MetaShield Pro

Web3 security extension that blocks phishing sites and wallet drainers so you can use DeFi safely.

🛡️ MetaShield Pro — Web3 Wallet Security Shield MetaShield Pro is a non-intrusive on-device security extension built for users of MetaMask and MetaMask Wallet that protects against common Web3 threats including crypto phishing, fake airdrop claim sites, swap drainer attacks, fake dApps, signature drain scams, typosquatting, homograph attacks, and malicious newly-registered domains that attempt to trick users into connecting wallets or approving dangerous transactions. ──────────────────────────────── HOW IT PROTECTS YOU ──────────────────────────────── 🔥 REAL-TIME SWAP DRAINER BLOCKER (NEW v2.1.3) Stops the #1 most common Web3 drain pattern. MetaShield Pro deep-parses decentralized-exchange swap transaction calldata BEFORE your wallet confirmation appears, detecting the classic amountOutMinimum=0 attack (zero tokens returned to the user), same-token drain loops, and expired-deadline MEV-style traps. A prominent in-page alert immediately guides you to cancel dangerous swaps before funds leave your wallet. ⚠️ PHISHING & FAKE dAPP DETECTION Every page you visit is analyzed by a 7-layer on-device detection engine that flags: fake wallet-login phishing pages, lookalike typosquatted domains, wrong top-level domain clones, Unicode homograph attacks (foreign alphabet characters that visually impersonate Latin letters), fake airdrop and mint sites, and known scam URL keyword patterns. A full-screen glass-morphism warning overlay with one-click instant tab-close appears for any suspicious result above your configured risk threshold. 🚨 DOMAIN AGE HEURISTIC CHECK (NEW v2.1.3) Research shows the vast majority of crypto phishing domains are registered less than one week before being used in attacks. MetaShield Pro privately cross-checks every domain against the public Wayback Machine archive (no account, no API key, no third-party tracking). If a site prompting wallet interaction has zero archived web history or was registered just days ago, a critical red alert raises before any wallet connection. 🤝 SMART-CONTRACT SIGNATURE MONITORING Prevents unlimited token approval scams and gasless permit / permit2 style drain attacks. Whenever an untrusted site requests a signature for infinite-amount token approvals (UINT256_MAX), bulk marketplace listings, or off-chain permit messages, MetaShield Pro intercepts and clearly warns you before the wallet popup appears. Accidental one-signature full-wallet drains are eliminated. ✅ TRUSTED-SITE VERIFICATION BADGE A subtle non-intrusive green glowing "Verified Official" badge is injected in the page corner for recognized and widely-used Web3 platforms. You get an immediate visual confirmation you are on an authentic, well-known site before you connect a wallet or sign any message. 🎛️ FULLY USER CONTROLLABLE If MetaShield Pro ever warns on a site you personally trust, tap the "Whitelist this site" button inside the warning overlay and that domain will never be flagged again. All whitelist entries are stored 100% locally on your device in browser sandbox storage. Six individual protection toggles and an AI similarity threshold slider (50%–99%) let advanced users tune protection aggressiveness to their preference. ──────────────────────────────── 7-LAYER ON-DEVICE DETECTION ENGINE ──────────────────────────────── Layer 1 — Exact-match trusted-domain verification list Layer 2 — Typosquat Levenshtein distance similarity algorithm Layer 3 — Wrong top-level domain spoofing cross-check Layer 4 — Unicode homograph & mixed-script character analysis Layer 5 — Suspicious scam keyword pattern scanning Layer 6 — Known scam-domain blacklist + subdomain regex Layer 7 — Domain age + Wayback archive history heuristic ──────────────────────────────── USER INTERFACE ──────────────────────────────── • Live popup dashboard with current site risk level, scan stats, safe visits, threats blocked • Full-screen warning overlay with one-click dangerous-tab close button • Verified-site glowing badge with hover tooltip confirmation • 0–100% risk meter with Critical / High / Medium / Safe color bands • Recent threats history & aggregate protection counters on toolbar • Individual protection toggles + adjustable AI risk-threshold slider • Local-only JSON whitelist export and import backup • One-click report-scam and share-verified-site buttons ──────────────────────────────── 100% PRIVATE. NO DATA COLLECTION. EVER. ──────────────────────────────── MetaShield Pro does not collect, transmit, sell, share or store any information off your device. There is no signup, no account, no email, no remote server, no telemetry, no analytics, no crash-reporting SDK, and no advertising. All signature analysis, URL comparison, swap calldata parsing, domain age lookups, detection logic and preference processing run 100% locally inside your isolated Chrome profile. Settings live exclusively in Chrome's sandboxed chrome.storage.local and all data is irreversibly removed the instant you uninstall the extension. The broad host permission is required because wallet phishing attacks are not limited to a fixed whitelist and routinely appear on brand-new previously-unseen domains. Nothing from page content, keystrokes, or wallet activity is ever uploaded anywhere. ──────────────────────────────── GETTING STARTED — THREE STEPS ──────────────────────────────── 1. Add MetaShield Pro to Chrome from this page. 2. Accept the minimal, fully-transparent documented permissions. 3. Browse Web3 normally. MetaShield Pro runs silently in the background. If you ever land on a suspicious page, the warning overlay helps you leave instantly. If you see the green Verified badge, you are on a recognized well-known platform and can proceed with confidence. ✨ What's new in v2.1.3: • NEW Swap Drainer Calldata Parser blocks zero-amount-out DEX drain attacks • NEW Domain Age Heuristic with Wayback archive cross-check flags fresh phish • Signature monitor now also wraps legacy provider send fallback • Warning modal supports late UI refresh for async domain-age results • Re-calibrated risk score weighting for critical age-based threats • Zero new manifest permissions (same review-approved baseline) • All 49 build-time unit tests passing ──────────────────────────────── MetaShield Pro — Stay safe in the decentralized web.