index.html

<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1" />
  <title>Phish — Aria AI</title>
  <style>
    :root { --indigo:#4338ca; --blue:#1d4ed8; --ink:#0f172a; --muted:#475569; --bg:#f8fafc; }
    * { box-sizing: border-box; }
    body { margin:0; font-family:"Segoe UI","Vazirmatn",Tahoma,sans-serif; color:var(--ink); background:radial-gradient(circle at top left,#dbeafe,var(--bg) 42%); }
    header, main, footer { width:min(1120px, calc(100% - 32px)); margin:0 auto; }
    header { padding:36px 0 12px; }
    .eyebrow { color:var(--indigo); font-weight:700; letter-spacing:.04em; text-transform:uppercase; font-size:.78rem; }
    h1 { font-size:clamp(1.8rem,3vw,2.4rem); margin:8px 0; }
    .lead { font-size:1.1rem; color:var(--muted); max-width:46rem; }
    .actions { display:flex; flex-wrap:wrap; gap:10px; margin:20px 0 8px; }
    a.btn { display:inline-block; text-decoration:none; padding:10px 16px; border-radius:999px; font-weight:600; }
    a.primary { background:var(--indigo); color:#fff; }
    a.ghost { background:#fff; color:var(--indigo); border:1px solid #c7d2fe; }
    .grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:12px; margin:24px 0; }
    .card { background:#fff; border:1px solid #e2e8f0; border-radius:18px; padding:16px 18px; }
    .card strong { display:block; font-size:1.4rem; color:var(--indigo); }
    .note { background:#eef2ff; border:1px solid #c7d2fe; border-radius:16px; padding:14px 16px; color:#3730a3; }
    table { width:100%; border-collapse:collapse; font-size:.95rem; }
    th, td { text-align:left; padding:8px 10px; border-bottom:1px solid #e2e8f0; vertical-align:top; }
    th { color:#3730a3; font-size:.8rem; text-transform:uppercase; letter-spacing:.04em; }
    .ltr { direction:ltr; unicode-bidi:isolate; }
    footer { padding:12px 0 40px; color:var(--muted); font-size:.92rem; }
    .fa { direction:rtl; text-align:right; }
  </style>
</head>
<body>
  <header>
    <p class="eyebrow">Aria AI · Project 03 / 25</p>
    <h1>Phish — Suspicious Email and Message Review</h1>
    <p class="lead">
      Review Persian and English messages with evidence-linked labels.
      Urgency alone is not phishing. Links are defanged, attachments are not
      opened, and the demo never returns a safe verdict.
    </p>
    <div class="actions">
      <a class="btn primary" href="https://huggingface.co/datasets/AriaAICompany/phish-messages" target="_blank" rel="noreferrer">Dataset</a>
      <a class="btn ghost" href="https://huggingface.co/AriaAICompany/phish-structural" target="_blank" rel="noreferrer">Model</a>
      <a class="btn ghost" href="https://huggingface.co/collections/AriaAICompany/aria-ai-cybersecurity-6ab01faa3995a3bb737b58a7" target="_blank" rel="noreferrer">Collection</a>
      <a class="btn ghost" href="https://huggingface.co/AriaAICompany" target="_blank" rel="noreferrer">Organization</a>
    </div>
  </header>
  <main>
    <section class="grid">
      <article class="card"><strong>256 messages</strong>Persian / English fixtures, seed 3</article>
      <article class="card"><strong>Campaign split</strong>Train and test lures do not overlap</article>
      <article class="card"><strong>Three labels</strong>Suspicious, needs review, insufficient</article>
      <article class="card"><strong>CPU</strong>Rules + TF-IDF + LightGBM · no paid API</article>
    </section>
    <p class="note">
      Organization Gradio hosting needs Team/Enterprise. Personal PRO has a daily Space-creation cap (20/day),
      so the interactive workstation is queued for <span class="ltr">alirezaaminzadeh/phish</span> when that cap resets.
      Dataset, model, and this card already live under AriaAICompany.
    </p>
    <article class="card">
      <h2>Recorded sample · bank_otp_fa-00</h2>
      <p>Decision <strong>suspicious</strong> · severity high · confidence high · hash <span class="ltr">d9ff859335fe256e</span> · 738 ms</p>
      <table>
        <thead><tr><th>Kind</th><th>Finding</th></tr></thead>
        <tbody>
          <tr><td>Observed</td><td>Reply-To domain does not match the From domain.</td></tr>
          <tr><td>Observed</td><td>Return-Path domain does not match the From domain.</td></tr>
          <tr><td>Observed</td><td>Visible link text and actual href host do not match. Host defanged: <span class="ltr">hxxp://bmi-secure-login[.]example/otp/003</span></td></tr>
          <tr><td>Observed</td><td>Host resembles the brand «bmi» but is not on the known-owner list.</td></tr>
          <tr><td>Observed</td><td>Message asks for a login or account update.</td></tr>
          <tr><td>Observed</td><td>Copied Authentication-Results is not proof of SPF/DKIM/DMARC.</td></tr>
          <tr><td>Inference</td><td>rule 1.00 · TF-IDF 0.86 · LightGBM 0.93 (calibrated lab scores, not a safe/unsafe certificate)</td></tr>
        </tbody>
      </table>
    </article>
    <article class="card" style="margin-top:12px">
      <h2>Held-out campaign test (96 messages)</h2>
      <table>
        <thead><tr><th>Method</th><th>PR-AUC</th><th>Recall @ FPR 0.10</th><th>Brier</th></tr></thead>
        <tbody>
          <tr><td>rule-structural</td><td>1.00</td><td>1.00</td><td>0.10</td></tr>
          <tr><td>tfidf-lr</td><td>1.00</td><td>1.00</td><td>0.15</td></tr>
          <tr><td>lightgbm-structural</td><td>1.00</td><td>1.00</td><td>0.16</td></tr>
        </tbody>
      </table>
      <p>Hard-negative invoices and login notices were never labeled suspicious (0.00). Lab PR-AUC on synthetic fixtures is not operational accuracy.</p>
    </article>
    <section class="fa card" style="margin-top:12px">
      <h2>فیش</h2>
      <p>ایمیل مشکوک را با شاهد قابل‌کلیک بررسی می‌کند. واژه «فوری» به‌تنهایی فیشینگ نیست. نتیجه «امن» وجود ندارد. لینک فقط تجزیه و خنثی می‌شود. دیتاست و مدل کوچک روی حساب سازمانی آریا ای آی منتشر شده‌اند.</p>
    </section>
  </main>
  <footer>Aria AI · Cybersecurity · Roadmap project 03 · Apache-2.0 / CC-BY-4.0</footer>
</body>
</html>