created:** [August 5, 2025, 11:31am UTC](https://community.metamask.io/t/false-positive-malicious-website/30614 "2025-08-05T11:31:37Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![mrcrix](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@mrcrix](https://community.metamask.io/u/mrcrix)\
**Post date:** [August 5, 2025, 11:31am UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/1 "2025-08-05T11:31:37Z")

</div>

The domain I am working on has been flagged as malicious by MetaMask from one day to the next. I tried reaching out on GitHub and got replies from different people who redirected me to other websites for assistance—some of which were even flagged as malicious by Chrome!

After some research, I discovered an external service (blockaid (dot) co) that appears to work with MetaMask to detect malicious or scam websites. They replied as follows:

_After a thorough investigation, we have found that the flagging was indeed incorrect. The flagging has been modified accordingly._  
_We apologize for any inconvenience this might have caused and appreciate your understanding as we strive to maintain the highest security standards._

However, 14 days have passed and nothing has changed. In the meantime, I tried to find out who flagged our website as malicious and why, but I haven’t found any useful information.

I tried also in links written in github MetaMask support page

MetaMask (dot) github (dot) io (slash) eth-phishing-detect  
app (dot) chainpatrol (dot) io

Today, I received another reply saying that, on their end, our website is now whitelisted—or at least no longer flagged as malicious—but the issue still persists. When visiting lucky16 (.app) using a mobile browser **inside** MetaMask, the domain is still flagged as malicious, and nobody seems to know why.

Is there anyone who can point me in the right direction to understand the cause of this flag? We are a small community, and in three years, nobody has ever been scammed. We have no disputes or user reports, so I truly don’t understand the reason behind this negative flag.

Any help would be greatly appreciated. Thank you!

---

<div class="post-metadata">

**Author:** ![Coffee7643](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.io/coffee7643/32/36480_2.png) [@Coffee7643](https://community.metamask.io/u/Coffee7643)\
**Post date:** [August 5, 2025, 11:46am UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/2 "2025-08-05T11:46:38Z")

</div>

> [@mrcrix](#):
>
> Is there anyone who can point me in the right direction to understand the cause of this flag? We are a small community, and in three years, nobody has ever been scammed. We have no disputes or user reports, so I truly don’t understand the reason behind this negative flag.

Hi and thank you for reaching out. The usual procedure to follow in situations like this is to create a github issue here [GitHub · Where software is built](https://github.com/metamask/eth-phishing-detect/issues), here’s some more info that might help ['Deceptive site ahead' when trying to connect to a site | MetaMask Help Center](https://support.metamask.io/stay-safe/safety-in-web3/deceptive-site-ahead-when-trying-to-connect-to-a-site/#reporting)

If you haven’t create an issue there yet, I’d recommend doing so! If you have other questions please let us know.

---

<div class="post-metadata">

**Author:** ![mrcrix](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@mrcrix](https://community.metamask.io/u/mrcrix)\
**Post date:** [August 5, 2025, 12:21pm UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/3 "2025-08-05T12:21:39Z")

</div>

Thank you. Yes, I already did that, but it was useless. I got responses from people telling me to ask for help on certain websites—when I tried to visit them, one was flagged as malware by Chrome, and another just pointed me to a different site… and finally, there was _deshvin_.

He said that since he didn’t like the layout, he _assumed_ it was a scam. Can you imagine? Just because he didn’t like the design, he flagged it as a scam—with no reason or evidence whatsoever.

That’s why I’m here again, trying to find another path. We are a registered company operating fully legally, we have **never** scammed anyone, we have **no** complaints from users, and we’ve done **nothing** wrong. But as long as people like _deshvin_—who seems to be acting as the sole decision-maker—can flag websites arbitrarily, we’re stuck in this situation.

So, I’m here hoping someone can help us find a real solution to get this flag removed.

---

<div class="post-metadata">

**Author:** ![Coffee7643](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.io/coffee7643/32/36480_2.png) [@Coffee7643](https://community.metamask.io/u/Coffee7643)\
**Post date:** [August 5, 2025, 12:48pm UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/4 "2025-08-05T12:48:34Z")

</div>

> [@mrcrix](#):
>
> That’s why I’m here again, trying to find another path. We are a registered company operating fully legally, we have **never** scammed anyone, we have **no** complaints from users, and we’ve done **nothing** wrong. But as long as people like _deshvin_—who seems to be acting as the sole decision-maker—can flag websites arbitrarily, we’re stuck in this situation.

Thanks for providing more info, have you tried explaining this in the gh issue as well? Also can you please share the issue # ? Thank you!

---

<div class="post-metadata">

**Author:** ![mrcrix](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@mrcrix](https://community.metamask.io/u/mrcrix)\
**Post date:** [August 5, 2025, 1:08pm UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/5 "2025-08-05T13:08:12Z")

</div>

Hi thank you again for your help. yes I can send you the issue# MetaMask/eth-phishing-detect/issues/175702  
I tried to check in the phishing search tool but our domain is not listed so I dont think there is any relation with phishing.

Let me know, thank you!

Cris

---

<div class="post-metadata">

**Author:** ![Coffee7643](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.io/coffee7643/32/36480_2.png) [@Coffee7643](https://community.metamask.io/u/Coffee7643)\
**Post date:** [August 5, 2025, 1:18pm UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/6 "2025-08-05T13:18:42Z")

</div>

> [@mrcrix](#):
>
> 175702

I’ll follow up with the team and let you know here once I hear anything back, thank you for sharing all the info above!

---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/metamask/original/3X/3/8/3812168020a49f264784b1dbfcf12435abbb09ad.png) [@system](https://community.metamask.io/u/system)\
**Post date:** [September 4, 2025, 11:31am UTC](https://community.metamask.io/t/false-positive-malicious-website/30614/7 "2025-09-04T11:31:37Z")

</div>

This topic was automatically closed after 28 days. New replies are no longer allowed.
