PhishGuard - Scam & Phishing Checker

🛡️ PhishGuard checks every page you visit against 2.5M+ known scam and phishing domains, with all matching happening locally in your browser. No URLs leave your device. No telemetry. No account. ▌WHAT IT DOES • Blocks navigation to known scam/phishing sites with a full-screen warning (or softer banner / overlay — you choose) • 2.5M+ malicious domains aggregated from 38 public threat-intelligence feeds, refreshed daily • Heuristic detection: digit/letter homograph attacks, Cyrillic confusables, deep subdomains, risky TLDs, IP-as-URL, suspicious keywords in domain • URL shortener warnings before you follow them • Image scanner detects QR codes on pages and warns if they link to known scam sites • Optional real-time URL check (bring your own API key) • Custom user whitelist + blocklist • Built-in safe list for major legitimate sites — minimizes false positives ▌PRIVACY PhishGuard is built around one rule: your browsing history never leaves your browser. • Domain matching runs entirely on-device against a locally-cached blocklist • To download the right slice of the blocklist, only the FIRST LETTER of a domain is included in a request to fetch the corresponding shard file. The remote server sees a shard filename — not the full URL, not the host, not the referrer • No analytics, no telemetry, no third-party trackers • Full source code is open and verifiable Full privacy policy: https://github.com/phishguard-niki/Phishguard/blob/master/PRIVACY.md ▌HOW IT WORKS Install → it just works. As you browse, PhishGuard checks each page in the background. If you land on a known scam site, you get a warning. If a URL looks suspicious (homograph, brand impersonation, deep subdomain), you also get a warning. You can adjust warning style in the options page. Blocklist updates daily through an automated pipeline. The extension fetches fresh shards on-demand with a 1-hour cache, so users always get current protection without manual updates. ▌WHY <all_urls> PERMISSION? PhishGuard's whole purpose is to check every page you visit. We can't know in advance which sites are dangerous, so we need to read the URL of every page navigation. We do NOT read page contents, intercept form data, or send URLs anywhere. The code is open-source and you can verify this yourself. ▌OPEN SOURCE / FEEDBACK • Source: https://github.com/phishguard-niki/Phishguard • Issues & feature requests: https://github.com/phishguard-niki/Phishguard/issues License: MIT ═══════════════════════════════════════════════════════ 🛡️ PhishGuard 防詐衛士：點擊任何網址前的最後一道防線 每當你瀏覽網頁，PhishGuard 會比對 250 萬+ 已知詐騙釣魚網域。所有比對都在你的瀏覽器本機完成 — 你的瀏覽紀錄完全不會離開裝置。 ▌主要功能 • 已知詐騙網站全頁面警示（也可改成 banner 或 overlay 較弱提示） • 整合 38 個公開威脅情資來源、250 萬+ 詐騙網域，每日自動更新 • 啟發式偵測：數字字母同形字攻擊、Cyrillic 偽字、深層子網域、可疑 TLD、IP 直連、可疑關鍵字 • 縮網址警示 • 圖片掃描：偵測頁面內 QR Code 並比對黑名單 • 可選即時 URL 檢查（自備 API key） • 自訂白名單 / 黑名單 • 內建主流網站白名單避免誤判 ▌隱私設計 唯一原則：你的瀏覽紀錄不離開瀏覽器。 • 所有網域比對都在本機進行 • 為了下載對應的黑名單分片，僅將網域「第一個字母」送到伺服器（例：domain 開頭是 a 就抓 shard-a.json）。伺服器只看得到分片檔名，看不到完整網址、host 或 referrer • 無任何 telemetry、analytics、追蹤 • 程式碼完全開源於 github.com/phishguard-niki/Phishguard 源碼授權：MIT