Fake Order Detection

Description

Uses IP (X-Forwarded-For), device fingerprint and behavioural metrics (time on page, rapid paste) to compute a risk score. Low risk passes to the gateway; medium risk triggers a reCAPTCHA v3 challenge; high risk is blocked with a generic error so fraudsters get no feedback. Thresholds, signal weights, the disposable-domain blacklist and reCAPTCHA keys are all configurable.