# Phishing Blocklists

This provider exposes tools and data accessible through its parent verticals. Use the example prompts as inspiration for your queries.

**Slug:** `phishing`

**Description:** Open phishing and scam blocklists in one check: URLs and domains against MetaMask, ScamSniffer, Phishing.Database and polkadot-js lists with lookalike detection, and blockchain addresses tied to drainer scams.

## Verticals

This provider is available in the following verticals:

- [Dev](https://kirha.com/verticals/dev.md)
- [Crypto](https://kirha.com/verticals/crypto.md)

## Example prompts (non-exhaustive)

- `Is metamask.business a phishing site?`
- `Is the link https://metamasks.io/claim safe to open?`
- `Is the address 0x101ce0cedd142f199c9ef61739ae59b6611a0fc0 linked to a scam?`
- `Check these domains for phishing: uniswap.org, v4-uniswap.com, opensea.io`

## Available tools in this provider

Open a tool to see its input and output schemas.

### [`checkScamAddress`](https://kirha.com/providers/phishing/checkScamAddress.md)

Check blockchain addresses against open lists of wallets and contracts used by phishing and drainer scams (ScamSniffer for EVM chains, polkadot-js for Polkadot and Substrate), with the scam sites linked to them. Use it before sending funds to an address or approving a contract.

### [`checkPhishingDomain`](https://kirha.com/providers/phishing/checkPhishingDomain.md)

Check URLs or domains against open phishing blocklists (MetaMask, ScamSniffer, Phishing.Database, polkadot-js), including parent domains, and flag lookalikes of well-known crypto sites. Use it before opening a link, connecting a wallet or trusting a site from a message.

-----

**Tags:** phishing, scam, security, blocklist, crypto, web3, fraud

[< Back to providers list](https://kirha.com/providers.md)