This checks structural patterns only (IP hosts, punycode, lookalike domains, suspicious TLDs, etc.) — it is NOT a live threat-intelligence feed and won't catch every phishing site, or flag every legitimate one correctly. Runs entirely in your browser.