play.onside.fun flagged "This dApp could be malicious" (new launch, requesting domain review)

[imishgg]

Hi Phantom team,

We launched play.onside.fun today (June 11) and every ticket purchase popup shows the red "This dApp could be malicious" warning plus the "this domain is new" notice. Users are cancelling at the warning, which is hurting our launch day badly.

About the app:

• Onside is a World Cup 2026 survivor prediction game on Solana mainnet. Marketing site: https://onside.fun, app: https://play.onside.fun, docs: https://docs.onside.fun
• A ticket purchase is one cosigned transaction: a Memo instruction, two transfers for the entry fee split (USDC transferChecked or native SOL system transfers), and a Metaplex Core NFT mint (CreateV2) into our collection 6WL9ghwMDfHSqLUheWPfAHuQ6NxQVW2jKaprqbeA9Xhs.
• We integrate through the Wallet Standard and prefer signAndSendTransaction where the wallet exposes it.
• Transactions simulate cleanly in the popup (fee estimates render; no simulation failures).

The domain is hours old, so we understand the caution, but the red "could be malicious" banner on a transaction that simulates fine reads as a false positive. Could you review the domain and clear the flag?

We have also emailed review@phantom.com with the same details. Happy to provide anything else: team contact, source verification, or a walkthrough.

Thank you!

[Th3Ya0vi]

Hi @imishgg ,

Thanks for reaching out. Since your domain is brand new, it automatically triggers our automated security filters to protect users from potential exploits.

To get this reviewed and cleared by our Trust & Safety team, please follow the steps outlined in our Domain and Transaction Warnings Guide https://docs.phantom.com/developer-powertools/domain-and-transaction-warnings

The team will review your submission and update the domain status as soon as possible. Thank you for your patience!