CLIENT-SIDE URL HEURISTICS LAB
Read a URL like an
analyst reads a threat report.
PhishGuard AI Pro breaks a URL into 20+ lexical, structural and visual signals real phishing filters examine — typosquatting, punycode, entropy, SSL posture, geolocation — and explains the verdict in plain language.
This is a learning project, not a real security product. Every score is a local heuristic estimate computed entirely in your browser. WHOIS, SSL certificate detail, and IP geolocation for unrecognized domains are simulated for teaching purposes. Never use this as your sole basis for trusting a link.
01 URL Analysis
Paste a full URL (including http:// or https://), or scan a QR code, to run the heuristics engine.
02 Scan Timeline
The order these checks run in mirrors how a real phishing filter pipeline works.
03 Risk Assessment
04 Favicon Detection
Comparing the site's favicon against the brand it appears to impersonate.
05 SSL & Network Intelligence
Certificate posture and simulated network origin — for teaching infrastructure-level red flags.
Hosting geography alone is not proof of malicious intent, but unusual hosting for a "local bank" or well-known brand is worth a second look.
06 Heuristic Checks
Each signal is scored independently. A single flag does not mean the URL is malicious — context matters.
07 Risk Visualization
Animated breakdown of where this URL's risk score is coming from.
08 Threat Intelligence Dashboard
Simulated threat-database lookup for educational purposes.
09 Analysis & Recommendations
10 Domain Intelligence
Simulated WHOIS data — for teaching domain registration patterns only.
11 Export Report
Save this analysis for a portfolio writeup, classroom submission, or your own records.