Chrome extensionNewWarns you before the phishing page opens.
Every domain you visit is checked against the Kosmos Intel threat database. If it is catalogued, navigation stops before the page loads — and you see the blocked address and the reason.
Chrome, Edge, Brave and other Chromium-based browsers.
The check happens in your browser, in the gap between opening the link and the page starting to load.
In an email, on WhatsApp, in an ad. The extension picks up the destination domain — even after server-side redirects.
The domain's SHA-256 is compared with the prefix list stored in the browser. A site that is not on the list triggers no request at all.
If a prefix matches and the server confirms the full hash, the warning takes the place of the site before it loads.
The icon shows whether you are protected, off or signed out. The popup tells you which site is open now, how many domains are on the list and when it last synced.
No domain is stored as text in the browser: the extension keeps the first 3 bytes of the SHA-256 of each one. When a site matches a prefix, only the full hash goes to the server — never the address, the page content or what you type.
The warning does not lock anyone out. If you know exactly what you are opening, you can proceed — for this session only or by allowing the domain for good.
Works without an account. Tesseract customers get Premium just by being signed in to the panel in this browser.
One click in the Chrome Web Store and it is installed. No account, no setup.
Privacy policy