Skip to content
ihategas.xyz

Phishing Check

Check a URL against GoPlus's registry of known dapps.

Reads public data

the full URL, including https://

Paste a full URL before connecting a wallet — especially one from a link.

About phishing check

Phishing sites work by looking exactly like the thing they imitate, so the domain is usually the only difference and it is designed not to be noticed. This checks a URL against GoPlus's registry of known dapps — a list of projects it recognises, not a database of scams. A match confirms the site is known; it cannot confirm that the page in front of you is that site, because a lookalike domain returns nothing here while looking identical in your browser. A bookmarked address cannot be a lookalike. A link can. Absence from the registry is neither an accusation nor a clearance.

Common questions

How do I check if a crypto site is phishing?

Paste the URL. This queries GoPlus registry of known dapp domains and flags matches. A clean result is not a certificate of legitimacy — brand-new domains have no history either.

Why do phishing sites ask me to connect a wallet?

Because a connected site can request signatures and transactions. Drainer kits automate unlimited permits that look like logins. Checking the URL before connecting removes the most common entry step those kits need.

Does this replace reading the signature request?

No. A known-good domain can still be compromised, and a decoder is still required for typed data. URL screening is one filter; it is not clearance to sign whatever appears next.

More wallet safety tools