Skip to content

Synchronize repository#266741

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:0748123f-4ef1-4c72-99fd-94e4b3177a4b
Jul 12, 2026
Merged

Synchronize repository#266741
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:0748123f-4ef1-4c72-99fd-94e4b3177a4b

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 12, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Data-only blocklist maintenance in config; no application logic changes, though removing two domains slightly reduces coverage until upstream re-adds them if still malicious.

Overview
Automated sync updates src/config.json’s blacklist phishing domain list.

Removals: Drops worldilbetryfinacnial.com and walrus-app-2-ihs24.ondigitalocean.app from the blocklist.

Additions: Appends 75 new blocked hostnames (e.g. MetaMask/Uniswap/Coinbase/Trust Wallet–style lures, secure-chat.* variants, treasury/refund/claim/governance scams, and related typosquats). Fixes JSON by adding a trailing comma after refund-hub.online before the new entries.

Reviewed by Cursor Bugbot for commit ff8ef4b. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 12, 2026
@samczsun samczsun merged commit a3d00f8 into MetaMask:main Jul 12, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 0748123f-4ef1-4c72-99fd-94e4b3177a4b branch July 12, 2026 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants