Chore: Update Phishing Build

FYLSen · Nov 1, 2024 · ab32a1a · ab32a1a
1 parent 90b6580
commit ab32a1a
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 6 deletions.
diff --git a/Build/lib/get-phishing-domains.ts b/Build/lib/get-phishing-domains.ts
@@ -63,8 +63,7 @@ const sensitiveKeywords = createKeywordFilter([
   'facebook-',
   'focebaak',
   '.facebook.',
-  'metamask-',
-  '-metamask',
+  'metamask',
   'www.apple',
   '-coinbase',
   'coinbase-',
@@ -83,9 +82,9 @@ const sensitiveKeywords = createKeywordFilter([
 ]);
 const lowKeywords = createKeywordFilter([
   'transactions-',
-  'payment-',
+  'payment',
+  'wallet',
   '-transactions',
-  '-payment',
   '-faceb', // facebook fake
   '.faceb', // facebook fake
   'facebook',
@@ -213,9 +212,9 @@ export function calcDomainAbuseScore(subdomain: string, fullDomain: string = sub
   const sensitiveKeywordsHit = sensitiveKeywords(fullDomain);
 
   if (sensitiveKeywordsHit) {
-    weight += 9;
+    weight += 10;
     if (hitLowKeywords) {
-      weight += 5;
+      weight += 6;
     }
   } else if (hitLowKeywords) {
     weight += 1.5;

diff --git a/Source/domainset/reject_sukka.conf b/Source/domainset/reject_sukka.conf
@@ -323,6 +323,7 @@ inst.360safe.com
 .googleplay.pro
 .printondemandmerchandise.com
 .thebitmeister.com
+.metamask-app.com
 # Phishing domain like `www-facebook.to-kr.com`
 .to-kr.com
 # Poland Hosting dhosting.pl's free subdomain