Enables checking whether a crypto link is a phishing lookalike of a wallet, exchange or dapp by comparing it against official domains and flagging lookalike characters, typosquats, punycode and bait words, fully offline. An optional paid full check adds domain registration age, DNS, redirect tracing and a page scan for seed-phrase prompts and drainer code.

Enables agents to probe URLs and classify bot-wall responses with vendor and signal evidence, perform offline classification, scan for exposed key-like material, and run owner-side access audits through stdio tools.