Decompose a URL and flag phishing indicators — homograph tricks, suspicious TLDs, and encoded characters.