PatchPulse — Anti-Phishing by PatchPulse

PatchPulse warns you before you open a website whose address is a look-alike of one you trust. The trick behind most phishing attacks.

Unlike blocklists (which only know sites already reported), PatchPulse compares the address you're visiting against a list of official domains and flags the dangerous ones by similarity — even brand-new fakes.

What it catches
- Typos and look-alikes: rnicrosoft.com (rn→m), paypa1.com (1→l), gogle.com, googel.com (swapped letters)
- Hyphen tricks: pay-pal.com, paypal.com-secure.ru
- Deceptive Unicode characters (e.g. Cyrillic letters that imitate Latin ones)
- The official domain used as a sub-domain of an attacker's site: paypal.com.evil-login.ru
- Brand names combined with phishing words like login, verify or support: paypal-login.com, applesupport.com
- Official names on abuse-prone domain endings: paypal.tk, paypal.co

172 well-known domains are protected out of the box: banks, payments, email, crypto, shopping, shipping and institutions — international and Italian.

Private by design
Everything runs locally in your browser. No browsing history is ever sent to any server.

Make it yours
Add your own important sites (your bank, local services, niche brands) and protect them too, not just the big names. If a warning is a false alarm, one click adds the site to your trusted list.

Free and open source.