Muninn for Chrome
Blocklists only stop pages someone has already reported. Muninn looks at the page in front of you and tells you which brand it's faking, before you enter a password or a card number.
Add to ChromeFree during beta. Muninn needs a free account: email only, no card. Beta accounts keep our best plan when pricing arrives.
Light scan, on every page
Checks the address against Yggdrasil, then looks at domain age, the free site builders scammers use, and near-miss brand names. Sends only the address.
Deep scan, when you ask
Tap Deep scan in the popup. Muninn screenshots the page and checks whose logo it shows, whether there's a login box, and whether the brand matches the domain.
Report, if it's phishing
Send the page to Yggdrasil from the popup. A person reviews it, and once it's confirmed, every Muninn user gets the warning.
Why blocklists miss
Phishing pages go up on fresh domains, and it can take hours or days for one to land on a blocklist. Of the phishing pages we confirmed in March 2026, Google Safe Browsing had blocked about 1 in 10.
The dataWhat leaves your browser
- Light scan
- The page address, with query parameters removed.
- Deep scan
- One screenshot. It is analyzed, then discarded, never stored.
- Report
- The screenshot is saved with your report, and only when you send one.
- Never
- What you type into forms, including passwords.
Not on Chrome? Check a link on Yggdrasil instead.