Organization Gradio hosting needs Team/Enterprise. Personal PRO has a daily Space-creation cap (20/day), so the interactive workstation is queued for alirezaaminzadeh/phish when that cap resets. Dataset, model, and this card already live under AriaAICompany.
Recorded sample · bank_otp_fa-00
Decision suspicious · severity high · confidence high · hash d9ff859335fe256e · 738 ms
| Kind | Finding |
|---|---|
| Observed | Reply-To domain does not match the From domain. |
| Observed | Return-Path domain does not match the From domain. |
| Observed | Visible link text and actual href host do not match. Host defanged: hxxp://bmi-secure-login[.]example/otp/003 |
| Observed | Host resembles the brand «bmi» but is not on the known-owner list. |
| Observed | Message asks for a login or account update. |
| Observed | Copied Authentication-Results is not proof of SPF/DKIM/DMARC. |
| Inference | rule 1.00 · TF-IDF 0.86 · LightGBM 0.93 (calibrated lab scores, not a safe/unsafe certificate) |
Held-out campaign test (96 messages)
| Method | PR-AUC | Recall @ FPR 0.10 | Brier |
|---|---|---|---|
| rule-structural | 1.00 | 1.00 | 0.10 |
| tfidf-lr | 1.00 | 1.00 | 0.15 |
| lightgbm-structural | 1.00 | 1.00 | 0.16 |
Hard-negative invoices and login notices were never labeled suspicious (0.00). Lab PR-AUC on synthetic fixtures is not operational accuracy.
فیش
ایمیل مشکوک را با شاهد قابلکلیک بررسی میکند. واژه «فوری» بهتنهایی فیشینگ نیست. نتیجه «امن» وجود ندارد. لینک فقط تجزیه و خنثی میشود. دیتاست و مدل کوچک روی حساب سازمانی آریا ای آی منتشر شدهاند.