Why Comodo programmer's not develop heuristic for phishing sites ?

Since CAV does not actively scan javascripts in browsers, how can CIS block this kind of malware?