ClickFix Mitigator

Name: ClickFix Mitigator
Rating: 4.43 (7 reviews)
Author: J0rd1s3rr4n0

Detects ClickFix patterns and clipboard mismatches.

As of June 2026, ClickFix Mitigator has 15 users and a 4.43/5 rating from 7 reviews in the Privacy & Security category.

J0rd1s3rr4n0 Privacy & Security

Chrome Web Store ↗.crx

Users+36.4%

Rating−11.4%

4.43

7 reviews

Reviews+75.0%

Version

0.4.10

Manifest V3

90-day change · In the last 90 days this extension 1 version update, changed permissions.

History

10 snapshots

Tracking since Apr 1, 2026.

View as table

Date	Users	Rating	Reviews	Version
Apr 1, 2026	11	5.00	4	0.4.9
Apr 16, 2026	12	4.20	5	0.4.9
Apr 22, 2026	6	4.20	5	0.4.9
Apr 27, 2026	7	4.20	5	0.4.9
May 10, 2026	8	4.20	5	0.4.9
May 15, 2026	12	4.20	5	0.4.9
May 21, 2026	17	4.33	6	0.4.9
May 27, 2026	12	4.33	6	0.4.10
Jun 3, 2026	17	4.33	6	0.4.10
Jun 9, 2026	13	4.43	7	0.4.10
Now	15	4.43	7	0.4.10

Changelog

May 21, 2026

permissions

storage, tabs, notifications, clipboardRead, clipboardWrite, alarms, management, downloads, declarativeNetRequest

storage, tabs, notifications, clipboardRead, clipboardWrite, alarms, management, downloads, declarativeNetRequest, contextMenus

Permissions & access

Permissions: storagetabsnotificationsclipboardReadclipboardWritealarmsmanagementdownloadsdeclarativeNetRequestcontextMenus
Host access: <all_urls>, file:///*

Screenshots

About

ClickFix Mitigator is a defensive browser extension that helps prevent social-engineering attacks commonly known as ClickFix.

It detects suspicious on-page instruction flows (such as fake “Win+R / Win+X + paste” prompts), clipboard-command mismatch behavior, and related high-risk indicators before execution.

Key extension features:

Real-time detection of ClickFix-like interaction patterns.
Clipboard threat analysis for suspicious command payloads and obfuscation.
Domain allow/block controls to tune protection by environment.
Optional script-execution lock on blocked pages, with temporary allow options (“allow once” / “allow this session”).
Manual report support for suspicious pages and events.
ClickFix Mitigator also integrates with a web platform for security operations:

Centralized alert triage with verdicts (pending, accepted, rejected) and bulk review actions.
Event timeline, grouped domain activity, recurrence markers, and related-alert exploration.
Evidence workflow with screenshots (after from extension + server-generated before snapshot), including admin approval.
Investigation workspace with role-based access and analyst workflows.
Extension messaging and policy controls for managed environments.
This project is built for defensive security use: reduce accidental command execution, improve visibility, and speed up incident response.

Analyst Registration: https://clickfix.jordiserrano.me