phishing-detect-web

Anti-fraud service

Skeleton is up. Corpus schema, console and the four public endpoints are not implemented yet.

Tier 0 - local set

GET /v1/blocklist serves a versioned binary artifact the client caches.

Tier 1 - k-anonymity lookup

GET /v1/lookup answers a 20 bit hash prefix with the whole bucket, unauthenticated.

Tier 2 - LLM scan

POST /v1/scan accepts a URL and nothing else, on an explicit user gesture only.

Tier 3 - report

POST /v1/report queues a claim. A report is never a label.