Extension · Chrome and Edge

Check the site you are on, without retyping the address

Published 27 October 2026 · updated 27 October 2026

The extension sends the domain of the current tab to the same passive engine the website uses, and shows the verdict in the popup. No account, no analytics, no background scanning — it only checks a site when you click.

Passive. Public responses only, nothing is attacked. No account. The result is on the page. Honest: if a value is hidden, we say so instead of guessing.

Reading public responses — usually 5–20 seconds

What it does

One click, current tab. The domain is taken from the active tab and checked; you never paste an address.
The same engine as the site. Same checks, same severity order, same “version not disclosed” honesty when the build is hidden.
Nothing in the background. No browsing history, no automatic scanning of pages you open, no data sent anywhere except the domain you chose to check.
Works in Chrome and Edge — both accept the same unpacked extension.

Install it manually (two minutes)

The extension is not in the Chrome Web Store yet — publishing it requires a paid developer account, and until that is done the manual route works the same way. Chrome loads it as an “unpacked” extension and it stays installed until you remove it.

Download the ZIP — checklamp-extension.zip (8 KB) and unzip it into a folder you will keep, for example Documents/checklamp-extension.
Open chrome://extensions and switch on Developer mode (top right).
Click “Load unpacked” and choose the unzipped folder — the one containing manifest.json, not its parent.
Pin the icon. Click the puzzle-piece button in the toolbar and pin Checklamp so it stays visible.
Open any site and click the icon. The popup shows the check for that domain; the full report opens on checklamp.com.

To update later: replace the files in the folder and press the reload icon on the extension card. To remove it: the same card, “Remove”.

Why manual, honestly

A Chrome Web Store listing needs a registered developer account ($5, identity verification) and a review. Until that is in place, a manual install is the only way to hand the extension to someone — and it is a real limitation: most people will not unpack a ZIP, and a manual copy does not receive silent security updates. We would rather say that than pretend the release is finished.

If you want the store listing to happen, use the contact address in the footer and say so — demand is what moves it up the queue.

What the extension sends

Exactly one thing: the domain you asked about, to check.mikero.ru/api/check.php, over HTTPS. No cookies, no page content, no identifiers, no history. The full data flow is described on the privacy page, and the checks it triggers are the same ones listed in the method.

Questions

Does the extension scan sites I visit on its own?

No. It runs only when you click the icon, and it checks only the domain of the tab you are on.

Will it work in Firefox?

Not currently — the package is a Chrome MV3 extension. Firefox accepts a WebExtension with manifest changes we have not shipped yet.

Why does Chrome warn when I load an unpacked extension?

That warning is Chrome telling you the code did not come through the store. It is accurate: install unpacked extensions only from a source you trust, and keep the folder where Chrome can read it.