Pagida — Phishing Detector

Pagida tells you WHY, not just what. Most phishing warnings give you a red screen and expect you to trust it. Pagida gives you a risk score out of 100, then shows you every single warning sign it found, in plain English, with the evidence attached: "The login form sends your password to collector-node4.tk, not to this site" +32 "This domain was registered 3 days ago" +30 "The page says 'PayPal' but the site owner is verify-account.tk" +30 You can check the reasoning. You can disagree with it. And after a few weeks you start spotting the same signs yourself, which is the actual point. MEET IRIS Iris is the small face in the corner. She reads the page with you, stays quiet when everything is fine, and turns from calm blue to alarmed red when it is not. She is not decoration: her expression is the score, visible before you read a word. WHAT PAGIDA CHECKS: 38 rules across four layers THE ADDRESS Lookalike characters, typosquats, brand names hiding in subdomains, free-registration TLDs, personalised phishing links with your email in them, disposable hosting, and paths inside compromised WordPress installs. THE PAGE Password boxes on unencrypted pages, login forms that submit somewhere else entirely, brand impersonation, copied login pages, hidden frames, blocked paste, obfuscated scripts, anti-analysis tricks. REPUTATION The OpenPhish community blocklist, the URLhaus malware database, how old the domain is, and Google's own list of sites caught spreading scams. Free, with no sign-up (see PRIVACY below). PATTERNS Combinations that are individually weak and jointly damning. THE FULL SITE REPORT Press one button and Pagida tells you what a site actually is: Who registered the domain and when Where it is hosted, on whose network, in which country Its complete public certificate history Whether it can even send email (a scam domain usually cannot) What the site is built with, and whose code it loads Which ports are open on the machine behind it Whether the internet archive has ever seen it before None of that requires an account or an API key. It is the depth a professional would go to, in one screen. YOUR CALL BEATS ITS CALL Report a site as phishing and Pagida warns you about it from then on Mark a site as safe and it stops scoring it Right-click any link and check it WITHOUT opening it Everything you mark is listed, removable, and exportable as JSON PRIVACY No account. No sign-in. No analytics. No telemetry. No advertising. Nothing sold to anyone. The scoring runs on your computer. Pagida runs one small server, and it is not going to be buried in the fine print: it holds the paid API key that Google's threat list requires, so that you get that protection for free without registering for anything. It receives a bare domain name, "example.com", and never the address of the page you are on. It stores nothing at all: no IP, no history, no logs. It refuses any request containing a path. Its complete source is in the repository. One switch in Options turns it off, and the other twenty-one signals carry on without it. Domain-age lookups send the domain only. The blocklist is downloaded as a plain file and matched on your own machine, so the pages you visit are never sent anywhere. Full details, source by source: https://github.com/AryannDhingraa/pagida/blob/main/PRIVACY.md OPEN SOURCE, AND HONEST ABOUT ITS LIMITS Every line is on GitHub under the MIT licence, including a published evaluation of how well the detection actually performs, measured against live phishing feeds, with the false-positive rate stated openly rather than quietly omitted. Pagida flags likely phishing. It cannot catch everything, particularly a legitimate site that was compromised an hour ago. It is a second opinion, not a guarantee, and the known limitations are documented in the repository instead of hidden. Source: https://github.com/AryannDhingraa/pagida Privacy policy: https://github.com/AryannDhingraa/pagida/blob/main/PRIVACY.md Report a bug: https://github.com/AryannDhingraa/pagida/issues