EchoShield

About

EchoShield protects you from phishing and imitation websites - before you enter your password.

Scammers clone the websites of banks, webshops, and services to trick you into handing over your login credentials. EchoShield detects these fake sites and blocks them with a full-screen warning, giving you a chance to turn back before any damage is done.

> How it works

EchoShield runs four detection layers every time you visit a page:

1. Local heuristics - instantly checks for typosquatting, IP addresses used as domain names, punycode tricks, and known brand keyword abuse. No network request needed.
2. PhishTank database - a community-maintained list of known phishing URLs, cached locally and refreshed every 6 hours so it works even offline.
3. URLhaus (abuse.ch) - real-time lookup against a live feed of malicious URLs reported by security researchers worldwide.
4. Google Safe Browsing - optional extra layer using Google's threat database. Requires a free API key (instructions in Settings).

> What happens when a threat is detected

A full-page warning replaces the site, showing you exactly why it was flagged and where the signal came from. You can go back with one click, or proceed at your own risk. You can also whitelist trusted sites that were flagged by mistake.

> Privacy

EchoShield does not collect, store, or transmit any of your browsing data. The PhishTank database is downloaded to your device - your visited URLs are never sent to any EchoShield server. The only outbound lookups are to URLhaus and (optionally) Google Safe Browsing, using only the URL of the page you are visiting.

Free. No account needed. No subscription.