To enable dApps in order to explore blockchain, the wallet injects the Ethereum web3 API into the javascript environment of every website. When you browse that seem suspiciously similar to well-known phishing targets, MetaMask can notify you.
https://gemenixloign.gitbook.io/login/
https://jmenialogi.gitbook.io/us/
https://krcrkeenlogin.gitbook.io/us/
https://krakkenlogix.gitbook.io/us/
https://upholdololgon.gitbook.io/us/
https://upholdsloginapp.gitbook.io/us/
https://kuocionlognix.gitbook.io/us/
https://kucoinlogin-x.gitbook.io/us/
https://metamcskloign-us.gitbook.io/us/
https://metmaskzlogin.gitbook.io/us/
https://mememaskwallet.gitbook.io/us/
https://cobaseprolognix.gitbook.io/us/
https://conbasiprologni.gitbook.io/us/
https://conisbiseprologin.gitbook.io/us/
https://coenbasecomloge.gitbook.io/us/
https://conbasiecomlogan.gitbook.io/us/
https://koinbaasesign-us.gitbook.io/us/
https://conbase-esignin.gitbook.io/us/
https://phamtom-wallte.gitbook.io/us/
https://atomicgowallet.gitbook.io/us/
https://exchange-uniwap.gitbook.io/us/