# Urgent Inquiry: Suspicious Warning Message from MetaMask on BOOMERANG Website

**URL:** <https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881>\
**Category:** General\
**Created:** [May 4, 2024, 11:44pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881 "2024-05-04T23:44:02Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 4, 2024, 11:44pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/1 "2024-05-04T23:44:02Z")

</div>

Dear MetaMask Support Team,

We have been conducting research on a company that we suspect may be operating a fraudulent arbitrage trading AI Bot. Recently, we noticed a warning message on their website, (app-boomerang . trade) purportedly from MetaMask. Our team, “The Avengers,” suspects that this warning may be self-generated by the company using a 303 URL redirect.

Could you please verify whether this warning is indeed legitimate and originates from MetaMask? Furthermore, we are concerned about the implications of this warning. Should we be alarmed?

Over the past five months, we have observed transactions totaling $140 million associated with this company’s sale of licenses. The fact that they are now reporting issues on their launch day, seemingly stemming from their own coding, is raising red flags for us.

We appreciate any assistance or clarification you can provide on this matter.

Thank you for your attention to this urgent issue.

Danny de Hek - The Crypto Ponzi Scheme Avenger

---

<div class="post-metadata">

**Author:** ![nakedwinnie](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/nakedwinnie/32/5551_2.png) [@nakedwinnie](https://community.metamask.com/u/nakedwinnie)\
**Post date:** [May 6, 2024, 2:55pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/2 "2024-05-06T14:55:34Z")

</div>

Can you share a screenshot of the warning message that you see?

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 7, 2024, 1:10am UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/3 "2024-05-07T01:10:13Z")

</div>

![Screenshot 2024-05-07 at 1.08.43 PM](https://europe1.discourse-cdn.com/metamask/original/3X/c/6/c6b2cfd4c0ad810bc85048f1a422219f65a5f456.png)  
This is the screenshot before and after if you go to the website address at forward to the URL that you see in the screenshot  
 ![Screenshot 2024-05-07 at 1.09.17 PM](https://europe1.discourse-cdn.com/metamask/original/3X/e/e/eec208c3a2adf00be364629a87ec8ea7e5e20ddf.jpeg)

---

<div class="post-metadata">

**Author:** ![nakedwinnie](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/nakedwinnie/32/5551_2.png) [@nakedwinnie](https://community.metamask.com/u/nakedwinnie)\
**Post date:** [May 7, 2024, 2:15pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/4 "2024-05-07T14:15:59Z")

</div>

This is a legitimate warning from MetaMask.

You can confirm on the GitHub repo here where it originates from:

> **[GitHub - MetaMask/eth-phishing-detect: Utility for detecting phishing domains...](https://github.com/MetaMask/eth-phishing-detect)**
>
> Utility for detecting phishing domains targeting Web3 users - MetaMask/eth-phishing-detect

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 7, 2024, 8:10pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/5 "2024-05-07T20:10:53Z")

</div>

Thank you so much for this information, The main scammer ShaveZ has claimed they are going to setup a new DOMAIN for the APP-BOOMERANG . Trade it used to be BOOMERANG . Trade so how will you update the warning when they release the new domain for the site?

---

<div class="post-metadata">

**Author:** ![nakedwinnie](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/nakedwinnie/32/5551_2.png) [@nakedwinnie](https://community.metamask.com/u/nakedwinnie)\
**Post date:** [May 7, 2024, 8:50pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/6 "2024-05-07T20:50:36Z")

</div>

If a new domain is made then it can be blocked again on the blacklist. Are you in contact with the scammer?

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 9, 2024, 12:06am UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/7 "2024-05-09T00:06:27Z")

</div>

You can’t make this shit up, they are telling people that MetaMask warning doesn’t mean shit.

As per latest updates from Shavez, here is the test link to test AI Bot on Boomerang DAPP :  
testing. app-boomerang .trade

This is just meant for optimizing AI and not trading. The test aims to broaden the spectrum of profitable pairs available to all the existing and new licence holders. Do not execute any trades, just create logs for the development team.

_INSTRUCTIONS:_

- As you use the link, MMW will issue phishing website warning, just select “continue to the site”
- As tester we only need to select available trade size one at a time, select coin as WMATIC (for the first few hours) and POLYGON as network and let the AI suggest all pairs for us.
- Repeat this process as many times as possible for each different coin in the list later on as instructed and for each different trade sizes through out the day.
- The swap is not yet connected, so trades cannot be executed. DO NOT ATTEMPT.
- Next updates will be suggested soon, stay tuned.

---

<div class="post-metadata">

**Author:** ![nakedwinnie](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/nakedwinnie/32/5551_2.png) [@nakedwinnie](https://community.metamask.com/u/nakedwinnie)\
**Post date:** [May 9, 2024, 2:07pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/8 "2024-05-09T14:07:42Z")

</div>

Would you be able to create a ticket to contact the support team please,

- Visit : [https://support.metamask.io/](https://support.metamask.io/)

- Click the large blue “start a conversation” bubble in the upper middle of page, looks like this:

 ![Screenshot 2024-05-07 145648](https://europe1.discourse-cdn.com/metamask/original/3X/0/2/02f4fd71bf189c37f85381e5575aeefdd8a906d2.png)

- This will connect you to a bot at first, answer some questions and it will open a ticket for you with an agent.

Remember - NOBODY, including from support, will ask for your secret recovery phrase or for you to input it onto any website for confirmation.

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 9, 2024, 9:13pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/9 "2024-05-09T21:13:40Z")

</div>

Thanks mate appreciate it but I have already done that and haven’t heard anything back

---

<div class="post-metadata">

**Author:** ![nakedwinnie](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/nakedwinnie/32/5551_2.png) [@nakedwinnie](https://community.metamask.com/u/nakedwinnie)\
**Post date:** [May 9, 2024, 9:32pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/10 "2024-05-09T21:32:52Z")

</div>

Was a ticket created for you?

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 9, 2024, 9:49pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/11 "2024-05-09T21:49:06Z")

</div>

Yes see MetaMask Ticket #1173226 Security\_Concern

---

<div class="post-metadata">

**Author:** ![dehek](https://dub1.discourse-cdn.com/metamask/user_avatar/community.metamask.com/dehek/32/35624_2.png) [@dehek](https://community.metamask.com/u/dehek)\
**Post date:** [May 12, 2024, 7:24pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/12 "2024-05-12T19:24:23Z")

</div>

> [@nakedwinnie](#):
>
> Was a ticket created for you?

WE ARE ALL SATOSHI / BOOMERANG have stripped all the naughty code out of the website and the website is not functional any more. I’m sure you guys are monitoring the website and will give the warning once they go live again?

---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/metamask/original/3X/3/8/3812168020a49f264784b1dbfcf12435abbb09ad.png) [@system](https://community.metamask.com/u/system)\
**Post date:** [June 3, 2024, 11:44pm UTC](https://community.metamask.com/t/urgent-inquiry-suspicious-warning-message-from-metamask-on-boomerang-website/28881/13 "2024-06-03T23:44:17Z")

</div>

Closed on June 3, 2024, 11:44pm UTC

This topic was automatically closed after 30 days. New replies are no longer allowed.
