Phishing URL Interceptor Edge extension security report

Primary functionality: The extension detects suspected phishing URLs and alerts the user before they interact with them. It analyzes the currently opened website address using client-side checks and shows a warning message if the site appears suspicious. How to test the product: 1. Install the extension in Microsoft Edge. 2. Pin the extension icon to the toolbar. 3. Open any normal safe website to confirm that no warning is shown. 4. Open a website that contains typical phishing patterns such as: - random domain name - login page asking for credentials - domain name impersonating a well-known brand 5. When a suspicious URL is detected, the extension: - checks the address - classifies it as suspicious - shows a warning dialog or block page 6. Safe websites should not trigger warnings. Expected behavior: • Safe sites show no alert • Suspicious sites trigger alert or block page Data and privacy: No data leaves the user device. Detection runs locally in the browser. Permissions justification: tabs / activeTab: read current tab URL to analyze it storage: store user preferences such as enabling or disabling the warning