Real-time protection against phishing, AITM proxies, content clones and token theft. Enterprise-grade.
Users
50
+1 in 30 days
Rating
5.0 / 5
unchanged in 30 days
Ratings
2
0 in 30 days
Store rank
#108K
#90K among extensions
Version
1.4.5
updated 8 Oct 2026
Users
monthly, 3 months
Latest, 15 Oct 2026:50 usersMove the mouse over the chart for any month
Ratings count
monthly, 3 months
Latest, 15 Oct 2026:2 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About Ironchip Phishing Shield
Ironchip Phishing Shield is an enterprise-grade browser extension
that protects your team from credential theft in real time. Unlike
signature-only tools, it combines URL heuristics, page-content
analysis and behavioural detection to stop attacks that generic
protections miss — including modern AITM (adversary-in-the-middle)
proxy kits like Evilginx, EvilProxy and Tycoon2FA.
What it detects
- Typosquatting — variants of your bank / SaaS domain (Levenshtein-based).
- Homoglyph attacks — Unicode look-alikes (Cyrillic 'а' vs Latin 'a').
- Content clones — pixel-perfect Microsoft / Google / Apple / Facebook login copies.
- AITM reverse proxies — kit-specific headers, CSP anomalies, hidden URL parameters.
- QR-phishing (quishing) — malicious QR codes generated on-page.
- Blob-URI phishing — pages that dynamically build phishing content in `blob:` URIs.
- ClickFix — clipboard hijacking that copies PowerShell / bash payloads.
- Token exfiltration — session cookies, JWTs and OAuth tokens leaked over WebSocket or postMessage.
- VNC-based phishing — noVNC / EvilNoVNC clones.
- MFA bypass patterns — push-fatigue, SIM-swap and backup-code harvesting.
How it protects
When a page matches, the extension shows a full-screen warning with
a screenshot of the page, the reason(s) for the block, and a report
of every detector's finding. Company administrators can allow or
disable the "Continue at my own risk" button via the dashboard for
their entire fleet.
Company dashboard
- Whitelist your corporate domains globally.
- Review every blocked event across seats.
- Audit trail of every admin action (suspend, restore, license grant).
- Configurable protection levels and per-company detection toggles.
Privacy first
- No third-party analytics, no ad networks.
- Passwords never read, never transmitted.
- All backend traffic in EU (AWS Paris).
- Full data-collection disclosure at ironchip.com/phishingshield/privacy.
Requires
An active Ironchip Phishing Shield license. Contact your company
administrator for a license key, or request a trial at
ironchip.com/phishingshield.
---
Ironchip Telco, S.L. · Barakaldo, Bizkaia, Spain
Support: support@ironchip.com
Security: security@ironchip.com