Skip to content

Synchronize repository#265735

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:95e0bbe0-c4b8-45e0-8ce0-51662be26e70
Jul 8, 2026
Merged

Synchronize repository#265735
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:95e0bbe0-c4b8-45e0-8ce0-51662be26e70

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Medium Risk
Shrinking the phishing blocklist can let previously blocked scam domains pass detection until upstream changes are reconciled.

Overview
This automated sync updates src/config.json for @metamask/phishing-controller.

It removes three blocked hostnames from the denylist: bitcoinevalution.cc, cryptostp.cc, and connect.web3ledgersecurity.com. Those domains will no longer be flagged as phishing by checkDomain in src/index.ts.

Reviewed by Cursor Bugbot for commit 057e5f4. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 8, 2026
@samczsun samczsun merged commit ad38c4e into MetaMask:main Jul 8, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 95e0bbe0-c4b8-45e0-8ce0-51662be26e70 branch July 8, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants