Security Toolkit by Nyana

<b>Your junk folder, investigated.</b>

Got a spam, scam or phishing mail? Right-click the link, choose <b>Security Analysis > Analyse link</b>, and Security Toolkit opens one clear page that tells you how the attack works and what to block. No copy-pasting between five websites.

<b>One page, four steps</b>
<ul>
<li><b>Analyse:</b> the extension takes the link apart on your own computer: unwraps Safe Links and other redirect wrappers, decodes hidden data, spots look-alike domains and personalised tracking IDs.</li>
<li><b>Check:</b> urlscan.io (screenshot and verdict), VirusTotal (70+ engines), AbuseIPDB (server reputation) and domain age each get their own card that fills in live. One overall assessment combines them.</li>
<li><b>Look deeper:</b> optionally fetch the page from your own connection, without cookies, and follow the redirect chain. The page is read as text only; nothing is rendered or run.</li>
<li><b>Decide:</b> tick the attacker's domains and add them to your NextDNS denylist, for one profile or all of them. Popular platforms are never suggested.</li>
</ul>

<b>Made for batches</b>
Collect suspicious links during the day, scan the whole queue in one go and block everything that was flagged.

<b>Friendly to use</b>
<ul>
<li>Spinners and a progress bar show that something is happening, and buttons lock so you cannot click twice.</li>
<li>Light and dark mode, keyboard friendly, and quiet: choose whether you get notifications.</li>
<li>Copy the result as Markdown for a ticket or abuse report (links are defanged), or download it as JSON.</li>
</ul>

<b>Privacy</b>
<ul>
<li>No account with me, no analytics, no tracking.</li>
<li>Your API keys stay in Firefox. The link only goes to the services you choose to run, and only after you click.</li>
<li>AbuseIPDB only receives an IP address.</li>
<li>The built-in Quick Scan works without any API key.</li>
</ul>

<b>What you need</b>
The Quick Scan needs nothing. For the reputation cards, bring your own free API keys for urlscan.io, VirusTotal and AbuseIPDB. For blocking, add your NextDNS API key.

Made by Paul Rutten. Questions or ideas: securitytoolkit@paulrutten.nl