[mothered]

also phishing pages are blocked by browser through the url

Hence the necessity of "being undetected".

A detection Is exactly that, Irrespective of the entity responsible.

As far as I know, fresh / new scripts created cannot be detected by Firefox or tools ..

Agree.

It's based on a similar principle when FUDing files- they're Initially not detected, however eventually will be when distributed.