You can block connections to known-bad phishing domains at the network level — before the device loads the page — adding a layer of protection that doesn't depend on every family member spotting a fake login screen or text link on their own. That matters most for the phones in your house that click first and ask questions later. Kids and teens, in particular, tend to tap unfamiliar links in texts, group chats, and app DMs without pausing to check the sender — which is exactly the moment a "just be careful" rule tends to fail.
Why link-based phishing protection needs to cover more than email
Link-based phishing attempts today arrive through text messages, social app DMs, and fake sites linked from ads — not just inbox email. A filter that only scans email does not cover those other channels. What actually matters for this category of attack is whether the connection to the malicious site gets blocked before the page ever loads, no matter which app the link was tapped from.
It's worth being precise about what this kind of protection does and doesn't cover: it blocks connections to domains it recognizes as bad or newly suspicious. It can't do anything about scams that never involve a link at all — a text asking someone to call a number back, or to reply with a one-time code. Those rely on a person making a judgment call, not on a connection being made, so no network-level tool touches them. For the link-based part of the problem — fake login pages, malicious redirects, lookalike domains — blocking the connection before the page loads is the strongest layer available, especially for a family member who's going to tap first. That said, if a fake login page hasn't been flagged yet and the page does load, no network-level tool can stop someone from typing a password or one-time code into it once they're looking at it.
What actually differentiates a phishing defense
Blocking known-bad domains at the network level, before the page loads, across every app rather than just a browser, is the baseline you should expect from any DNS-level filter — that's how the mechanism works by construction, whether it's Casper's Cloak, NextDNS, or a self-hosted Pi-hole. One layer worth asking any provider about is what happens with a domain that isn't on anyone's blocklist yet — a phishing page spun up hours ago that no one has reported.
Casper's Cloak layers AI threat detection on top of network-level blocking specifically to flag that kind of brand-new, not-yet-blocklisted phishing attempt. The platform runs on iPhone, Mac and Android, blocks threats at the network level before they reach the device across every app, and traffic runs through an encrypted WireGuard tunnel — with AI threat detection running on-device, designed to minimize what leaves your device, while DNS filtering and blocking happen on Casper's servers rather than as a heavy process on the phone itself.
One subscription, multiple iPhones
If more than one person in your household uses an iPhone, setting up the same protection separately on each one — and keeping each one updated — gets tedious fast. Casper's Cloak is designed so one subscription covers the iPhones you set it up on, up to the device limit on your plan. Check current device limits and pricing on the subscriptions page.
Replacing a patchwork of tools
If your current setup is a mix of a browser ad blocker like 1Blocker and a separate DNS filter like NextDNS, Casper's Cloak is built to fold that into one subscription that covers ad blocking, tracker blocking, and phishing/malware detection together.
Try it first
There's no free plan — Basic and Pro subscriptions both include a trial period, so you can set it up on your own iPhone (and anyone else's in the house) and see how it handles a real week of messages, links, and app traffic before you commit. Confirm current trial terms, plans, pricing, and device limits on the subscriptions page.