This month alone: fake Phantom/Jupiter/Bitget extensions, a hijacked NGRAVE alert sending users to a seed-phrase page, exchange phishing mails. Paste a link before you connect a wallet. We compare it with the official domains of ~60 wallets, exchanges and dapps and flag lookalikes, typosquats and punycode tricks. Free. We never ask for keys or seed phrases.
Lexical only, nothing is fetched: official-domain list, lookalike characters (0/o, rn/m, Cyrillic), typosquats, punycode, free hosting, bait words like "claim" or "sync".
Adds domain registration age (RDAP), DNS, redirect tracing and one fetch of the page scanned for seed-phrase prompts and token-approval drainer code. Up to 10 links per report. Paid with USDC on Base from your browser wallet, no gas.
GET /api/basic?url= free JSON. GET /v1/check?url=a&url=b via x402 v2 (USDC on Base). Remote MCP at /mcp. See openapi.json.