@xuda.io/account_module 1.2.1868 → 1.2.1870

package/index.mjs

@@ -3443,55 +3443,47 @@ export const process_accounts_emails = async function () {
 };
 
 function isLikelySpamEmail(email) {
-  debugger;
-  if (!email || typeof email !== 'string') return true; // Invalid input → treat as spam
+  if (!email || typeof email !== 'string') return true;
 
   const lower = email.toLowerCase().trim();
 
-  // Basic format validation (must have @ and domain)
+  // Must have exactly one @ and non-empty parts
   if (!lower.includes('@') || lower.split('@').length !== 2) return true;
 
   const [localPart, domain] = lower.split('@');
 
   if (!localPart || !domain) return true;
 
-  // ────────────────────────────────────────────────
-  // 1. Obvious syntax / format red flags
-  // ────────────────────────────────────────────────
+  // 1. Obvious syntax/format red flags (RFC 5321/5322 inspired)
   if (
-    localPart.length > 64 || // RFC 5321 local-part max
-    domain.length > 255 || // RFC 5321 domain max
+    localPart.length > 64 ||
+    domain.length > 255 ||
     localPart.startsWith('.') ||
     localPart.endsWith('.') ||
     localPart.includes('..') ||
     domain.includes('..') ||
     domain.startsWith('-') ||
     domain.endsWith('-') ||
-    localPart.match(/[^\w.!#$%&'*+/=?^`{|}~-]/) !== null // illegal chars in local part
+    /[^\w.!#$%&'*+/=?^`{|}~-]/.test(localPart) // illegal chars
   ) {
     return true;
   }
 
-  // ────────────────────────────────────────────────
-  // 2. Very common spam patterns in local part
-  // ────────────────────────────────────────────────
+  // 2. Common spam patterns in local part
   const spamPatterns = [
-    /\d{8,}/, // long number strings (e.g. 1234567890user)
-    /[a-z]{10,}/, // very long random letters
-    /unsubscribe/i, // rare but classic spam sign
-    /free|win|bonus|deal|promo/i, // promotional keywords in address
-    /\+\d+$/, // + followed only by numbers (often disposable)
-    /^[\d\W_]+$/, // only digits & symbols (very suspicious)
+    /\d{8,}/, // long consecutive digits
+    /[a-z]{20,}/, // very long random lowercase (raised threshold)
+    /unsubscribe/i,
+    /free|win|bonus|deal|promo/i,
+    /\+\d+$/, // + followed only by digits
+    /^[\d\W_]+$/, // only digits/symbols/underscores
   ];
 
   if (spamPatterns.some((p) => p.test(localPart))) {
     return true;
   }
 
-  // ────────────────────────────────────────────────
-  // 3. Common free / disposable / temporary providers
-  // (update this list periodically – 2026 common ones)
-  // ────────────────────────────────────────────────
+  // 3. Free / major disposable providers
   const freeOrDisposableDomains = new Set([
     'gmail.com',
     'yahoo.com',
@@ -3520,39 +3512,48 @@ function isLikelySpamEmail(email) {
     'mailinator.com',
     'yopmail.com',
     'sharklasers.com',
-    // Add more from disposable lists if needed
+    // For real disposables: load dynamically from https://raw.githubusercontent.com/disposable/disposable/master/domains.txt
+    // or https://raw.githubusercontent.com/disposable-email-domains/disposable-email-domains/main/disposable_email_blocklist.conf
+    // Example: fetch once on startup and build a larger Set
   ]);
 
   if (freeOrDisposableDomains.has(domain)) {
-    // Still allow if it looks like a serious role or branded use
-    const seriousPrefixes = ['info', 'support', 'sales', 'contact', 'hello', 'team', 'admin', 'office', 'billing'];
-    const prefix = localPart.split('+')[0].split('.')[0]; // rough prefix
-
-    if (!seriousPrefixes.some((p) => prefix.includes(p))) {
-      // Extra lenient length check for free providers
-      if (localPart.length > 24 || localPart.match(/\d{6,}/)) {
-        return true;
-      }
+    const cleanLocal = localPart.split('+')[0]; // ignore +tag completely
+
+    const seriousPrefixes = ['info', 'support', 'sales', 'contact', 'hello', 'team', 'admin', 'office', 'billing', 'help', 'service', 'orders', 'bookings', 'quotes', 'enquiries', 'noreply', 'no-reply', 'business', 'shop', 'store'];
+
+    // Better detection: any segment contains a serious keyword
+    const parts = cleanLocal.split(/[\.-]/);
+    const looksLikeRoleOrBrand = seriousPrefixes.some((p) => parts.some((part) => part.includes(p)));
+
+    if (looksLikeRoleOrBrand) {
+      return false; // trusted-looking on free provider
+    }
+
+    // Extra scrutiny if not role-like
+    if (cleanLocal.length > 24 || /\d{6,}/.test(cleanLocal)) {
+      return true;
     }
-    // Otherwise: free provider but looks somewhat legitimate → not spam
-    return false;
+
+    return false; // default: allow typical personal use on Gmail etc.
   }
 
-  // // ────────────────────────────────────────────────
-  // // 4. Very short / meaningless / bot-like local parts
-  // // ────────────────────────────────────────────────
-  // if (localPart.length < 3 || localPart.match(/^[a-z\d]{1,4}$/)) {
-  //   return true; // e.g. a1@b.com, xyz@temp.com
-  // }
+  // 4. Very short / meaningless / bot-like local parts
+  if (localPart.length < 2 || /^[a-z\d]{1,5}$/.test(localPart)) {
+    return true; // e.g. a1@, xyz12@, but allow real short like "tim@"
+  }
 
-  // // ────────────────────────────────────────────────
-  // // 5. Suspicious TLDs sometimes used in spam (2026 context)
-  // // ────────────────────────────────────────────────
-  // const suspiciousTlds = ['.top', '.xyz', '.club', '.online', '.site', '.fun', '.buzz'];
-  // if (suspiciousTlds.some((tld) => domain.endsWith(tld))) {
-  //   return true;
-  // }
+  // 5. Suspicious new/low-trust TLDs (still relevant in 2026)
+  const suspiciousTlds = ['.top', '.xyz', '.club', '.online', '.site', '.fun', '.buzz', '.shop', '.store', '.live', '.digital', '.monster'];
+  if (suspiciousTlds.some((tld) => domain.endsWith(tld))) {
+    return true;
+  }
+
+  // Extra: very long local parts are rare for humans
+  if (localPart.length > 40) {
+    return true;
+  }
 
-  // Passed most checks → probably not spam
+  // Passed → likely legitimate
   return false;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xuda.io/account_module",
-  "version": "1.2.1868",
+  "version": "1.2.1870",
   "description": "Xuda Account Server Module",
   "main": "index.mjs",
   "dependencies": {