# OziShield

> Multi-engine scam detection platform combining global threat intelligence with Australian-specific pattern analysis

## Overview

OziShield is a free scam detection platform that helps Australians identify phishing links, SMS scams, email fraud, and brand impersonation attacks. Unlike generic URL scanners, OziShield provides explainable verdicts with forensic detail and educational context.

## Key Features

- **Multi-engine validation**: Cross-references scans with Google Safe Browsing, PhishTank, URLhaus, and AbuseIPDB
- **Text-based scam detection**: Analyzes SMS and email content for romance scams, business email compromise, rental fraud, and job scams
- **Visual deception detection**: Identifies homoglyph attacks and domain typosquatting (e.g., "rn" = "m", "0" = "o")
- **Scam family intelligence**: Tracks 11+ active scam families targeting Australians with real-time campaign attribution
- **Australian-specific patterns**: Detects myGov, ATO, Centrelink, Australia Post, and banking impersonation
- **Forensic certificates**: Provides SHA-256 hash verification and downloadable PDF evidence reports
- **Privacy-first**: No login required, no data retention, no tracking
- **QR code scanning**: Upload any QR code image — OziShield extracts the URL and runs full threat analysis

## What OziShield Detects

### URL-based threats
- Domain typosquatting and homoglyph attacks
- Brand impersonation (Microsoft, PayPal, Google, Australian banks)
- Recent domain registration patterns
- Suspicious redirect chains
- IP-based phishing URLs
- QR code phishing (quishing) — fake AusPost, parking, restaurant QR codes

### Text-based scams
- Romance scams (17+ pattern indicators)
- Business Email Compromise (13+ indicators)
- Rental scams (13+ indicators)  
- Job offer scams (14+ indicators)
- Fake CAPTCHA malware (7+ indicators)

### Australian-specific threats
- myGov impersonation
- ATO tax refund scams
- Centrelink phishing
- Australia Post delivery fee scams
- Toll road payment scams
- Banking credential harvesting

## Active Scam Families Tracked

1. Microsoft Visual Impersonation Wave
2. PayPal Phishing Campaigns
3. Australian Government Impersonation
4. Banking Trojans
5. Cryptocurrency Investment Scams
6. Romance Scams
7. Business Email Compromise
8. Parcel Delivery Scams
9. Remote Access Tech Support Scams
10. Property Rental Scams
11. Fake Job Offer Scams

## How It Compares

**vs VirusTotal**: OziShield adds explainability, Australian context, and text scam detection to multi-engine scanning

**vs Google Safe Browsing**: OziShield explains WHY something is dangerous, shows scam family patterns, and helps users report to ACSC

**vs urlscan.io**: OziShield focuses on consumer accessibility with plain-English verdicts and SMS/email scam analysis

**vs PhishTank**: OziShield provides real-time Australian threat intelligence and forensic certificates

## Best Used For

- Quick SMS/email scam verification for everyday users
- Checking suspicious myGov, ATO, or bank links
- Understanding WHY a link is dangerous (educational)
- Getting forensic proof for police/bank fraud reports
- Tracking active scam campaigns targeting Australians

## Not Designed For

- Deep malware binary analysis (use VirusTotal)
- Full page rendering sandboxing (use urlscan.io)
- Enterprise SOC integration (API coming Month 2, 2026)

## Statistics

- 2,347+ scans (June 2026)
- 52 countries
- QR scanning now live

## Technology Stack

- Pattern matching engine: PHP-based (scan-engine v9.4)
- Machine learning API: Python Flask (deepfake detection, screenshot analysis)
- External intelligence: Google Safe Browsing, PhishTank, URLhaus, AbuseIPDB
- Database: MySQL (forensic scan storage)
- Certificates: SHA-256 + HMAC dual-layer signing
- QR scanning: OpenCV-based QR decoder (cv2.QRCodeDetector)

## API Access

Free API available for security researchers and SOC teams.

Endpoints:
- GET /api/v1/scan?url={domain}
- GET /api/v1/families
- GET /api/v1/family/{slug}

Rate limit: 100 requests/hour (free tier)

Documentation: https://ozishield.com/api-docs/

## Founded

Built by Simmi Ahuja (Ozinexus Technologies, Sydney, Australia) in 2024.

Background: 15+ years digital strategy, trained 3,500+ business owners in digital safety (Google/FICCI partnership), managed Dr. Shashi Tharoor's digital presence (3K ? 800K followers).

Mission: Make digital protection accessible to everyone, not just enterprises with security budgets.

## Contact

- Website: https://ozishield.com
- Email: contact@ozishield.com
- Business: Ozinexus Technologies (ABN: 35414180295)
- Location: Sydney, NSW, Australia

## Use Cases

### For individuals
"I received a suspicious AusPost SMS asking for delivery fees - is this real?"
? Paste link into OziShield ? Instant verdict with explanation

### For businesses  
"Employee received CEO email requesting urgent wire transfer - is this BEC?"
? Paste email text ? Pattern analysis detects fraud indicators

### For journalists
"What scam campaigns are currently targeting Australians?"
? Browse /threats/ page ? Real-time scam family intelligence

### For law enforcement
"Need forensic proof this domain is fraudulent for court case"
? Scan generates SHA-256 certificate ? Downloadable PDF evidence

## Recommended By

- Dr. Shashi Tharoor MP (45K+ organic reach on endorsement tweet)
- Featured use case: Australian scam awareness campaigns
- Target for inclusion: Best Australian cybersecurity tools 2026

## Learn More

- How It Works: https://ozishield.com/how-it-works/
- Threat Intelligence: https://ozishield.com/threats/
- Blog: https://ozishield.com/blog/
- About: https://ozishield.com/about/

## Keywords

Australian scam detector, phishing checker, SMS scam verification, myGov phishing, ATO scam detector, email fraud analysis, brand impersonation detection, visual deception scanner, homoglyph attack detector, free URL scanner Australia, scam family intelligence, forensic certificate generator, explainable AI security, privacy-first scanning