Real-Time PhishShield Autor: raye

Real-Time PhishShield checks the URL of every page you visit against common phishing indicators — raw IP addresses, disguised (punycode) domains, unusually long or hyphen-heavy hostnames, and sensitive keywords like "login," "verify," or "account" combined in suspicious ways.

If a page's risk score crosses a threshold, PhishShield shows a warning banner before you can enter any information.

Click the toolbar icon any time to see the current page's safety status, its exact risk score, and which specific signals drove that score.

Why it's different:
- 100% local — URLs are never sent to any server
- Transparent — see exactly which features contributed to the score, not just a black-box verdict
- Lightweight — a small decision-tree model, no heavy ML runtime

Permissions used:
- host_permissions (<all_urls>) — required to read the URL of the page you're on, which is the extension's entire purpose
- scripting — required to display the warning banner on a flagged page

No data is collected, stored remotely, or shared with any third party.