WatchPost - Network surveillance & cookie auditing

WatchPost is a comprehensive browser security toolkit that monitors, analyzes, and alerts you to security threats in real-time — all running 100% locally in your browser. Zero data leaves your machine. ── WHY WATCHPOST? ── Every page you visit makes dozens of network requests. Which ones are trackers? Is that login page legitimate? Are your cookies secure? Are you leaking data to third parties? WatchPost lives in your Chrome DevTools sidebar and gives you complete visibility into every security aspect of the pages you visit — with no external servers, no sign-ups, and no data collection. ── 5 MODULES ── ■ NETWORK SENTINEL Real-time inspection and classification of all network requests: • Tracker detection (50+ known tracker domains) • Beacon monitoring (data exfiltrated during page unload) • Data exfiltration alerts (large payloads to external domains) • Plain-text credential detection over HTTP • Domain-grouped view with search, type filter & request details • Waterfall timing visualization • Security badge for every request (safe / low / high) ■ PHISHING SHIELD Multi-layered page analysis to detect impersonation and deception: • Title-brand mismatch (page claims to be a brand but domain is different — only fires on login pages to avoid false positives) • URL path brand detection (brand name in URL path on wrong domain) • Homograph attack detection (mixed-script Unicode domain spoofing) • Typosquatting (Levenshtein distance ≤2 from 200+ brands) • Subdomain spoofing (brand appears in subdomain) • Form hijack detection (password forms submitting to external domains) • Social engineering text detection (urgency phrases, account threats) • Favicon domain mismatch (favicon hosted on brand domain but page is different) • Copyright brand mismatch (page displays brand copyright on wrong domain) • Password + hidden iframe detection (credential harvesting setup) • Hidden form fields with sensitive names • Suspicious URL parameters (redirect, token, auth patterns) • URL @-symbol obfuscation detection • 200+ tracked brands across banking, crypto, social, email, gaming, cloud, government ■ COOKIE GUARDIAN Complete cookie and browser storage audit: • Security flag analysis (Secure, HttpOnly, SameSite) • Tracking cookie identification (GA, FB, Hotjar, TikTok, etc.) • Cookie scoring (−60 to +40) • LocalStorage & SessionStorage inspection • Canvas fingerprinting detection ■ CONTENT INSPECTOR Security headers verification and content analysis: • 9 critical security headers checked (HSTS, CSP, XFO, etc.) • CSP analysis (unsafe-inline, unsafe-eval, wildcards, upgrade-insecure-requests) • Mixed content detection on HTTPS pages • CORS misconfiguration alerts • External resources grouped by domain with request stats ■ PRIVACY DASHBOARD Central security command center: • Overall security score (0-100) • Threat distribution bar (safe / low / high breakdown) • Top requested domains leaderboard • HTTPS vs HTTP request ratio • Activity timeline (last 60 seconds) • Attack surface summary (trackers, exfiltrations, beacons, errors) • Expandable detailed lists for every threat category • One-click report export FREE FOREVER ── PRIVACY ── WatchPost processes all data entirely in your browser using Chrome extension APIs. No data — network requests, page content, cookies, or personal information — is ever sent to external servers. Everything stays on your machine.