Skip to content

Synchronize repository#265739

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:bb2c5f3a-dcf4-4405-b030-d23defd1870a
Jul 8, 2026
Merged

Synchronize repository#265739
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:bb2c5f3a-dcf4-4405-b030-d23defd1870a

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 8, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
Single blocklist addition with no application logic changes; low risk of false positives given the obvious impersonation pattern.

Overview
Adds nav---sso---coinbasepro-cdn---r---auths.webflow.io to the MetaMask phishing blocklist in src/config.json (automated config sync).

The hostname mimics Coinbase Pro SSO/CDN/auth branding and is hosted on Webflow, consistent with other scam domains already on the list. The only structural change is a trailing comma on the prior last entry so the JSON array stays valid.

Reviewed by Cursor Bugbot for commit 03c3775. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 8, 2026
@samczsun samczsun merged commit d939eb5 into MetaMask:main Jul 8, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the bb2c5f3a-dcf4-4405-b030-d23defd1870a branch July 8, 2026 14:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants