Skip to content

Synchronize repository#266535

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:c07722fc-e9ba-487d-9d8d-633885474e81
Jul 11, 2026
Merged

Synchronize repository#266535
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:c07722fc-e9ba-487d-9d8d-633885474e81

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 11, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Data-only blacklist expansion for known scam domains; low risk unless a legitimate host is mis-listed.

Overview
Extends the MetaMask phishing detector blacklist in config.json with five new domains (cdn-iorabbyapps.wixstudio.com, apps-iorabbyextnsion.wixstudio.com, ioapps-rabby.wixstudio.com, appsiorabbycdn.wixstudio.com, plus a trailing-comma fix on the existing homeapp-iorabbycdn.wixstudio.com entry). They sit with other Rabby/Coinbase typosquat hosts on wixstudio.com and gitbook.io.

checkDomain will treat these hosts as phishing via the synced @metamask/phishing-controller config—no application logic changes.

Reviewed by Cursor Bugbot for commit 254c168. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 11, 2026
@samczsun
samczsun merged commit b9815cd into MetaMask:main Jul 11, 2026
6 checks passed
@security-alliance-bot
security-alliance-bot deleted the c07722fc-e9ba-487d-9d8d-633885474e81 branch July 11, 2026 10:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants