PhishGuard – Fake download site detector

Warn users before they download software from a spoofed official site

Problem

A user searching for 'Soda Music' landed on a fake site, downloaded a poisoned installer, and didn't notice for three weeks. Search results and UI are highly convincing, making it hard for average users to tell. Developers have no easy way to warn users about impersonators.

Solution

A browser extension or lightweight API that checks software download pages using domain age, page fingerprinting, and community reports to warn if the site is likely fake. Developers can claim official download URLs for verification.

Users

Average Windows/macOS users, software developers, small software distribution teams

MVP

Browser extension with warning popup; simple risk score based on domain age, SSL, page similarity; developer claim for official links; crowdsourced reporting; privacy-preserving

Revenue

Free basic warnings; paid brand protection and official link verification for developers; enterprise API and bulk monitoring

Why now

Fake download sites are rampant and AI makes phishing pages cheaper to generate; browser extension ecosystem is mature for a quick indie MVP that spreads via community