PhishGuard — Local AI Phishing Detector

PhishGuard scans the emails you open in Gmail and Outlook Web for signs of phishing and scams — entirely on your own device. No email content, links, or attachments are ever sent to a server. There's no account to create and no sign-up. A coloured banner appears automatically above any email you open, telling you in plain English whether it looks safe, suspicious, or dangerous — and exactly why. WHAT IT CATCHES 🔗 Lookalike & impersonation domains Typosquatted domains (paypa1-verify.com), brand names in the sender name or body that don't match the real sending domain, punycode/homoglyph tricks, and free-mail addresses pretending to be a company. 🎯 Spoofed links and buttons Link text that displays one domain but points to another, raw IP-address links, javascript:/data: links, URL shorteners, and "Verify your account"-style buttons pointing to unrelated domains. ⚠️ Scam-template language Urgency and pressure phrasing, direct requests for passwords/card numbers/OTP codes, prize and wire-transfer scam patterns, and generic greetings paired with a claimed well-known brand. 📎 Suspicious attachments Executable and script file types, and double extensions like invoice.pdf.exe. 🧠 A local AI model A small on-device machine-learning classifier scores how closely an email's wording resembles known phishing and scam emails. It runs as a few kilobytes of plain JavaScript — no downloads, no WASM, no network calls, fully offline. WHY IT'S DIFFERENT Most phishing tools work by sending your email content to a server. PhishGuard never does. Every check — domain analysis, link inspection, language scoring — happens locally in your browser, using a model that ships inside the extension itself. Your inbox stays yours. HOW IT WORKS Just install it. PhishGuard automatically watches Gmail (mail.google.com) and Outlook Web (outlook.live.com / office.com / office365.com). Open any email and a risk banner appears above it within moments — no clicking, no setup required. For any other email provider or desktop client, open the extension popup and paste in the sender, subject, body, and links for the same instant analysis. SETTINGS Click the extension icon → Settings to add trusted sender domains (like your own company's domain) that should always be skipped. PRIVACY, BY DESIGN • No network requests are made by this extension. Ever. • The AI model file ships inside the extension — it is never downloaded at install or run time. • Nothing about scanned emails is stored beyond an in-memory, per-tab cache that clears when you close the tab. A NOTE ON LIMITATIONS PhishGuard is a heuristic + lightweight-AI assistant, not a guarantee. Always stay cautious with unexpected requests for money, credentials, or urgent action — even when PhishGuard shows "safe." If a webmail redesign changes Gmail/Outlook's page structure, use the manual paste-scan in the popup as a fallback until an update ships. Works with: Gmail (mail.google.com), Outlook Web (outlook.live.com, outlook.office.com, outlook.office365.com).