# checkPhishingDomain

**Identifier:** `phishing_checkPhishingDomain`

**Provider:** [Phishing Blocklists](https://kirha.com/providers/phishing.md)

Check URLs or domains against open phishing blocklists (MetaMask, ScamSniffer, Phishing.Database, polkadot-js), including parent domains, and flag lookalikes of well-known crypto sites. Use it before opening a link, connecting a wallet or trusting a site from a message.

## Run it with the CLI

```bash
kirha tools run phishing_checkPhishingDomain \
  --input '{
    "urls": [
      "https://rnetamask.io/claim"
    ]
  }'
```

`--input` takes a JSON object that matches the input schema. Pass `--input -` to read it from stdin.

## Call it over HTTP

```bash
curl https://api.kirha.com/tools/v1/execute \
  --request POST \
  --header 'Content-Type: application/json' \
  --header 'Authorization: **********' \
  --data '{
  "tool_name": "phishing_checkPhishingDomain",
  "input": {
    "urls": [
      "https://rnetamask.io/claim"
    ]
  }
}'
```

Replace the stars with an API key from https://app.kirha.com/api-keys.

## Input schema

```json
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "properties": {
    "urls": {
      "description": "URLs or domains, e.g., https://rnetamask.io/claim",
      "items": {
        "minLength": 3,
        "type": "string"
      },
      "maxItems": 20,
      "minItems": 1,
      "type": "array"
    }
  },
  "required": [
    "urls"
  ],
  "type": "object"
}
```

## Output schema

```json
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "additionalProperties": false,
  "properties": {
    "anyFlagged": {
      "type": "boolean"
    },
    "context": {
      "type": "string"
    },
    "results": {
      "items": {
        "additionalProperties": false,
        "properties": {
          "domain": {
            "type": "string"
          },
          "imitates": {
            "type": "string"
          },
          "input": {
            "type": "string"
          },
          "listedBy": {
            "items": {
              "additionalProperties": false,
              "properties": {
                "matchedDomain": {
                  "type": "string"
                },
                "source": {
                  "type": "string"
                }
              },
              "required": [
                "source",
                "matchedDomain"
              ],
              "type": "object"
            },
            "type": "array"
          },
          "verdict": {
            "enum": [
              "listed",
              "lookalike",
              "allowlisted",
              "not listed",
              "shared platform",
              "invalid"
            ],
            "type": "string"
          }
        },
        "required": [
          "input",
          "domain",
          "verdict",
          "listedBy"
        ],
        "type": "object"
      },
      "type": "array"
    }
  },
  "required": [
    "context",
    "anyFlagged",
    "results"
  ],
  "type": "object"
}
```

-----

[All Phishing Blocklists tools](https://kirha.com/providers/phishing.md) · [< Back to tools list](https://kirha.com/tools.md)