{
  "domainName": "stake-pepe.com",
  "recommendedAction": "BLOCK",
  "riskFactors": [
    {
      "type": "DRAINER",
      "severity": "CRITICAL",
      "message": "Domain identified as a wallet drainer."
    },
    {
      "type": "RECENTLY_CREATED",
      "severity": "HIGH",
      "message": "Domain recently created.",
      "value": "72" // indicates the domain was created 72 hours ago
    },
    {
      "type": "ML_INFERENCE",
      "severity": "HIGH",
      "message": "Domain is likely a phishing attempt.",
      "value": "pepe.vip" // the OFFICIAL site that is being impersonated
    }
  ],
  "verified": false,
  "status": "COMPLETE"
}

// PHISHING DETECTION
chrome.tabs.onUpdated.addListener(async (tabId, changeInfo, tab) => {
  // some sites like exocharts trigger onUpdated events, but the url hasn't changed causing excessive function calls
  if (changeInfo?.url === undefined) return;

  try {
    const scanResult = await checkPhishing(changeInfo.url, my_api_key);
    
    // If the recommended action is to block, redirect to a blocking page.
    if (scanResult.recommendedAction === RecommendedAction.Block) {
      chrome.tabs.update(tab.id, { url: "blocked_page.html" });
    
    // If the recommended action is to warn, show a notification.
    // We DO NOT recommend using chrome notifications in production as it may introduce false positives.
   	// A better place to show this data is inside transaction simulation, where the warning may be more relvant.
    } else if (scanResult.recommendedAction === RecommendedAction.Warn) {
      chrome.notifications.create({
        type: 'basic',
        iconUrl: 'icon48.png',
        title: 'Warning',
        message: 'This site may contain phishing indicators!'
      });
    }    
  } catch (e) {
    console.error('unknown error fetching scan result', e);
  }
});

// Function to send a request to the phishing detection API.
async function checkPhishing(url: string, apiKey: string): Promise<ScanResult> {
  
  // Constructing the endpoint URL with the given domain.
  const endpoint = `https://api.walletguard.app/v1/scan?url=${url}`;
  
  // Sending a GET request to the API.
  const response = await fetch(endpoint, {
    headers: {
      'x-api-key': apiKey
    }
  });

  // If the response is not successful, throw an error.
  if (!response.ok) {
    throw new Error(`API call failed with status ${response.status}`);
  }

  // Parse and return the JSON response from the API.
  return response.json();
}

import { parseDomain, ParseResultType, ParseDomainListed } from 'parse-domain';

//... background.ts ...
const latestScan = await chrome.storage.local.get('latestScan')?.latestScan;

const domainChanged = domainHasChanged(changeInfo.url, latestScan);

if (!domainChanged) return;

const scanResult = await checkPhishing(changeInfo.url, my_api_key);
    
// Update the current scan in localstorage
chrome.storage.local.set({ latestScan: scanResult });

// If the recommended action is to block, redirect to a blocking page.
if (scanResult.recommendedAction === RecommendedAction.Block) {
  // ...
}
// ... background.ts ...

function domainHasChanged(
  url: string,
  currentSite: PhishingResponse
): boolean {
  const domainObj = parseDomain(standardizeUrl(url));
  if (domainObj.type !== ParseResultType.Listed) return true;

  const domainName = createDomainName(domainObj);

  return domainName !== currentSite.domainName;
}
      
function standardizeUrl(url: string): string {
  url = url.replace('https://', '');
  url = url.replace('http://', '');
  url = url.replace('www.', '');

  const backslashIndex = url.indexOf('/');
  if (backslashIndex !== -1) {
    url = url.substring(0, backslashIndex);
  }

  return url;
}

function createDomainName(domainObj: ParseResultListed) {
  const domain = domainObj.domain;
  const topLevelDomains = domainObj.topLevelDomains;

  // Handle URLs like gov.uk, netlify.app, etc.
  if (!domain) {
    return topLevelDomains.join('.');
  }

  let domainExtension = '';
  topLevelDomains.forEach((topLevelDomain) => {
    domainExtension += '.' + topLevelDomain;
  });

  return domainObj.domain + domainExtension;
}

// .. background.ts .. 

const personalAllowlist: string[] = await chrome.storage.local.get('personalAllowlist')?.personalAllowlist;
const scanResult = await checkPhishing(changeInfo.url, my_api_key);

// If the user has clicked the Proceed anyway button, no longer block the URL.
if (personalAllowlist.includes(scanResult.domainName)) return;