Java-Discord / JavaBot

General utility bot for the Discord Java Community
https://discordjug.net/
GNU General Public License v3.0
48 stars 22 forks source link

Improve Auto mod to detect phishing links #86

Closed MoonTM-GIT closed 2 years ago

MoonTM-GIT commented 3 years ago

e.g. and probably most important for now links looking like discord.com that aren't real

Could also include a general list of known phishing links

danthe1st commented 3 years ago

For links that look like discord.com, the levenshtein distance (with a certain threshold) could be used. But in my opinion, checking for known phishing domains might be better because it would allow other non-discord-like phishing domains to be blocked and typing discord.com wrong will not result in the automod being triggered. Also, blocking domains looking similar to discord.com might result in domains like discordapp.com (someone might still think of that being the correct one) or similar getting blocked.

Note that there are valid reasons to write messages containing discord.com. For example, someone could provide logs of a discord bot containing it.