This check runs the same rule-based heuristics used by the desktop and email scanning modules of this project (IP-based links, brand-name spoofing, suspicious domains, link shorteners, and more). It is a demonstration security layer built for an MSc research project, not a production security product.