Cluttersignal sits quietly in your browser. It keeps a local eye on the site you’re on, and when something in your inbox feels off, one click checks the open email, a pasted message, or a link — before you reply, pay, or sign in.
Everywhere you read
The site you’re on, the email you open, the text you were sent, the link in a DM — each one is a click from a straight answer.
Worked out on your device as you browse — nothing about the pages you visit is sent to us. On a clean site it shows briefly and fades. On a look-alike, it stays and tells you why.
Check the email you’re reading right from your browser. In supported webmail, every message gets its own Check button, and the result stays on it.
Got a text from your “bank”? Paste it into the side panel and get a straight answer.
Look-alike addresses are caught on your device. Private tokens are stripped before a link is checked online.
Every result is one of four verdicts, with the reasons — and what the check couldn’t see.
Scammers hide the link in a QR code so filters can’t read it. Cluttersignal reads it on your device and tells you where it really leads.
Cluttersignal remembers the domains of senders you’ve checked, only on your device, and flags the copy that asks you to pay.
Settings lists every request the extension made and what kind of data it carried. Never the content itself.
Workspace · private beta
Workspace brings Gmail and Outlook into one inbox, flags the risky message before you open it, and drafts replies that wait for your OK. It’s in a private beta while we get it right.
No install needed
Paste a suspicious message into the check on our homepage. It runs in your browser, and nothing you type is sent anywhere.
What each check can see
A missing signal is never treated as proof of safety. Each result names its coverage, so you know exactly what was and wasn’t checked.
On your device
Scam and phishing wording, look-alike and misspelled brand domains, where each link actually points, bare-IP and shortened links, QR codes in a message’s images, senders posing as someone you’ve had mail from, and attachment names that look like programs, macros, or archives. Nothing is sent anywhere.
With cloud analysis · your choice
Adds the written report and a 0–100 Trust Score, live link reputation, domain age for links and sites, and an AI read of the whole message. It is on when you install the extension (from version 1.6), you can switch it off any time, and every result tells you whether anything left your device.
How it decides
Every check follows the same path, and every result tells you which parts of it we could and could not see.
Identity
We read your mail app’s own verified-sender badge and warning banners, and spot look-alikes of brands you know — a swapped letter, a near-miss spelling.
Relationship
A first-time sender reads differently than someone you hear from every week. Cluttersignal remembers the domains of senders you’ve checked, only on your device, so a near-copy like acrne.com for acme.com stands out.
Threats
Scam wording, where each link really goes, QR codes hidden in images, links on live blocklists (with cloud analysis on), and attachment names that look like programs or macros.
Context
Is it asking for a password, a payment, or a one-time code? With cloud analysis on: was the domain registered last week?
Privacy
Pages asking for credentials or payment, and known tracking scripts — the data collection worth a second look.
Decision
All of the above becomes one clear next step, so you’re not left interpreting a score — and if you already clicked or paid, what to do now.
Privacy
Nothing about the pages you visit is sent to us. Checks start on your device. Cloud analysis gives what you check a deeper look on our servers; it’s on by default, and you can switch it off any time. What you send is used only to produce your result and isn’t saved to our database. Our AI provider can’t train on it and deletes it within 30 days (longer only if it’s flagged for misuse). The result stays in your browser.
See it
Settings shows each request the extension made in the last 30 days and what kind of data it carried, by type and size. Never the content. Clear it any time.
Keep it
The domains of senders you’ve checked are kept in your browser to spot near-copies. Never addresses or messages, never sent, forgotten after 180 days.
Choose it
Gmail shows images from its own server. Reading them for QR codes is a setting you turn on; the images are read on your device and never sent to us.
Signal Pro ($4.99/month or $49.99/year) gives you the plain-language verdict on whatever you check. With cloud analysis on, you also get the written report and a 0–100 Trust Score, plus live link reputation and, for links and sites, how old the domain is. Try it free for 7 days; cancel before day 7 and you won’t be charged.
Available forChromeEdgeFirefox
Requires a Clutterstrike account and Signal Pro · works in Chrome, Edge, and Firefox. Best-effort screening, not a guarantee — keep your own judgment in the loop.