Request review: beta.filot.me flagged "could be malicious" on Raydium CLMM deposit (false positive)

[roguer77]

Hi Phantom team,

Our dApp is being blocked by the in-app scanner on mobile deeplink signing with "Request blocked — This dApp could be malicious." We believe this is a new-domain false positive and would appreciate a review.

• Domain: https://beta.filot.me (marketing site: https://filot.me)
• What it is: FiLot — a non-custodial gold bookkeeping + Solana DeFi companion app (in beta). Users connect Phantom/Solflare; every transaction is user-signed; we never hold keys or funds.
• What gets blocked: ONLY our Raydium CLMM liquidity deposit (openPosition — mints the standard Raydium position NFT). Plain Jupiter swaps from the same domain and session pass fine. We also rebuilt the deposit with withMetadata: 'no-create' (no Metaplex CPI at all) and it is still blocked, so we believe it's the position-NFT mint shape plus our domain's lack of history.
• Programs invoked by the blocked tx: Raydium CLMM CAMMCzo5YL8w4VFF8KVHrK22GGUsp5VTaW7grrKgrWqK, SPL Token/ATA/System/ComputeBudget. Nothing else.
• Safety posture: client-side pre-sign simulation with a program allowlist and balance-delta bounds on every leg; per-transaction server-side policy authorization; fail-closed everywhere. Happy to provide anything you need for verification.
• Reproduction: connect Phantom via mobile deeplink on beta.filot.me → chat "join sol usdc lp with $20" → approve the funding swap (passes) → the deposit request is blocked (both signTransaction and signAndSendTransaction, with a user gesture).

What do you need from us to get the domain reviewed/whitelisted? Thank you!

[Th3Ya0vi]

Hi @roguer77

Thanks for reaching out. Since your domain is brand new, it automatically triggers our automated security filters to protect users from potential exploits.

To get this reviewed and cleared by our Trust & Safety team, please follow the steps outlined in our Domain and Transaction Warnings Guide https://docs.phantom.com/developer-powertools/domain-and-transaction-warnings

The team will review your submission and update the domain status as soon as possible. Thank you for your patience!