Overview
Warns you when a site's domain imitates a known brand: character swaps, homograph spoofing, and brand names on unrelated domains.
PhishSentry checks one specific thing, and tells you exactly what it found. When you land on a site, it examines the domain name for the patterns attackers use to imitate brands you trust: - Character substitution — paypa1.com instead of paypal.com, g00gle.net, netf1ix.com - Brand names on domains the brand does not own — paypal-secure.com, fedexverify.com, login-steam.com - Homograph and internationalised spoofing — Cyrillic and Greek characters that render as Latin ones - Brand names in a subdomain of an unrelated site — paypal.account-services.net - Typosquats — a character doubled, dropped, or swapped: ppaypal.com, payapl.com, amazn.com - Brand names on low-reputation top-level domains Every warning states the reason. Instead of a confidence score you cannot interrogate, you get "'paypal' appears in the domain 'paypa1-secure.com', which is not owned by paypal." You can judge the reasoning yourself. WHAT IT WILL NOT DO This is a domain-similarity checker, and this listing is deliberately specific about that: - It does NOT detect phishing hosted on a legitimate platform under an unrelated subdomain — for example a credential form at a random subdomain of a free hosting service. Those domains are not imitations, and the domain name carries no evidence of the page's contents. - It does NOT scan page content, attachments, or downloads. - It is NOT a replacement for Google Safe Browsing, antivirus software, or your own judgement. Measured performance and every known limitation are published in the repository (EVALUATION.md), including the measurements that led to this scope. PRIVACY - Only the HOSTNAME is ever sent — never the path, query string, or page content. - A built-in list of widely-used domains is checked entirely inside your browser. Those hostnames are never sent anywhere at all, so most ordinary browsing never leaves your device. - The checking service is stateless. Hostnames are not stored and are excluded from its logs. - No accounts. No analytics. No third parties. No data is sold. OPEN SOURCE Extension and checking service: https://github.com/abhishekjaden/Phish-Sentry Detection is deterministic rules, not a machine-learning model, which is why each verdict can name its reason — and why known-good brand domains are allowlisted by construction rather than merely scoring low.
Details
- Version2.0.0
- UpdatedAugust 11, 2026
- Offered byabhishekjaden
- Size14.14KiB
- LanguagesEnglish
- Developer
Email
abhishekjaden@gmail.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
PhishSentry — Lookalike Domain Checker has disclosed the following information regarding the collection and usage of your data. More detailed information can be found in the developer's privacy policy.
PhishSentry — Lookalike Domain Checker handles the following:
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
