Skip to content

Remove false positive polymarket-il.com from blocklist (+ allowlist)#269132

Closed
itayozer9 wants to merge 1 commit into
MetaMask:mainfrom
itayozer9:allowlist-polymarket-il
Closed

Remove false positive polymarket-il.com from blocklist (+ allowlist)#269132
itayozer9 wants to merge 1 commit into
MetaMask:mainfrom
itayozer9:allowlist-polymarket-il

Conversation

@itayozer9

@itayozer9 itayozer9 commented Jul 19, 2026

Copy link
Copy Markdown

Summary

Removal of a false positive, filed by the domain owner. Companion to removal request #269126.

polymarket-il.com is a Hebrew-language education & community site about Polymarket for Israeli users (a course and a free market-analytics dashboard on a subdomain). It links out to the real polymarket.com via Polymarket's public referral program — it does not imitate Polymarket's interface and operates no wallet flows.

Why it cannot be phishing by the mechanics this list blocks for

  • Zero wallet interaction anywhere on the site: no window.ethereum access, no WalletConnect / wagmi / ethers, no transaction prompts.
  • Never requests a Secret Recovery Phrase or private key. Authentication is email/password + email OTP (Supabase) only.
  • Google Safe Browsing: clean (both apex and subdomains).
  • Not a typosquat: not a fuzzylist match; "polymarket-il" is a clear regional-community name, and the site prominently identifies itself as an independent Israeli community.

How the entry got here

The domain was added to the hotlist on 2026-07-19 11:22 UTC (eth_phishing_detect_config.blocklist, per the diffsSince API) via an automated feed import — apparently a brand-keyword match on "polymarket". The site's content did not change; it has operated as an education site since launch.

Change

Removes polymarket-il.com from the blocklist and adds it to the allowlist to prevent automated re-listing by the same feed.

Happy to verify domain ownership however you prefer (DNS TXT record / file upload / email from an @polymarket-il.com address). A ChainPatrol dispute for the same listing was filed on 2026-07-19.

🤖 Generated with Claude Code

https://claude.ai/code/session_01TSwsA8crooq2vUhUqXCvms


Note

Low Risk
Single-domain list maintenance in config only; no runtime logic, auth, or data-path changes.

Overview
Removes polymarket-il.com from the phishing blocklist and adds it to the whitelist so MetaMask (and related consumers of this list) stop treating it as malicious and automated feeds are less likely to re-block it.

This is a false-positive remediation for a regional Polymarket education/community site, not a code or detection-logic change—only src/config.json is touched.

Reviewed by Cursor Bugbot for commit 87c578f. Bugbot is set up for automated code reviews on this repo. Configure here.

False positive removal — see MetaMask#269126.
Site has no wallet interaction of any kind; details in the PR description.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01TSwsA8crooq2vUhUqXCvms
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants