Scambuzzer

Scambuzzer is a browser extension that helps you avoid scams and phishing attacks.

ScamBuzzer is a powerful, privacy-first Chrome extension that guards you against phishing and scam sites by scanning every page you visit for known threat patterns. Built with Supabase authentication and running entirely in your browser, ScamBuzzer combines multiple layers of defense: Domain Age & Registration Checks We call the WHOIS API (https://www.whoisxmlapi.com) to determine how recently a domain was registered. Newly minted domains (or ones with conflicting creation dates) light up a red warning—an essential early indicator of phishing threats. Phishing Database Cross-Reference ScamBuzzer queries our backend at https://api.scambuzzer.com/api/phishing/check/{url} to see whether a site is reported in known scam feeds. Result caching in your local extension storage ensures blazingly fast repeat scans. Webpage Script & HTML Analysis Using background script we are fetching html and inspecting it to check hidden element which can have malicious code and after fetching code passing it to ai. Also we are inspecting suspicious forms. URL Structure & Typosquatting Detection Homoglyph attacks (e.g. “gοοgle.com” with Greek omicrons) and percent-encoding tricks are caught by our custom normalization logic. We strip common subdomains, parse out punycode, and flag domains that are near-misses of legitimate ones. Feature Toggles & Quota Management From the “Plan” screen, you can view all the checks for each plan. which are being checked for phishing scam. users with free plan will get 500 unique urls scans per month (persisted across reinstalls via chrome.storage.sync), while Lifetime members enjoy unlimited scanning. Recent Scans & Suspicious Domains Dashboards The popup’s Home page shows your Current Site status, a rolling list of your Recent Scans (up to 10), and your Suspicious Detections list, all stored in chrome.storage.local. This gives you quick context and prevents duplicate warnings. Desktop Notifications & In-Page Alerts For critical alerts—like a confirmed phishing database match, free plan limit. we push both an in-page toast and a system notification (via chrome.notifications) so you can’t miss it. Also we are showing notification for false positive checks like suspicious forms. Safe-by-Design Resource Loading Our phishing-warning.html page and icon assets live inside the extension bundle (web_accessible_resources). When a malicious site is detected, we redirect you to this secure page so you can safely review threat details. Full Privacy ScamBuzzer never ships your raw page contents or personal data to our servers. Everything runs locally, and only minimal metadata, URLs and structured “warnings” arrays are ever sent. We do not use remote code injection or unverified scripts.