Scambuzzer

Scambuzzer is a browser extension that helps you avoid scams and phishing attacks.

ScamBuzzer is a powerful, privacy-first Chrome extension that guards you against phishing and scam sites by scanning every page you visit for known threat patterns. Built with Supabase authentication and running entirely in your browser, ScamBuzzer combines multiple layers of defense: Domain Age & Registration Checks We call the WHOIS API (https://api.jsonwhoisapi.com) to determine how recently a domain was registered. Newly minted domains (or ones with conflicting creation dates) light up a red warning—an essential early indicator of phishing threats. Phishing Database Cross-Reference ScamBuzzer queries our backend at https://api.scambuzzer.com/api/phishing/check/{url} to see whether a site is reported in known scam feeds. Result caching in your local extension storage ensures blazingly fast repeat scans. Webpage Script & HTML Analysis Using Chrome’s scripting API, our content script inspects the live DOM for hidden or zero-size <iframe> injections, suspicious <script> tags, or hidden event handlers. If any malicious patterns emerge, we immediately halt page execution and warn you. Clipboard Hijacking Protection Many scam sites swap your copied wallet or payment address with their own. Our extension intercepts paste events in real time to block unauthorized replacements. URL Structure & Typosquatting Detection Homoglyph attacks (e.g. “gοοgle.com” with Greek omicrons) and percent-encoding tricks are caught by our custom normalization logic. We strip common subdomains, parse out punycode, and flag domains that are near-misses of legitimate ones. Twitter Scan ScamBuzzer extracts all external links from your current tweet and runs each one through phishing, WHOIS checks and phishing db check. It alerts you inline with a warning popup for any dangerous link—so you can scroll safely without falling for impersonators or scam threads. Email Scan For email platforms like Gmail, ScamBuzzer parses the content of visible emails and inspects every hyperlink within. Links found in promotional or phishing emails are checked in real time, and if found risky, are immediately flagged with on-page alerts. Feature Toggles & Quota Management From the “Plan” screen, you can enable or disable individual checks to fine-tune performance. Free users get 15 total scans (persisted across reinstalls via chrome.storage.sync), while Lifetime members enjoy unlimited scanning. Early-bird adopters flagged by your profile bypass these limits altogether. Recent Scans & Suspicious Domains Dashboards The popup’s Home page shows your Current Site status, a rolling list of your Recent Scans (up to 5), and your Suspicious Detections list, all stored in chrome.storage.local. This gives you quick context and prevents duplicate warnings. Desktop Notifications & In-Page Alerts For critical alerts—like a confirmed phishing database match, free plan limit. we push both an in-page toast and a system notification (via chrome.notifications) so you can’t miss it. Safe-by-Design Resource Loading Our phishing-warning.html page and icon assets live inside the extension bundle (web_accessible_resources). When a malicious site is detected, we redirect you to this secure page so you can safely review threat details. Full Privacy ScamBuzzer never ships your raw page contents or personal data to our servers. Everything runs locally, and only minimal metadata—URLs and structured “warnings” arrays—are ever sent. We do not use remote code injection or unverified scripts.