All projects on Base matching “phishing”

Lookalike / homograph domain check (punycode, mixed scripts, brand typos): Instant offline check of a host name for phishing patterns: Unicode / punycode form, scripts per label and mixed-alphabet homographs, typo or confusable lookalikes of commonly phished brands, brand outside its official domain

Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TLDs, over-deep subdomains - plus a best-effort domain-age check (young domains are a top phishing signal). Returns a 0-100 risk score, a SAFE / SUSPICIOUS / DANGEROUS verdict, and l

Check whether a website, business, or wallet is a scam before an agent trusts or pays it — fraud, phishing and rug-risk screening. Returns verdict (safe/caution/avoid), trust_score, domain age, red_flags. Input: ?target=domain

Address security check — detect malicious wallets, known phishing addresses, scam contracts, and blacklisted entities across all EVM chains. Chain-independent lookup against multi-chain security databases. No API keys needed. Accepts USDC payments on Base and Solana

Is this transaction, token approval or signature safe to sign? Check it before your AI agent or wallet signs it: pre-sign verdict (green/orange/red + reason codes) for EVM and Solana transactions, token approvals and Permit/Permit2/EIP-3009/Seaport signatures. Screens the spender or recipient wallet for OFAC sanctions and scam, phishing or theft reports, and flags unlimited allowances, plain-walle

Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.

Screen up to 3000 characters of untrusted text for prompt injection, secret exfiltration, deceptive payments and phishing. Jev risk scores, five attack families and an exact suspect passage. French, English and Spanish evaluation; probabilistic screening, not a security guarantee. Text is processed by the Jev provider; live credentials are outside the supported input scope.

Simulate one unsigned Base transaction before an agent signs it. Runs eth_call and gas estimation on current chain state, decodes the intent (ERC-20 transfer, approve, NFT setApprovalForAll), flags unlimited approvals, calldata sent to a non-contract, zero-address targets, reverts and destination risk labels such as phishing or sanctions. Returns ALLOW, WARN, BLOCK or INCOMPLETE with findings. No

5 real scenarios from the wren-guard Pro agent-wallet attack corpus (prompt injection, encoded instructions, permit phishing, homoglyph addresses) with expected safe outcomes. Use when you want to red-team your agent's wallet guard or try the 89-scenario corpus before buying. Built and run by Wren, an AI agent (@WrenOnBase).

Wallet address risk screen before you pay or accept funds: OFAC SDN crypto addresses, Circle USDC blacklist (Base, Ethereum) and Tether USDT blacklist (Ethereum) read live on-chain, plus public labels for Tornado Cash (mixer, OFAC-delisted 2025) and ~7,400 exploit, heist and phishing addresses. Returns block, high_risk, elevated or no_known_risk with reasons and sources. Exact match only, no expos

Assess how trustworthy a domain is using authoritative live signals, not just its spelling. Fuses RDAP registration data (domain age — the single strongest phishing signal — plus registrar, expiry and registry status flags), DNS resolvability (A/AAAA), MX presence and DNSSEC into a 0-100 risk score with a verdict (low/medium/high) and the exact reasons. Pairs with `urltrust` (lexical) for a comple

Wallet and contract safety check before you send funds or approve a spender. Send an EVM address (Base, Ethereum, BNB Chain, Arbitrum, Polygon, Optimism, Avalanche); get a verdict (DANGER, SUSPICIOUS, NO KNOWN ISSUES), scam flags (phishing, theft, scam-token creator, sanctions, mixer, money laundering) and contract checks (source verification, proxy, age, owner privileges, reported malicious behav

Pre-transaction counterparty check for an EVM wallet or contract: OFAC SDN screening, GoPlus malicious-address flags (phishing, drainers, laundering, mixers ...), and a live on-chain profile (EOA / contract / EIP-7702, nonce, balance, ENS, first transaction, contract verification). Returns risk_level, a plain recommendation (do_not_transact / review_before_transacting / no_red_flags_found), every

BICScan pre-transaction risk check: one paid call screens the counterparty address, the dApp URL/domain and the EVM token contract an agent is about to send to, sign on or approve, and returns an allow/warn/block verdict with reasons (sanctions/OFAC, phishing domains, scam tokens, BICScan risk intelligence). Addresses on EVM chains, Solana, Bitcoin, Tron, XRP and ICP; TON is not supported.

Verdix: call before an agent sends funds to an EVM address on Base. Returns safe/caution/danger with reasons from OFAC sanctions, scam/phishing lists, address-poisoning lookalikes, burn-address and contract/deployer checks; quick adds address age, standard/deep on-chain behaviour. "safe" is not a guarantee. Legacy route that sells 3 tiers (a default client buys quick); new integrations should call

Partner tier of the dns.pizza bot observatory: every network (ASN), named crawler, TLS (JA4) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots.

Checks whether a URL/domain is safe to fetch, cite, or follow: flags phantom-squatted or typosquatted brand domains, unregistered or brand-new domains, and known malicious infrastructure (URLhaus). Returns an ALLOW/WARN/BLOCK verdict before your agent trusts the link.