Skip to content

Whitelist keeperwallet.com (false positive) - #1876

Open
ddobrinskiy-top wants to merge 1 commit into
phantom:masterfrom
ddobrinskiy-top:whitelist-keeperwallet
Open

ddobrinskiy-top wants to merge 1 commit into
phantom:masterfrom
ddobrinskiy-top:whitelist-keeperwallet

Conversation

@ddobrinskiy-top

@ddobrinskiy-top ddobrinskiy-top commented Nov 3, 2026 •

Copy link
Copy Markdown

Domain to whitelist

  • keeperwallet.com

Why this domain should be whitelisted

keeperwallet.com is the official website of Keeper (formerly Tonkeeper), a non-custodial crypto wallet for multiple blockchains. Phantom currently flags it as malicious, which is a false positive.

  • https://tonkeeper.com redirects (HTTP 308) to https://keeperwallet.com.
  • The site links to the official app listings: App Store id1587742107 and Google Play com.ton_keeper.
  • The domain was registered in December 2022.
  • The site never asks for seed phrases or private keys. It is a marketing site with app download links, and keys stay on the user's device.

The domain is not in blocklist.yaml, so this PR adds it to whitelist.yaml to clear the warning. I'm filing this on behalf of the Keeper team. If something else is needed to verify domain ownership, please say so in a comment.

Summary by CodeRabbit

  • Updates
    • Added keeperwallet.com to the whitelist; nftplus.io remains listed.

keeperwallet.com is the official website of Keeper (formerly Tonkeeper),
a non-custodial multichain wallet. tonkeeper.com redirects to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Walkthrough

The whitelist retains nftplus.io and adds keeperwallet.com.

Changes: Whitelist update

Layer / File(s) Summary
Update whitelist entries
whitelist.yaml
The whitelist retains nftplus.io and adds keeperwallet.com.

Suggested reviewers: hanahiroaze

Change: Bug fix

Merge Risk: Minimal · up to df8bf

The whitelist addition has no identified merge-blocking issue. The repository documents the whitelist as currently unused, so this change alone does not establish that the reported warning will disappear.

Architecture risk: Low · up to df8bf

The change affects 1 system.

Changed systems: whitelist.yaml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — whitelist.yaml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in whitelist.yaml: The whitelist retains nftplus.io and adds keeperwallet.com.
Pre-merge checks: Passed 4
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title names the change: adding keeperwallet.com to the whitelist as a false-positive fix. The raw summary says the whitelist adds keeperwallet.com, and the objectives say PR #1876 adds that domain…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title names the change: adding keeperwallet.com to the whitelist as a false-positive fix. The raw summary says the whitelist adds keeperwallet.com, and the objectives say PR #1876 adds that domain to whitelist.yaml to clear a Phantom malicious-site warning. The title is specific and matches the main change.

Finishing Touches
Generate unit tests (beta)
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Tip

🎯 Customize your risk assessments

Guide how CodeRabbit assesses merge risk and security architecture risk. Highlight sensitive changes and explain your security boundaries using Merge Risk Instructions and Security Risk Instructions in your review settings. Security architecture risk assessments require the Advanced plan or above.

✅ Automatic approvals, with your rules

Let CodeRabbit approve pull requests once required threads are resolved, pre-merge checks pass, and your risk limits are met. Enable Automatic approvals in review settings, with overrides for teams or file paths.

CodeRabbit Verify

  • Run CodeRabbit Verify to test the changes in this pull request.
Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 73fd0d77-d8b3-4221-9b1d-a9228f16e046
Commits

Reviewing files that changed from the base of the PR and between 5030186 and df8bf72.

Files selected for processing: 1
  • whitelist.yaml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants