# AntiPhish - Phishing Detector

> Warns users if the visited website matches a known phishing URL from a CSV feed sourced from phishstats

Canonical page: [https://chrome-stats.com/d/antiphish-phishing-detector](https://chrome-stats.com/d/antiphish-phishing-detector)

## Overview

- **ID:** `antiphish-phishing-detector`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** 64n5h33
- **Category:** privacy-security,alerts-updates
- **Daily users:** 2
- **Version:** 1.0
- **Last updated:** 2025-03-30
- **First published:** 2025-03-27
- **Size:** 53 KB
- **Data as of:** 2026-09-07
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/antiphish-phishing-detector/)

## Description

🛡️ <strong>Phishing Detector Add-on</strong>

A smart, proactive browser extension that <strong>warns you before phishing pages can trick you</strong> — powered by a <strong>crowdsourced phishing URL feed</strong>.

✨ <strong>Key Features</strong>

🔄 <strong>Live Threat Feed (Every 90 Minutes)</strong>
Fetches the latest phishing data from <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/7cb0cd9ea3d501a5afbce6708f9332b08fbfd25440e60e3b377799627e2fad66/https%3A//phishstats.info/phish_score.csv" rel="nofollow">PhishStats</a> every 90 minutes. Ensures you're protected with near real-time updates.

🕵️‍♂️ <strong>Smart Domain Matching</strong>
Instead of matching full URLs (which can easily change), it uses <strong>eTLD+1 domain extraction</strong> (like <code><a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/b26f9475427830c5dca4bf5bb708f95812618e174dbeaccc0630e35bb7854be3/http%3A//example.co.uk" rel="nofollow">example.co.uk</a></code>, <code><a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/9f286b7704ea9102afe7dfdb47928f59b9b0415458b0077c9701488f41b6b08f/http%3A//malicious.com" rel="nofollow">malicious.com</a></code>) to catch tricky subdomain tricks like:

<code>hxxp://<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/173ca5cbe75bc8bad8c41eba3f8074503b895421ea1d597da91445e88b173900/http%3A//secure-login.microsoft.verifybadsite.com" rel="nofollow">secure-login.microsoft.verifybadsite.com</a>
</code>

🧠 <strong>URL Normalization</strong>
Cleans up and standardizes URLs by stripping query parameters, protocol differences, and trailing slashes — so phishing attempts using URL obfuscation don't slip through.

⚠️ <strong>Full-Screen Warning Page</strong>
If a user visits a suspicious page, they’re shown a <strong>clear, fullscreen warning</strong> with:
- ⏰ Last update time of the threat feed
- 🧷 A list of known phishing links matching the current domain
- 💬 A friendly reminder that the list is community-sourced

🔒 <strong>Two Clear Choices for the User</strong>
- ✅ <strong>Ignore Warning for Today</strong>
  Suppresses future warnings for this domain <strong>for the next 24 hours</strong>.
- 🚪 <strong>Proceed Anyway</strong>
  Bypasses the warning just for the <strong>current session</strong>. Warnings resume when the browser restarts.

🚫 <strong>No False Alarm Loops</strong>
Domains you choose to ignore (for the day or session) are remembered. You won’t be warned again during that period.

🔍 <strong>Lightweight &amp; Privacy-Respecting</strong>
- 📁 All data is stored locally
- 🌐 No personal data leaves your browser
- 🛑 Doesn't track your browsing

📥 <strong>Auto-updating Threat Database</strong>
- No need for manual configuration
- Always stays current in the background

🔧 <strong>Tech Stack</strong>
<ul><li>🧠 <code>tldjs</code> for accurate base domain detection  </li><li>📄 CSV parser for threat list processing  </li><li>🧰 Firefox WebExtension APIs (<code>webRequest</code>, <code>storage</code>, <code>runtime</code>, <code>notifications</code>)  </li><li>🎨 HTML/CSS + JS for UI &amp; warning screens</li></ul>

## Rankings

- #68,101 — Overall

## Permissions and access

### Permissions

- `webRequest`
- `webRequestBlocking`
- `notifications`
- `storage`
- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [AntiPhish - Phishing Site Checker](https://chrome-stats.com/d/antiphish-phishing-site-check) — 6 users
- [Phishing Detector](https://chrome-stats.com/d/phishing-detector-extension) — 6 users
- [Phishing Detector](https://chrome-stats.com/d/phishing-detectorrr)
- [Community-Based Phishing Detection](https://chrome-stats.com/d/phishdect) — 5.00 / 5
- [Anti-Phishing](https://chrome-stats.com/d/anti-phishing-extension) — 4 users
- [PhishGuard](https://chrome-stats.com/d/phishguard432) — 1 users
- [PhishEye - Anti Phishing](https://chrome-stats.com/d/phisheye-anti-phishing) — 4 users
- [Off the hook](https://chrome-stats.com/d/off_the_hook)
- [Extension Against Phishing](https://chrome-stats.com/d/extension-against-phishing) — 7 users
- [Phishy.pro - Phishing | Malware Scanner](https://chrome-stats.com/d/phishy-phishing-malware-scan) — 93 users, 2.00 / 5
- [PhishDetect](https://chrome-stats.com/d/phishdetect) — 15 users
- [OverPhish: Phishing Domain Blocker](https://chrome-stats.com/d/overphish) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/antiphish-phishing-detector)