[Minor] Use more strict regex in LEAKED_PASSWORD_SCAM

to avoid matching `passwordless`

rules/regexp/misc.lua

@@ -64,7 +64,7 @@ reconf['HAS_ONION_URI'] = {
 local my_victim = [[/(?:victim|prey)/{words}]]
 local your_webcam = [[/webcam/{words}]]
 local your_onan = [[/(?:mast[ur]{2}bati(?:on|ng)|onanism|solitary)/{words}]]
-local password_in_words = [[/^pass(?:(?:word)|(?:phrase))/i{words}]]
+local password_in_words = [[/^pass(?:(?:word)|(?:phrase))$/i{words}]]
 local btc_wallet_address = [[/^[13][0-9a-zA-Z]{25,34}$/{words}]]
 local wallet_word = [[/^wallet$/{words}]]
 local broken_unicode = [[has_flag(bad_unicode)]]
@@ -93,4 +93,4 @@ reconf['LEAKED_PASSWORD_SCAM'] = {
   },
   score = 7.0,
   group = 'scams'
-}
+}