Skip to content

Synchronize repository#265913

Merged
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:051dc5a2-ca33-4b79-8dbf-efef9a60b106
Jul 9, 2026
Merged

Synchronize repository#265913
samczsun merged 1 commit into
MetaMask:mainfrom
security-alliance-bot:051dc5a2-ca33-4b79-8dbf-efef9a60b106

Conversation

@security-alliance-bot

@security-alliance-bot security-alliance-bot commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

This is an automated pull request to synchronize this repository with the latest configuration


Note

Low Risk
List-only changes to phishing detection config with no application logic or auth/data-path impact.

Overview
Updates the src/config.json domain denylist as part of an automated upstream sync.

Removes five Trust Wallet–related phishing hostnames (allocation-trustwallet.live, trustwallet-support-center.com, trustwallet-verified.com, and two xn-trustwallet-tbf punycode domains). Adds help-metskxt.gitbook.io alongside the existing metamzklogoo.gitbook.io MetaMask-impersonation GitBook entry, with a small JSON comma fix on the prior last item.

Reviewed by Cursor Bugbot for commit fc9dc83. Bugbot is set up for automated code reviews on this repo. Configure here.

@samczsun samczsun added the blocklist addition Issue or PR requesting addition of a domain to the blocklist label Jul 9, 2026
@samczsun samczsun merged commit 3e0543b into MetaMask:main Jul 9, 2026
6 checks passed
@security-alliance-bot security-alliance-bot deleted the 051dc5a2-ca33-4b79-8dbf-efef9a60b106 branch July 9, 2026 00:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

blocklist addition Issue or PR requesting addition of a domain to the blocklist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants