A Chrome extension that helps users identify potential phishing attempts in their emails using advanced detection techniques and an interactive, user-friendly interface.
- Analyzes email content in real-time
- Detects multiple types of phishing indicators:
- Urgency tactics and pressure language
- Suspicious links and URL patterns
- Generic/impersonal greetings
- Requests for sensitive information
- Time pressure tactics
- Potential sender spoofing
- Three-level risk classification:
- 🔴 High Risk - Likely phishing attempts
- 🟡 Suspicious - Exercise caution
- 🟢 Low Risk - No obvious red flags
- Click on detected issues to highlight them in the email
- Visual badges for different types of threats
- Detailed explanations for each detected issue
- Specific recommendations based on risk level
- Gmail
- Outlook
- Yahoo Mail
- (More providers coming soon)
- Clone this repository or download the source code
git clone https://github.com/RohinSequeira/phishing_detection.git-
Open Chrome and navigate to
chrome://extensions/ -
Enable "Developer mode" in the top right corner
-
Click "Load unpacked" and select the extension directory
-
The extension icon should now appear in your Chrome toolbar
-
Open an email in a supported email provider (Gmail, Outlook, or Yahoo Mail)
-
Click the Email Phishing Detector extension icon
-
Click "Scan Current Email"
-
Review the analysis results:
- Overall risk level
- Warning badges for specific threats
- Detailed list of detected issues
- Click on any issue to highlight it in the email
- Review recommended actions
manifest.json- Extension configurationpopup.html- Extension popup interfacepopup.js- Popup functionality and UI handlingcontent.js- Email analysis and content processingimages/- Extension icons
The extension checks for:
- Suspicious sender domains
- Urgency keywords in subject
- Suspicious URL patterns
- Common phishing phrases
- Generic greetings
- Time pressure tactics
- Requests for sensitive information
- The extension runs entirely in your browser
- No email content is sent to external servers
- All analysis is performed locally
- No sensitive information is collected or stored
Contributions are welcome! Here are some ways you can help:
- Report bugs
- Suggest new features
- Add support for more email providers
- Improve detection patterns
- Enhance the user interface
- Support for more email providers
- Machine learning-based detection
- Custom rules configuration
- Historical analysis tracking
- Bulk email scanning
- Integration with known phishing databases
- Export and reporting features