Phishing site blocker browser add-on

Phishing is an identity theft method that aims to deceive users through fake websites. These attacks, conducted to obtain sensitive data such as online account credentials, usernames, and passwords, are considered one of the most common and popular types of cybercrime. Therefore, phishing is among the most frequently employed strategies in social engineering. In this study, a web browser extension based on HTML and JavaScript was developed to prevent phishing attacks. Designed to block attacks carried out through websites and test the validity of a site, this extension utilizes domain-based functionalities to detect phishing sites in real time and protect users by providing alerts. Additionally, the extension aims to optimize the detection process, minimizing time loss while identifying phishing sites. The detection method for phishing sites involves analyzing criteria such as domain age, SSL certificate information, whether the domain contains IDNs, and whether it is listed in the malicious URL list provided by USOM (National Cyber Incident Response Center). This comprehensive analysis enables the accurate identification of risky or untrustworthy sites. The web browser extension developed in this study transforms critical information used for identifying phishing sites into a set of rules, allowing for real-time detection and mitigation of such threats. The extension is intended to contribute to strengthening national cybersecurity networks and provide an effective solution to phishing attacks, which have become a significant issue in the field of social engineering in Türkiye.