Skip to content

Synchronize repository#267964

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:f9a68ba0-ed03-4fb9-acd7-adfc47825203
Jul 16, 2026
Merged

Synchronize repository#267964
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:f9a68ba0-ed03-4fb9-acd7-adfc47825203

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 16, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Data-only blocklist update with no application logic changes; lowers exposure by expanding known phishing domains.

Overview
Automated sync updates the phishing detector blocklist in config.json (consumed by PhishingDetector in src/index.ts).

Removes meta-nexus-5xn.pages.dev from the list. Adds wallet-impersonation domains rabby.io-wallet.com and trezor.io-wallet.com, plus several Rainbet-related phishing domains (e.g. rainbet9.com, rain-bet.hu, rainbet-casino-australia.com, and related variants). Also fixes list formatting by adding the missing comma after rainbet8.com so the JSON stays valid.

Reviewed by Cursor Bugbot for commit 3c879c5. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 16, 2026
@samczsun samczsun merged commit 9c68b83 into MetaMask:main Jul 16, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the f9a68ba0-ed03-4fb9-acd7-adfc47825203 branch July 16, 2026 03:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants