Few updates phishing

Build/lib/get-phishing-domains.ts

@@ -57,6 +57,8 @@ const sensitiveKeywords = createKeywordFilter([
   'facebook-com',
   '-facebook',
   'facebook-',
+  'focebaak',
+  '.facebook.',
   'metamask-',
   '-metamask',
   'www.apple',
@@ -69,7 +71,9 @@ const sensitiveKeywords = createKeywordFilter([
   'inpost-pl',
   'login.microsoft',
   'login-microsoft',
-  'google.com-'
+  'microsoftonline',
+  'google.com-',
+  'minecraft'
 ]);
 const lowKeywords = createKeywordFilter([
   'transactions-',
@@ -78,6 +82,7 @@ const lowKeywords = createKeywordFilter([
   '-payment',
   '-faceb', // facebook fake
   '.faceb', // facebook fake
+  'facebook',
   'virus-',
   'icloud-',
   'apple-',
@@ -91,7 +96,8 @@ const lowKeywords = createKeywordFilter([
   'instagram',
   'microsoft',
   'passwordreset',
-  '.google-'
+  '.google-',
+  'recover'
 ]);
 
 const cacheKey = createCacheKey(__filename);
@@ -155,6 +161,9 @@ async function processPhihsingDomains(domainArr: string[]) {
           } else if (tld.length > 6) {
             domainScoreMap[apexDomain] += 2;
           }
+          if (apexDomain.length >= 18) {
+            domainScoreMap[apexDomain] += 0.5;
+          }
         }
         if (
           subdomain

Source/domainset/reject_sukka.conf

@@ -341,6 +341,7 @@ inst.360safe.com
 .sfmc-marketing.com
 .sfmc-contentqa.com
 .living.miraclesofeucharisticjesus.org
+.dlcodes.com
 
 # --- AD Block ---
 
@@ -668,6 +669,7 @@ t.ghostboard.io
 jobs.date-fns.org
 adm.meiguo.com
 t.ghostboard.io
+.focalink.com
 
 .youxiaoad.com
 .iteye.com
@@ -966,6 +968,7 @@ analytics.bytegiftia.top
 .avadacom.com
 .1897pentagram.com
 .webspecmail.com
+.cp-sap.sfmc-content.com
 
 # >> Alexa
 data.alexa.com