MS Signin Warning Plugin

This is a browser plug-in to meant to alert users to the fraudulent Microsoft sign-in pages that they encounter from phishing emails.

It works by normalizing all the text on each page and searching for a set of strings that appear on Microsofts own sign-in pages and displaying a warning banner if:

• It finds two or more of the strings, AND:
• The domain is not a legitimate Microsoft domain

It checks the text three times after page load: one second, three seconds, and six seconds, so it should not be too impactful on performance.

This tool runs entirely in your browser - no information is sent from the computer. Source code for the latest version is available for review upon request.

Any questions, reach out to me ____

This tool does not guarantee protection from phishing. It may generate false positives and it may fail to identify some phishing websites. It's only meant to add another layer of protection.