SecurityShrimp APEX

Augment the web with indicators that help detect phishing attempts

SecurityShrimp APEX (Anti-Phishing EXtension) augments every page you visit with context-aware warnings that help you spot phishing attempts before you hand over a password. It runs entirely in your browser. Nothing is sent to any server. No telemetry. No accounts. No data collection of any kind. WHAT IT CHECKS • Look-alike domains. paypa1.com, goog1e.com, arnazon.com, tvvitter.com — homoglyph tricks that fool a quick glance get flagged against the top 20,000 sites on the web. • Unicode / IDN domains. Punycode-encoded URLs (xn--...) are decoded and shown so you can see what the address bar is actually rendering. • Misleading link text. When a link reads "paypal.com" but actually points at evil.example, a warning appears on hover. • Insecure connections. HTTP-only sites get a warning before you type anything sensitive. • First-time visits. Sites you've never been to before are flagged so you can pause and verify the address bar before entering credentials. HOW IT HELPS YOU RECOGNIZE FAMILIAR SITES Every domain you visit is shown alongside a unique color and emoji fingerprint, derived locally from the domain name. Your bank, your email, your work tools — each gets a stable visual signature you'll start to recognize. If you ever land on a look-alike, the colors and the emoji will be different, even if the name looks right. CONFIGURABLE TO HOW YOU WORK • Show tooltips on every input, only on password fields, or never. • Whitelist specific sites or wildcards (paypal.com, *.google.com). • Toggle the misleading-link warnings independently. PRIVACY Everything happens on your machine. The extension uses your browser history (locally) to detect first-time visits, and downloads a public list of the top 20,000 domains once a week from Majestic to power the look-alike check. That list arrives bundled so the extension is useful from the first second after install. OPEN SOURCE Source code: https://github.com/SecurityShrimp-LTD/anti-phishing-extension Licensed GPLv3. Forked from the original ZecOps Anti-Phishing Extension (unmaintained since 2022) and modernized for Manifest V3. Found a bug or want to suggest a check? File an issue.