RiskSentinel is an open-source browser extension that performs real-time scam detection and website risk analysis using domain intelligence, content inspection, checkout analysis, and optional reputation APIs.
It helps users identify fake stores, scam job listings, phishing pages, and risky websites before they enter credentials or payment information.
Most scam checker tools give a simple yes/no answer.
RiskSentinel instead provides explainable security signals so users can see why a site is risky.
Think of it as a website risk analyzer rather than a blacklist lookup.
- Domain age (RDAP)
- HTTPS detection
- Certificate transparency history
- Missing contact info
- No privacy / terms / refund policies
- High-pressure language
- Unrealistic income claims
- Phishing-style wording
- Password fields on suspicious pages
- Countdown / scarcity timers
- Fake "As seen on" press logo walls
- Brand–domain mismatch
- Copy-paste policy boilerplate
- Crypto / gift card / wire transfer language
- Off-domain checkout links
- URL shorteners in checkout
- Known processors (PayPal, Stripe, Shopify, etc.)
- Redirect-heavy payment flows
- Google Safe Browsing
- VirusTotal
- 0–100 risk score
- Low / Medium / High classification
- Top 3 red flags
- Full findings list
- Per-domain scan history
✔ Explainable results
✔ No tracking / telemetry
✔ No account required
✔ API keys stored locally
✔ Works on any website
✔ Built for security professionals & everyday users
-
Clone the repository:
-
Open in your browser:
chrome://extensions
or
brave://extensions -
Enable Developer mode
-
Click Load unpacked
-
Select the RiskSentinel folder
-
Pin the extension
RiskSentinel works without API keys.
Keys only improve reputation coverage.
Supported:
- Google Safe Browsing
- VirusTotal
Open extension details → Extension options → Paste keys → Save
Keys are stored using chrome.storage.local.
RiskSentinel/
├─ manifest.json
├─ popup.html
├─ popup.js
├─ content.js
├─ background.js
├─ options.html
├─ options.js
├─ icons/
│ ├─ icon16.png
│ ├─ icon32.png
│ ├─ icon48.png
│ └─ icon128.png
└─ README.md
- Checking suspicious online stores
- Vetting remote job listings
- Investigating phishing links
- Auditing landing pages
- Security awareness training
RiskSentinel provides risk signals, not guarantees.
Always apply human judgment before making decisions.
- Exportable reports
- Simplified icon-only mode
- OSINT enrichment
- Server-side reputation proxy
- Pro version
Pull requests are welcome.
Ways to help:
- Add new detection rules
- Improve scoring logic
- Improve UI/UX
- Write documentation
MIT License
If you find RiskSentinel useful:
Star this repository
Share it with security-minded friends
Submit ideas or issues
Stars help the project gain visibility and attract contributors.