Require an allowed TLD in fuzzy email hosts

src/rebuilder.ts

@@ -291,12 +291,14 @@ export class REBuilder {
   }
 
   get_fuzzy_mail_host () {
-    // Similar to normal mail host, but without local domains.
+    // Similar to normal mail host, but
+    // - TLD as anchor
+    // - No local domains
     return this.cache.src_fuzzy_mail_host ??= new RegExp(
       '(?:' +
         this.get_ipv6_mail_host().source +
         '|' +
-        `(?:(?:(?:${this.get_domain().source})[.]){1,4}${this.get_domain_root().source})` +
+        `(?:(?:(?:${this.get_domain().source})[.]){1,4}(?:${this.get_tld().source}))` +
       ')' +
       this.get_host_terminator().source
     )

test/fixtures/not_links.txt

@@ -53,6 +53,7 @@ http://[1:2:3:4:5:6:7:8:9]/
 % Not email
 %
 foo@bar     % Should be at second level domain & with correct tld
+foo@bar.badtld
 mailto:bar
 mailto:user@[::1]
 mailto:user@[IPv6:202:NaN]