I implemented a (very initial) proof of concept of it using visual studio's dev tools[1], although there are better implementations of it out there as far as I

I implemented a (very initial) proof of concept of it using visual studio's dev tools[1], although there are better implementations of it out there as far as I can tell. My implementation forwards over all of the HTML when a change happens, but it's possible to access only the stuff that changes, and monitor such changes using CDP DOM events. I haven't seen it done in phishing sites but I don't visit them too often, although it's certainly possible! The visible stuff would be mostly the latency between interaction and stuff happening on the page, especially with hovering. [1] https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a951e8 https://gist.github.com/tiagoad/2a2305a9156dea0e425fd57332a9...