I have a 2-stage agent that analyzes all of the DOM content (including pop up ads). If anything remotely resembles a scam, it passes the DOM content to a second “judge” LLM that’s more powerful and has a ton of criteria for top scam techniques.

The goal of the 2 stage agent is to prevent resource consumption when something isn’t a scam/harmful, and reduce false positives by doing a second pass if something flags.

I’m currently not detecting content from scripts though, just raw HTML at the moment. Good thinking on your side for doing that, I’m gonna throw it in my backlog.