Look-Alike Website Detector for Explainable Phishing ChecksLook-Alike Website Detector for Explainable Phishing Checks
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Look-Alike Website Detector is a web app where you paste a suspicious link and get a clear verdict: Genuine, Suspicious or Likely fake, with a risk score and 3–5 simple reasons in 7 Indian languages (English, Hindi, Marathi, Bengali, Gujarati, Tamil, Telugu).
It runs three independent checks:
Address check: compares the link against verified official domains of 22 banks and government services (including RBI's new .bank.in domains). It catches look-alike letters (onlinesbl.com, Cyrillic characters), misspellings, the brand name placed on someone else's domain, newly registered domains, missing HTTPS and other tricks.
Page check: opens the page in a real (headless) browser and checks whether it asks for a password, OTP, card number, Aadhaar or PAN, and whether the form secretly sends your data to a different site.
Visual check with Gemma 4: the open-weight Gemma 4 model looks at a screenshot and recognises which brand the page is imitating. A page that looks like SBI on a domain SBI doesn't own is a strong red flag.
The AI never decides the verdict on its own. Transparent rules score every warning sign, so each result can be explained. Gemma 4 does two jobs: recognising the brand in the screenshot and writing the plain-language explanation. If any check fails (the model, the browser or the domain-age lookup), the user still gets a verdict from the other checks.
The result page highlights who really owns the address (in sbi.secure-login.xyz, the real owner is secure-login.xyz), shows each check's findings and teaches three simple safety habits.
Open and private by design: the project is MIT-licensed, and Gemma 4 can run fully offline on a laptop through Ollama. A full check takes about 10 seconds with Wi-Fi off and no data leaves the device. The live website uses Gemma 4 through the Gemini API, with protection against misuse.
Built with: Python, FastAPI, Playwright (Chromium), RapidFuzz, tldextract, python-whois, Beautiful Soup, vanilla JavaScript, Gemma 4 (Gemini API and Ollama), Docker and Render. Built with Claude Code as the AI coding assistant.
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started