From 177925f0190fec867c74f345412051c88eabb921 Mon Sep 17 00:00:00 2001
From: SukkaW <isukkaw@gmail.com>
Date: Mon, 3 Mar 2025 22:14:50 +0800
Subject: [PATCH] Tighten Phishing Hosts

---
 Build/constants/phishing-score-source.ts | 45 +++++++++++++-----------
 Source/domainset/reject_sukka.conf       |  1 +
 2 files changed, 25 insertions(+), 21 deletions(-)

diff --git a/Build/constants/phishing-score-source.ts b/Build/constants/phishing-score-source.ts
index 4ae5e353..ba28ccc9 100644
--- a/Build/constants/phishing-score-source.ts
+++ b/Build/constants/phishing-score-source.ts
@@ -16,7 +16,7 @@ export const BLACK_TLD = new Set([
   'one', 'online',
   'party', 'pro', 'pl', 'pw',
   'racing', 'rest', 'review', 'rf.gd',
-  'sa.com', 'sbs', 'science', 'shop', 'site', 'skin', 'space', 'store', 'stream', 'su', 'surf',
+  'sa.com', 'sbs', 'science', 'shop', 'site', 'skin', 'space', 'store', 'stream', 'su', 'support', 'surf',
   'tech', 'tk', 'tokyo', 'top', 'trade',
   'vip', 'vn',
   'webcam', 'website', 'win',
@@ -32,7 +32,7 @@ export const WHITELIST_MAIN_DOMAINS = new Set([
   'flk-ipfs.xyz', // ipfs gateway
   'business.site', // Drag'n'Drop site building platform
   'page.link', // Firebase URL Shortener
-  // 'notion.site',
+  // 'notion.site', d
   // 'vercel.app',
   'gitbook.io',
   'zendesk.com',
@@ -51,38 +51,42 @@ export const leathalKeywords = createKeywordFilter([
 
   // Fake TLD
   '.pl-',
+  '-pl.',
   '.com-',
+  '-com.',
   '.net-',
   '.org-',
-  '.gov-'
+  '.gov-',
+  '-gov.',
+  '.au-',
+  '.co.uk-',
+  '.de-',
+  '.eu-',
+  '.us-',
+  '.ru-'
 ]);
 
 export const sensitiveKeywords = createKeywordFilter([
-  '.amazon-',
-  '-amazon',
+  'amazon',
   'fb-com',
-  'facebook-com',
-  '-facebook',
-  'facebook-',
   'focebaak',
-  '.facebook.',
+  'facebook',
   'metamask',
-  'www.apple',
-  '-coinbase',
-  'coinbase-',
-  'booking-com',
-  'booking.com-',
-  'booking-eu',
+  'apple',
+  'icloud',
+  'coinbase',
+  'booking.',
+  'booking-',
+  'vinted.',
   'vinted-',
   'inpost-pl',
-  'login.microsoft',
-  'login-microsoft',
-  'microsoftonline',
-  'google.com-',
+  'microsoft',
+  'google',
   'minecraft',
   'staemco',
   'oferta',
-  'txtag'
+  'txtag',
+  'paypal'
 ]);
 
 export const lowKeywords = createKeywordFilter([
@@ -94,7 +98,6 @@ export const lowKeywords = createKeywordFilter([
   '.faceb', // facebook fake
   'facebook',
   'virus-',
-  'icloud-',
   'apple-',
   '-roblox',
   '-co-jp',
diff --git a/Source/domainset/reject_sukka.conf b/Source/domainset/reject_sukka.conf
index 15e1cf5c..3f3bb2ce 100644
--- a/Source/domainset/reject_sukka.conf
+++ b/Source/domainset/reject_sukka.conf
@@ -721,6 +721,7 @@ pub-7a9aae2813a742e1b02d588e632e401b.r2.dev
 .ignite.technology
 .xad.js.org
 .affiliates.purevpn.com
+.adbureau.net
 
 adimg.daumcdn.net
 .ad.daum.net