From 38bcd584667749241357f20614838bf572f80b29 Mon Sep 17 00:00:00 2001 From: SukkaW Date: Mon, 6 Jan 2025 00:39:37 +0800 Subject: [PATCH] Chore: Update Phishing Hosts Score --- Build/lib/get-phishing-domains.ts | 31 ++++++++++++++++++------------- 1 file changed, 18 insertions(+), 13 deletions(-) diff --git a/Build/lib/get-phishing-domains.ts b/Build/lib/get-phishing-domains.ts index 46784ae8..f5b617dc 100644 --- a/Build/lib/get-phishing-domains.ts +++ b/Build/lib/get-phishing-domains.ts @@ -185,14 +185,15 @@ const processPhihsingDomains = cache(function processPhihsingDomains(domainArr: || (domainScoreMap[apexDomain] >= 13 && count >= 11) || (domainScoreMap[apexDomain] >= 5 && count >= 14) || (domainScoreMap[apexDomain] >= 3 && count >= 21) + || (domainScoreMap[apexDomain] >= 1 && count >= 60) ) { domainArr.push('.' + apexDomain); } }); // console.log({ - // score: domainScoreMap['flk-ipfs.xyz'], - // count: domainCountMap.get('flk-ipfs.xyz') + // score: domainScoreMap['awicksin.com'], + // count: domainCountMap.get('awicksin.com') // }); // console.log({ duplicateCount, domainArrLen: domainArr.length }); @@ -247,20 +248,24 @@ export function calcDomainAbuseScore(subdomain: string, fullDomain: string = sub const subdomainLength = subdomain.length; - if (subdomainLength > 13) { - weight += 0.2; - if (subdomainLength > 20) { - weight += 1; - if (subdomainLength > 30) { - weight += 5; - if (subdomainLength > 40) { - weight += 10; + if (subdomainLength > 6) { + weight += 0.015; + + if (subdomainLength > 13) { + weight += 0.2; + if (subdomainLength > 20) { + weight += 1; + if (subdomainLength > 30) { + weight += 5; + if (subdomainLength > 40) { + weight += 10; + } } } - } - if (subdomain.indexOf('.', 1) > 1) { - weight += 1; + if (subdomain.indexOf('.', 1) > 1) { + weight += 1; + } } }