Himoya: AI Scam & Phishing Detector

Enterprise client-side security engine protecting Central Asian users from card drainers, OTP phishing, and malicious APKs.

Himoya (Uzbek for "Protection") is an open-source, client-side cybersecurity browser extension designed to protect internet users in Central Asia from online financial scams, card-draining funnels, SMS OTP theft, and malicious APK droppers in real time. Across Central Asia, localized social engineering schemes—such as banking card credential harvesting (targeting Uzcard, Humo, Click, Payme, and Uzum), fake state subsidy and compensation decrees, Telegram account session hijacking, fake voting contests, and Trojan APK wedding/court order invitations—frequently target everyday internet users. Himoya operates directly within your browser as an intelligent, real-time security shield. 🛡️ KEY CAPABILITIES: • 2,700+ Research-Backed Threat Indicators: Linear-time Aho-Corasick Deterministic Finite Automaton (DFA) engine scanning dynamic single-page web applications (Telegram Web, Facebook, Instagram) in under 1ms without frame drops. • Multilingual & Multi-Script Coverage: Evaluates text across Uzbek Latin, Uzbek Cyrillic, and regional Russian threat patterns. • Anti-Evasion & Homoglyph Normalization: Unmasks lookalike Cyrillic characters, zero-width spaces, leetspeak, and decorative separator noise inserted to bypass keyword filters. • Uzbek Morphological Stemming: Strips agglutinative possessive and case suffixes (-ingiz, -dan, -gacha, -ning, -da) to reliably detect threat roots. • Cryptographic Bloom Filter: MurmurHash3 + FNV-1a two-tiered domain reputation lookup providing instant O(1) detection of high-risk phishing domains with 0% false positives. • Closed Shadow DOM Isolation: Security warning banners are mounted inside an encapsulated Closed Shadow DOM, preventing host web page scripts from reading or tampering with warnings. • 100% On-Device Zero-Knowledge Privacy: All linguistic analysis, pattern matching, and URL verification execute in volatile browser RAM. Zero chat messages, browsing history, or personal data are ever transmitted to any external server. Himoya is completely free, open-source under the MIT License, and built for the digital safety of everyday families and internet users.