SpoofStick is a simple browser extension that helps users detect spoofed (fake) websites. A spoofed website is typically made to look like a well known, branded site (like ebay.com or citibank.com) with a slightly different or confusing URL. The attacker then tries to trick people into going to the spoofed site by sending out fake email messages or posting links in public places - hoping that some percentage of users won't notice the incorrect URL and give away important information. This practice is sometimes known as “phishing".

SpoofStick makes it easier to spot a spoofed website by prominently displaying only the most relevant domain information. It's not a comprehensive solution, but it's a good start.

This version of SpoofStick is free to use and is not officially supported by CoreStreet or any of its affiliates. CoreStreet does not make any claims about the quality of this software or its suitability to any task.

Installation Instructions

Download the spoofstick-ie.exe executable file to your computer, and double click on it to run.

Follow the instructions in the installer.

Restart all copies of Internet Explorer after installing SpoofStick.

If you're running Windows XP SP2, in IE look under "Tools->Internet Options->Advanced" for a checkbox entitled "Enable third-party browser extensions (requires restart)". Make sure that's checked and reboot your computer.


Usage Instructions

SpoofStick just sits there contently displaying the domain name of the site you’re currently on.

Before entering any information into a site, glance up at SpoofStick to confirm that you are where you think you are.

To configure the size and color of the display, click on the button labeled [options] and select the “Configure SpoofStick” options.

SpoofStick is a normal IE toolbar, so you can turn it on and off by going to the View->Toolbars menu and toggling the checkmark next to SpoofStick.

You can drag and drop and resize the SpoofStick toolbar by going to the View->Toolbars menu, unlocking the toolbars, making whatever changes you want to SpoofStick, then locking the toolbars again.