ThreatStrike Shield

Local-first phishing & malicious-URL scanner. Warns on hover, blocks known-bad sites, guards login forms. No telemetry.

ThreatStrike Shield blocks phishing and malware-hosting sites before the page loads and lets you check any link on demand with a right click. What's in the blocklist ThreatStrike Shield runs the following public threat-intel feeds as a single local rule set, applied to every navigation and request: - Phishing.Database (active): 391,552 entries - HaGeZi Threat Intel (TIF medium): 316,749 entries - Phishing Army (extended): 144,627 entries - Phishing-filter (curated, top-1M excluded): 32,406 entries - URLhaus-filter (curated): 14,693 entries - URLhaus (abuse.ch): 436 entries - OpenPhish (community): 258 entries - Steven Black hosts (ads + malware) Combined: ~900,000 entries across phishing, malware distribution, and threat-intel feeds. Matches are blocked before the page renders, with a clear interstitial explaining why. Right click link scanning Right click any link on any page and choose "Scan with ThreatStrike." The link is submitted to VirusTotal and cross-checked against the local blocklist. Results show vendor hits, malicious/clean counts, and a verdict, all in a single inline view. VirusTotal, on your terms ThreatStrike Shield uses the VirusTotal API only when you ask it to. You provide your own free or paid VirusTotal API key in the extension options. The key is stored locally in your browser and is never sent anywhere except api.virustotal.com. No intermediary, no proxy, no account on our servers. Privacy by default - No analytics, no telemetry, no fingerprinting. - URLs are sent to VirusTotal only when you trigger a scan. - Blocklist matching happens locally; no browsing data leaves your machine. - The extension does not collect, store, or sell personal data. Free and open ThreatStrike Shield is free to use. You only need a VirusTotal API key, which is free for personal use at virustotal.com.