diff --git a/packages/extension-core/src/domains/app/protector/ParaverseProtector.ts b/packages/extension-core/src/domains/app/protector/ParaverseProtector.ts
index fe168c5828..ae618c41a8 100644
--- a/packages/extension-core/src/domains/app/protector/ParaverseProtector.ts
+++ b/packages/extension-core/src/domains/app/protector/ParaverseProtector.ts
@@ -2,7 +2,7 @@ import { checkHost } from "@polkadot/phishing"
 import { Dexie } from "dexie"
 import metamaskInitialData from "eth-phishing-detect/src/config.json"
 import MetamaskDetector from "eth-phishing-detect/src/detector"
-import { log } from "extension-shared"
+import { log, TALISMAN_WEB_APP_DOMAIN } from "extension-shared"
 import { decompressFromUTF16 } from "lz-string"
 
 import { sentry } from "../../../config/sentry"
@@ -20,7 +20,10 @@ const COMMIT_PATH = "/commits/master"
 
 const REFRESH_INTERVAL_MIN = 20
 
-const DEFAULT_ALLOW = ["talisman.xyz", "app.talisman.xyz"]
+const DEFAULT_ALLOW = [
+  TALISMAN_WEB_APP_DOMAIN, // app.talisman.xyz
+  TALISMAN_WEB_APP_DOMAIN.split(".").slice(1).join("."), // talisman.xyz
+]
 
 type HostList = { allow: string[]; deny: string[] }