Update honeypot_api and README

honeypot_api.py

@@ -84,14 +84,14 @@ def extract_intelligence(text):
 
     patterns = {
         "bankAccounts": r"\b\d{12,18}\b",
-        "phoneNumbers": r"(\+?\d{1,3}[- ]?)?\d{10}",
+        "phoneNumbers": r"(?:\+?\d{1,3}[- ]?)?\d{10}\b",
         "emailAddresses": r"[a-zA-Z0-9.\-_+]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]+",
         "phishingLinks": r"https?://[^\s]+",
         "upiIds": r"[a-zA-Z0-9.\-_+]+@[a-zA-Z]+",
         "cardNumbers": r"\b(?:\d{4}[- ]?){3}\d{4}\b",
         "ifscCodes": r"\b[A-Z]{4}0[A-Z0-9]{6}\b",
         "transactionIds": r"\b[A-Z0-9]{8,20}\b",
-        "caseIds": r"\b(?:CASE|CAS|REF|ID|TICKET)[- ]?[A-Z0-9]{4,}\b",
+        "caseIds": r"(?:\b(?:CASE|CAS|REF|ID|TICKET)[- ]?[A-Z0-9]{4,}\b|\bC\d{4,}\b)",
         "policyNumbers": r"\b(?:POLICY|POL|PL|INS)[- ]?[A-Z0-9]{4,}\b",
         "orderNumbers": r"\b(?:ORDER|ORD|OD)[- ]?[A-Z0-9]{4,}\b",
         "telegramHandles": r"@[a-zA-Z0-9_]{5,}",
@@ -122,10 +122,16 @@ def extract_intelligence(text):
             if key in ["cardNumbers", "transactionIds", "policyNumbers", "orderNumbers"]:
                 extracted["bankAccounts"].extend(matches)
 
-    # Deduplicate final lists
     for k in extracted:
         extracted[k] = list(set(extracted[k]))
 
+    clean_bank = []
+    for acc in extracted["bankAccounts"]:
+        digits = re.sub(r"\D", "", acc)
+        if 12 <= len(digits) <= 18:
+            clean_bank.append(digits)
+    extracted["bankAccounts"] = list(set(clean_bank))
+
     return extracted
 
 # ============================