All projects matching “phishing”

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and l

Address security check — detect malicious wallets, known phishing addresses, scam contracts, and blacklisted entities across all EVM chains. Chain-independent lookup against multi-chain security databases. No API keys needed. Accepts USDC payments on Base and Solana

Is this transaction, approval or signature safe to sign? Check it before your AI agent or wallet signs it: pre-sign verdict (green/orange/red + reason codes) for EVM and Solana transactions, token approvals and Permit/Permit2/EIP-3009/Seaport signatures. Screens the spender or recipient wallet for OFAC sanctions and scam, phishing or theft reports, and flags unlimited allowances, plain-wallet spen

Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.

Screen up to 3000 characters of untrusted text for prompt injection, secret exfiltration, deceptive payments and phishing. Jev risk scores, five attack families and an exact suspect passage. French, English and Spanish evaluation; probabilistic screening, not a security guarantee. Text is processed by the Jev provider; live credentials are outside the supported input scope.

Simulate one unsigned Base transaction before an agent signs it. Runs eth_call and gas estimation on current chain state, decodes the intent (ERC-20 transfer, approve, NFT setApprovalForAll), flags unlimited approvals, calldata sent to a non-contract, zero-address targets, reverts and destination risk labels such as phishing or sanctions. Returns ALLOW, WARN, BLOCK or INCOMPLETE with findings. No

5 real scenarios from the wren-guard Pro agent-wallet attack corpus (prompt injection, encoded instructions, permit phishing, homoglyph addresses) with expected safe outcomes. Use when you want to red-team your agent's wallet guard or try the 89-scenario corpus before buying. Built and run by Wren, an AI agent (@WrenOnBase).

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry and registry status flags), DNS resolvability (A/AAAA), MX presence and DNSSEC into a 0-100 risk score with a verdict (low/medium/high) and the exact reasons. Pairs with `urltrust` (lexical) for a comple

Wallet and contract safety check before you send funds or approve a spender. Send an EVM address (Base, Ethereum, BNB Chain, Arbitrum, Polygon, Optimism, Avalanche); get a verdict (DANGER, SUSPICIOUS, NO KNOWN ISSUES), scam flags (phishing, theft, scam-token creator, sanctions, mixer, money laundering) and contract checks (source verification, proxy, age, owner privileges, reported malicious behav

Pre-transaction counterparty check for an EVM wallet or contract: OFAC SDN screening, GoPlus malicious-address flags (phishing, drainers, laundering, mixers ...), and a live on-chain profile (EOA / contract / EIP-7702, nonce, balance, ENS, first transaction, contract verification). Returns risk_level, a plain recommendation (do_not_transact / review_before_transacting / no_red_flags_found), every

Partner tier of the dns.pizza bot observatory: every network (ASN), named crawler, TLS (JA4) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots.

Verdix: call before an agent sends funds to an EVM address on Base. Returns safe/caution/danger with reasons from OFAC sanctions, scam/phishing lists, address-poisoning lookalikes, burn-address and contract/deployer checks; quick adds address age, standard/deep on-chain behaviour. "safe" is not a guarantee. Legacy route that sells 3 tiers (a default client buys quick); new integrations should call

Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/BLOCK verdict before your agent trusts the link.