Claude Code. Runs before Bash, WebFetch, WebSearch, or PowerShell. If the command has a URL, we check if the site is fake.