Chrome Web Store
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

15 indicators in this extension

15 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Ghost ScamShield — Phishing & Scam Protection is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a publisher with 2 extensions and was last updated in August 2026.

Ghost ScamShield — Phishing & Scam Protection

Ghost ScamShield — Phishing & Scam Protection Chrome extension security report

ID: mkodmfkchngomkimakmcdokplonomkcc

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.5.1
Size
0.15 MB
Rating
5.0/5
Reviews
4
Users
9
Type
Extension
Updated
Aug 28, 2026
Category
Privacy & security
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
1 no longer listed

Publisher Contextual Analysis

Author
https://modelkhan.github.io/SIGMA-CYBER-GHOST/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
1
Obsolete
1
Listed
2
Unlisted
0
Users
10

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
https://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
http://*/*
Host
Critical
Broad host access — the extension can read/modify content on every website.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

15 indicators in this extension

15 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Real-time phishing & scam protection, ad blocking, and optional AI analysis (Groq) — local-first, privacy-respecting.

Read the publisher’s full description

Ghost ScamShield is a privacy-focused Chrome extension designed to protect you from phishing, scams, malicious redirects, impersonation websites, suspicious links, ads, and trackers. 🛡️ REAL-TIME PHISHING & SCAM PROTECTION Ghost ScamShield analyzes websites as you browse and identifies suspicious behavior using a local-first detection engine. It checks multiple signals including suspicious URLs, IP-based addresses, punycode and homograph domains, suspicious TLDs, URL shorteners, sensitive URL keywords, credential-related parameters, unusual ports, excessive query parameters, brand impersonation, suspicious scripts, login and payment forms, external links, and mismatches between a website's title and brand. ⚡ 19-SIGNAL LOCAL DETECTION The built-in heuristic engine runs locally in your browser and can analyze websites without requiring an online server. It uses 19 independent security signals and combines them into a risk score to help identify potentially dangerous websites. 🔗 DEEP REDIRECT & LINK ANALYSIS Ghost ScamShield can analyze redirect chains and detect suspicious cross-domain redirects and HTTPS-to-HTTP downgrades. With "AI Scan Before Opening Links" enabled, links can be checked before the browser navigates to their destination. 🌐 REAL VS FAKE DOMAIN VERIFICATION The extension helps identify brand impersonation and typosquatting attempts by analyzing suspicious domain names and comparing them against known brands. When a suspicious website is detected, Ghost ScamShield can clearly indicate whether the domain appears to be an official domain or a potential impersonation. 🔐 LOGIN PAGE GUARD When a suspicious website contains a login form, Login Page Guard can display a prominent warning before you reach the password field. The warning can show the risk score, detected brand impersonation, and a link to the investigation report. 🚫 TWO-LAYER AD & TRACKER BLOCKING Ghost ScamShield includes two layers of ad and tracker protection: • Network-level blocking using Chrome's declarative network request system. • Cosmetic element hiding for common advertising containers, sponsored content, and known advertising iframe patterns. The extension includes a curated collection of ad and tracker domains designed to provide a lightweight and auditable protection layer. 🤖 OPTIONAL REAL-TIME AI ANALYSIS AI analysis is completely optional. You can connect your own Groq API key to receive an additional real-time AI risk assessment. You can also configure your own self-hosted analyzer using Claude or GPT. Your AI provider is controlled by you, and API keys are stored locally in Chrome rather than being included in the extension package. 🔎 OPTIONAL GOOGLE SAFE BROWSING Ghost ScamShield can optionally connect to Google Safe Browsing using your own API key. When enabled, websites can also be checked against Google's threat lists for malware, social engineering, unwanted software, and potentially harmful applications. 📊 INVESTIGATION REPORTS When a website is analyzed, Ghost ScamShield can provide detailed investigation information including the risk score, threat type, confidence, detected signals, domain information, and redirect information. Reports can also be exported as JSON or copied as text for further investigation. ⚙️ FULL SETTINGS CONTROL Ghost ScamShield includes a complete settings dashboard with controls for: • Protection • Detection • Privacy • Advanced & API • Ad & Tracker Blocking • Allowlist and Blocklist • About You can customize protection behavior, detection sensitivity, online analysis services, trusted domains, blocked domains, and other security preferences. 🔒 PRIVACY-FIRST DESIGN Ghost ScamShield is designed with a local-first approach. When no optional online service is configured, the extension's protection engine operates locally and makes zero network requests for its analysis. The extension does not send passwords or form values, card numbers or CVV information, authentication cookies or tokens, session tokens, or full page content/DOM to its optional analysis services. Optional online services only operate when you explicitly configure them. 🚀 BUILT FOR CHROME MANIFEST V3 Ghost ScamShield uses Chrome Manifest V3 with a service worker, content scripts, Chrome storage, navigation monitoring, notifications, and declarative network request rules. The extension is designed to provide fast, transparent, and privacy-respecting protection while keeping its core detection engine available locally. ⚠️ SECURITY DISCLAIMER Ghost ScamShield is designed to help identify potentially dangerous websites, phishing attempts, scams, malicious redirects, and tracking activity. No security tool can guarantee detection of every malicious website or threat. Always verify important websites, domains, messages, and requests independently before entering sensitive information. Ghost ScamShield — Detect threats. Block scams. Browse with confidence.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
15

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

15 indicators in this extension

15 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.5.1
Latest
0.15 MBNot scanned—
53980be433bc710996fbbae7658f69b48959311f4d5f9ad838adce8df3003aef
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.