GithubFollow/Surge_by_SukkaW
1
0
Fork 0
mirror of https://github.com/SukkaW/Surge.git synced 2026-07-30 01:41:45 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Publish phishing domain even more

Browse Source
This commit is contained in:
SukkaW
2026-07-13 21:58:05 +08:00
parent 2de1506ff7
commit ceba51a8a6
1 changed files with 15 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
Build/lib/get-phishing-domains.ts
View File

@@ -31,7 +31,7 @@ export function getPhishingDomains(rawSpan?: RawSpan, isDebug = false): Promise<
domainGroups.forEach(appendArrayInPlaceCurried(domainArr)); domainGroups.forEach(appendArrayInPlaceCurried(domainArr));
const domainCountMap = new Counter(); const domainCountMap = new Counter();
const domainScoreMap: Record<string, number> = Object.create(null) as Record<string, number>; const domainScoreMap = new Counter();
let line: string; let line: string;
let tld: string | null; let tld: string | null;
@@ -62,13 +62,17 @@ export function getPhishingDomains(rawSpan?: RawSpan, isDebug = false): Promise<
continue; continue;
} }
subdomain = parsed.subdomain;
if (subdomain === 'www') {
domainArr[i] = '.' + apexDomain;
}
domainCountMap.incr(apexDomain); domainCountMap.incr(apexDomain);
if (!domainScoreMap.has(apexDomain)) {
let score = 0; let score = 0;
if (apexDomain in domainScoreMap) {
score = domainScoreMap[apexDomain];
} else {
if (BLACK_TLD.has(tld)) { if (BLACK_TLD.has(tld)) {
score += 3; score += 3;
} else if (tld.length > 4) { } else if (tld.length > 4) {
@@ -79,19 +83,17 @@ export function getPhishingDomains(rawSpan?: RawSpan, isDebug = false): Promise<
if (apexDomain.length >= 18) { if (apexDomain.length >= 18) {
score += 0.5; score += 0.5;
} }
}
subdomain = parsed.subdomain; domainScoreMap.incr(apexDomain, score);
}
if (subdomain) { if (subdomain) {
score += calcDomainAbuseScore(subdomain, line); domainScoreMap.incr(subdomain, calcDomainAbuseScore(subdomain, line));
} }
domainScoreMap[apexDomain] = score;
} }
domainCountMap.forEach((count, apexDomain) => { domainCountMap.forEach((count, apexDomain) => {
const score = domainScoreMap[apexDomain]; const score = domainScoreMap.get(apexDomain);
if ( if (
(score >= 24) (score >= 24)
|| (score >= 16 && count >= 7) || (score >= 16 && count >= 7)
@@ -106,9 +108,8 @@ export function getPhishingDomains(rawSpan?: RawSpan, isDebug = false): Promise<
if (isDebug) { if (isDebug) {
console.log({ console.log({
v: 1, score: domainScoreMap.get('4556.de'),
score: domainScoreMap['com-ticketry.world'], count: domainCountMap.get('4556.de'),
count: domainCountMap.get('com-ticketry.world'),
domainArrLen: domainArr.length domainArrLen: domainArr.length
}); });
} }