Ironchip Phishing Shield

Real-time protection against phishing, AITM proxies, content clones and token theft. Enterprise-grade.

Ironchip Phishing Shield is an enterprise-grade browser extension that protects your team from credential theft in real time. Unlike signature-only tools, it combines URL heuristics, page-content analysis and behavioural detection to stop attacks that generic protections miss — including modern AITM (adversary-in-the-middle) proxy kits like Evilginx, EvilProxy and Tycoon2FA. What it detects - Typosquatting — variants of your bank / SaaS domain (Levenshtein-based). - Homoglyph attacks — Unicode look-alikes (Cyrillic 'а' vs Latin 'a'). - Content clones — pixel-perfect Microsoft / Google / Apple / Facebook login copies. - AITM reverse proxies — kit-specific headers, CSP anomalies, hidden URL parameters. - QR-phishing (quishing) — malicious QR codes generated on-page. - Blob-URI phishing — pages that dynamically build phishing content in `blob:` URIs. - ClickFix — clipboard hijacking that copies PowerShell / bash payloads. - Token exfiltration — session cookies, JWTs and OAuth tokens leaked over WebSocket or postMessage. - VNC-based phishing — noVNC / EvilNoVNC clones. - MFA bypass patterns — push-fatigue, SIM-swap and backup-code harvesting. How it protects When a page matches, the extension shows a full-screen warning with a screenshot of the page, the reason(s) for the block, and a report of every detector's finding. Company administrators can allow or disable the "Continue at my own risk" button via the dashboard for their entire fleet. Company dashboard - Whitelist your corporate domains globally. - Review every blocked event across seats. - Audit trail of every admin action (suspend, restore, license grant). - Configurable protection levels and per-company detection toggles. Privacy first - No third-party analytics, no ad networks. - Passwords never read, never transmitted. - All backend traffic in EU (AWS Paris). - Full data-collection disclosure at ironchip.com/phishingshield/privacy. Requires An active Ironchip Phishing Shield license. Contact your company administrator for a license key, or request a trial at ironchip.com/phishingshield. --- Ironchip Telco, S.L. · Barakaldo, Bizkaia, Spain Support: support@ironchip.com Security: security@ironchip.com