On-device AI · Zero data leaves your browser

Catch phishing
before it catches you.

PhishNet scans every email in Gmail & Outlook with a DistilBERT transformer running entirely inside your browser. No servers. No tracking. No excuses.

Scroll
100%On-device inference
0 bytesEmail data uploaded
~200 msPer-email analysis
4-classDistilBERT classifier
See it in action

Your inbox, with a sixth sense.

Every opened email gets an instant verdict. One click opens the full forensic breakdown — no tabs, no uploads, no waiting.

P PayPal Support <security@paypa1-support.tk> ⚠️ Phishing · 91%
Action Required: Verify Your Account Now

Dear customer, your account has been suspended. Confirm your identity within 24 hours at secure-verify.tk/login ⚠️
or permanently lose access to your funds.

🎣 PhishNet analyzed this email locally in 0.4s — no data left your browser.

🎣 PhishNet Threat Inspector0.4s · on-device
⚠️ Phishing Threat Detected91%
Urgency panic30/40
Domain trust45/45
Link threats40/45
AttachmentsClean
Typosquatted lookalike domain for 'paypal' (paypa1)
Homograph / deceptive characters in domain (.tk TLD)
Destination hides behind display text
Urgency signals: suspended, verify, confirm
01 — Capabilities

Everything a phisher hopes you don't have.

Inline verdicts, deep link forensics and attachment analysis — rendered straight into the mail client you already use.

🛡️

Inline Verdict Badges

Every opened email gets an instant 🛡️ Safe / ⚠️ Phishing / ❓ Uncertain badge in the message header, with a confidence score.

🔍

Threat Inspector Modal

Click any badge for a full breakdown: urgency score, domain trust, link-by-link safety and attachment risk — all explained.

🔗

Spoofed Link Detection

Homograph (Cyrillic lookalikes), punycode, typosquatting via Levenshtein distance against 25+ major brands, and display-text mismatch.

📎

Weaponized Attachments

Detects executables, scripts, ISO images and deceptive double extensions like invoice.pdf.exe.

⭐

Trusted Senders

Whitelist domains and addresses you trust. Whitelisted mail is marked instantly — no re-scan, no noise.

📊

Local Dashboard

Scan history and threat stats stored purely on-device. Clear them any time with one click.

02 — How it works

A transformer in your tab, not our cloud.

live scan sweep
01 / EXTRACT

Read the email locally

A content script extracts subject, body, links and attachments from the open message in Gmail or Outlook Web.

signal pulses through layers
02 / INFER

Classify on-device

The text runs through a quantized DistilBERT model via Transformers.js + ONNX Runtime Web inside an isolated offscreen document.

verdict · stamped locally
03 / MARK

Show the verdict

A badge is injected into the header. Suspicious links get highlighted. Click through for full forensic detail.

03 — Privacy

Your inbox never leaves home.

Most "email security" tools work by forwarding your mail to their servers. PhishNet flips the model: the ~50 MB model downloads once, then every scan happens on your silicon. We couldn't read your email if we wanted to.

04 — Install

Live in thirty seconds.

$1git clone https://github.com/anubhavaanand/PhishNet.gitgrab the source
$2chrome://extensionsenable Developer mode
$3Load unpacked → select ./PhishNetopen an email & watch the badge appear
ⓘThe AI model (~50 MB) downloads on first scan, then works offline forever.