SecurityShrimp APEX Autor: SecurityShrimp LTD

SecurityShrimp APEX (Anti-Phishing EXtension) augments every page you visit
with context-aware warnings that help you spot phishing attempts
before you hand over a password.

It runs entirely in your browser. Nothing is sent to any server. No
telemetry. No accounts. No data collection of any kind.

WHAT IT CHECKS

• Look-alike domains. paypa1.com, goog1e.com, arnazon.com, tvvitter.com
— homoglyph tricks that fool a quick glance get flagged against the
top 20,000 sites on the web.

• Unicode / IDN domains. Punycode-encoded URLs (xn--...) are decoded
and shown so you can see what the address bar is actually rendering.

• Misleading link text. When a link reads "paypal.com" but actually
points at evil.example, a warning appears on hover.

• Insecure connections. HTTP-only sites get a warning before you type
anything sensitive.

• First-time visits. Sites you've never been to before are flagged so
you can pause and verify the address bar before entering credentials.

HOW IT HELPS YOU RECOGNIZE FAMILIAR SITES

Every domain you visit is shown alongside a unique color and emoji
fingerprint, derived locally from the domain name. Your bank, your
email, your work tools — each gets a stable visual signature you'll
start to recognize. If you ever land on a look-alike, the colors and
the emoji will be different, even if the name looks right.

CONFIGURABLE TO HOW YOU WORK

• Show tooltips on every input, only on password fields, or never.
• Whitelist specific sites or wildcards (paypal.com, *.google.com).
• Toggle the misleading-link warnings independently.

PRIVACY

Everything happens on your machine. The extension uses your browser
history (locally) to detect first-time visits, and downloads a public
list of the top 20,000 domains once a week from Majestic to power the
look-alike check. That list arrives bundled so the extension is
useful from the first second after install.

OPEN SOURCE

Source code: https://github.com/SecurityShrimp-LTD/anti-phishing-extension
Licensed GPLv3. Forked from the original ZecOps Anti-Phishing
Extension (unmaintained since 2022) and modernized for Manifest V3.
Found a bug or want to suggest a check? File an issue.