SecureScan is a modern, privacy-first suite for real-time website threat analysis. It includes a browser extension with modern gradient UI, an interactive web dashboard, and a robust backend API with comprehensive logging and validation. Powered by VirusTotal and URLScan, it detects malicious domains before they can do damage.
✅ Modern Tech Stack - Built with JavaScript and latest frameworks ✅ Beautiful Gradient UI - Professional blue-cyan design system across all components ✅ Enterprise Logging - Winston-based centralized logging in backend ✅ Robust Validation - Email, URL, domain validation utilities ✅ Production Ready - Full error handling, environment validation, security hardened ✅ Complete Documentation - Comprehensive READMEs with setup guides and API documentation
SecureScan/
├── Extension/ # Browser extension (React + Chrome APIs)
│ ├── src/
│ ├── public/
│ ├── dist/ # Production build
│ └── README.md # Extension documentation
├── Frontend/ # Web dashboard (React 19 + TailwindCSS)
│ ├── src/
│ ├── public/
│ ├── dist/ # Production build
│ └── README.md # Frontend documentation
├── Backend/ # Node.js + Express API
│ ├── src/
│ ├── logs/ # Application logs
│ ├── dist/ # Compiled JavaScript
│ └── README.md # Backend documentation
├── screenshots/ # Demo images
└── README.md
- Node.js (v18+)
- npm or yarn
- Chrome browser (for extension)
- API keys: VirusTotal, URLScan
git clone https://github.com/tabishraza302/SecureScan.git
cd SecureScancd Extension
npm install
npm run buildLoad in Chrome:
- Go to
chrome://extensions/ - Enable "Developer Mode"
- Click "Load unpacked"
- Select the
dist/folder
cd Frontend
npm install
npm run devcd Backend
npm installCreate .env file:
# API Keys (Get from VirusTotal and URLScan)
VIRUS_TOTAL_KEY=your_virustotal_api_key
URLSCANIO_KEY=your_urlscan_api_key
# JWT Configuration
JWT_SECRET=your_secret_key_change_in_production
JWT_EXPIRY=7d
# Database
DB_HOST=localhost
DB_PORT=3306
DB_NAME=securescan_db
DB_USER=root
DB_PASSWORD=your_db_password
# Server
NODE_ENV=development
PORT=3000
ORIGIN=http://localhost:5173,http://localhost:5174
# Logging
LOG_LEVEL=infoRun development server:
npm run dev
- 🔗 User visits a website
- 🧩 Extension extracts the domain and sends it to the backend
- 📡 Backend queries VirusTotal and URLScan APIs
- 📊 Results are displayed with threat level, risk summary, and visualizations
- 📝 Scan history is stored in MySQL database
- React 19 (latest)
- TailwindCSS 4 (styling)
- Radix UI (components)
- Lucide Icons
- Node.js + Express.js
- MySQL + Sequelize
- Winston (logging)
- JWT (authentication)
- React 19
- Chrome APIs (Manifest V3)
- TailwindCSS 4
- Recharts (visualization)
- 🔍 Real-time Detection - Scan domains instantly
- 📊 Beautiful Visualizations - Radial charts and statistics
- 🎨 Modern UI - Gradient design system (blue-cyan)
- 🔐 Secure - JWT authentication, encrypted communication
- 🧩 Modular - Clean architecture, easy to extend
- 📱 Responsive - Works on desktop and mobile
- 🌍 Privacy-First - No tracking, minimal data collection
- ⚡ Fast - Optimized builds, quick load times
- 📝 Well Documented - Complete setup and API docs
- ✅ Bundle: 324.74 kB (gzipped: 101.76 kB)
- ✅ Build time: < 2 seconds
- ✅ Status: Production ready
- ✅ Environment validation: ✓
- ✅ Logging: Winston configured
- ✅ Status: Production ready
- ✅ Bundle: 1.95 MB total
- ✅ Build time: ~10 seconds
- ✅ Status: Production ready
- Extension README - Extension features, setup, scripts
- Frontend README - Frontend overview, components, design
- Backend README - API endpoints, setup, database
- Input Validation - Comprehensive email, URL, domain validation
- Error Handling - No sensitive data in error messages
- Authentication - JWT-based with configurable expiry
- CORS - Configurable origin restrictions
- Logging - Centralized logging without sensitive data
- Environment Validation - Required variables checked at startup
npm run dev # Development server
npm run build # Production build
npm run preview # Preview build
npm run lint # ESLint checknpm run dev # Development with auto-reload
npm run build # TypeScript compilation
npm start # Production server
npm test # Run tests
npm run lint # ESLint checknpm run dev # Development server
npm run build # Production build
npm run preview # Preview build
npm run lint # ESLint checkPort Already in Use?
# Find and kill process (macOS/Linux)
lsof -i :3000 | grep LISTEN | awk '{print $2}' | xargs kill -9Extension Not Loading?
- Ensure you're loading from
dist/folder - Check Chrome DevTools console for errors
- Reload extension in Extensions page
Database Connection Error?
- Verify MySQL is running
- Check DB credentials in
.env - Ensure database exists
API Keys Not Working?
- Verify keys in
.env - Check API service status
- Ensure keys have correct permissions
See individual README files for more detailed troubleshooting.
This project is licensed under the MIT License. See LICENSE for details.
We welcome contributions! Please:
- Fork the repository
- Create a feature branch
- Make your changes
- Submit a detailed pull request
Tabish Raza
- VirusTotal - Domain threat analysis
- URLScan.io - URL scanning service
- React - UI framework
- TailwindCSS - CSS framework
Built with ❤️ for safer web browsing
Version: 1.0.0 Last Updated: December 10, 2024 Status: ✅ Production Ready