S_Detector 作者： Si Thu Soe

S_Detector checks every top-level page navigation against four layers of protection, in order:

PhishTank cached feed — free public bulk feed, refreshed hourly, no API key required.
OpenPhish cached feed — same idea, second free source for redundancy.
Google Safe Browsing (live API) — real-time lookup against Google's threat list. Requires a free API key.
Local heuristics — punycode/homoglyph domains, brand lookalikes, non-HTTPS, IP-address hosts, excessive subdomains. Runs entirely offline.


If any source flags the destination, a full-page warning interstitial is shown (not a silent block) — the user can go back or choose to proceed.