Skip to content

Update phishing protection datasets to 1742170#5197

Open
github-actions[bot] wants to merge 1 commit into
mainfrom
update-phishing-protection-1742170
Open

Update phishing protection datasets to 1742170#5197
github-actions[bot] wants to merge 1 commit into
mainfrom
update-phishing-protection-1742170

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Jun 1, 2026

Processing phishingHashPrefix
Embedded SHA256: 39af079059a0536b6f47591d1e99fee02a16e8e0a83b50bc188b2679c5ab9d0f
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=phishing
Embedded revision: 1852160, remote revision: 1852166

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/phishingHashPrefixes.json
New SHA256: b78d7a473653099e0cff975f690d7f406cb216811e101d8c2277f4531dd83aed ✨
✅ phishingEmbeddedHashPrefixDataSHA updated with 616421 records

Processing phishingFilterSet
Embedded SHA256: 140a360dd02a471aa5471f0844e6e9f477afee9287b14957107c156cccbf796e
Fetching https://duckduckgo.com/api/protection/filterSet?category=phishing
Embedded revision: 1852160, remote revision: 1852166

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/phishingFilterSet.json
New SHA256: e1ec95b440f7352ad52ba0ea138f05bbafaf6d9d65834a39b939a7ed3feac7bc ✨
✅ phishingEmbeddedFilterSetDataSHA updated with 253778 records

Processing malwareHashPrefix
Embedded SHA256: 0fb973b202fea16bef16f4cc067728044d512ccbc1fbe1bbd936151c19d4d95d
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=malware
Embedded revision: 1852160, remote revision: 1852159

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/malwareHashPrefixes.json
🆗 Data not modified. Number of records: 5859

Processing malwareFilterSet
Embedded SHA256: 24a4fcd634120c7b70050128e675ed36ae22655e8e6a20e32d33f0afea06bb90
Fetching https://duckduckgo.com/api/protection/filterSet?category=malware
Embedded revision: 1852160, remote revision: 1852163

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/malwareFilterSet.json
🆗 Data not modified. Number of records: 858

Processing scamHashPrefix
Embedded SHA256: f727361e619b9c8d7ae3e54807de4786600a42303ac9c748256577ee88535531
Fetching https://duckduckgo.com/api/protection/hashPrefix?category=scam
Embedded revision: 1852160, remote revision: 1852162

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/scamHashPrefixes.json
New SHA256: 1b66b283511e9228f6aaf76e86896835865a1cd16b1f3b25f6e47c8b57802902 ✨
✅ scamEmbeddedHashPrefixDataSHA updated with 13131 records

Processing scamFilterSet
Embedded SHA256: 70281ab86acd62fc5469e7ccd92b2b5d218f70b5c6311c21f269c204d341da5e
Fetching https://duckduckgo.com/api/protection/filterSet?category=scam
Embedded revision: 1852160, remote revision: 1852171

writing to /home/runner/work/apple-browsers/apple-browsers/apple-monorepo/macOS/DuckDuckGo/MaliciousSiteProtection/Resources/scamFilterSet.json
🆗 Data not modified. Number of records: 1995

Using minimum revision: 1852163 (phishing: 1852166, malware: 1852163, scam: 1852171)
Updated revision from 1852160 to 1852163


Note

Medium Risk
Changes offline threat lists and integrity hashes used for URL blocking; incorrect data could affect false positives/negatives until remote updates apply.

Overview
Refreshes embedded malicious site protection data shipped with the macOS app by bumping EmbeddedDataProvider metadata in MaliciousSiteProtectionManager.swift.

embeddedDataRevision moves from 1742170 to 1852163 (minimum revision across phishing, malware, and scam feeds). All six SHA-256 constants for bundled phishing, malware, and scam hash-prefix and filter-set JSON are updated so runtime verification matches the new on-disk resources.

Per the automation notes, phishing hash-prefix and filter-set bundles were regenerated (large record counts); scam hash-prefix data changed; malware hash/filter and scam filter content were already current but constants now reflect the synced revision 1852163.

Reviewed by Cursor Bugbot for commit 9ce828f. Bugbot is set up for automated code reviews on this repo. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant