Scam Website Contract Cross-Checker

WHAT IT DOES

Scam Website Contract Cross-Checker reads live on-chain data and cross-references it against user-reported suspicious websites to detect correlations between scam domains and on-chain entities. It analyzes contract owner and admin addresses, deployer information, and creation timestamps to identify connections to reported scam websites. It computes bytecode fingerprints to detect cloned or reused scam contract patterns. It examines token metadata including name, symbol, and decimals to identify impersonation attempts. It scans for scam patterns in bytecode such as selfdestruct, delegatecall, admin withdraw functions, and owner-only mint functions. It analyzes domain characteristics including suspicious TLDs, numbers, and hyphens. The AI generates a plain-language verdict—SAFE, SUSPICIOUS, or LINKED—along with specific explanations of the correlation between the website and the contract before you approve or send funds.

HOW TO USE

Enter a suspicious website domain (e.g., fake-project.xyz) and any related on-chain entity—a contract address, transaction hash, or wallet address. The tool reads the contract's bytecode and queries standard ERC-20 metadata if the input is a contract address. It computes a bytecode fingerprint to detect known scam patterns. It analyzes the domain for suspicious characteristics like cheap TLDs (.xyz, .top, .loan), numbers, and hyphens that often indicate scam websites. It correlates deployer addresses and owner information with the reported domain. The AI receives all this data and returns a verdict: SAFE (no correlation found), SUSPICIOUS (some concerning patterns but not confirmed), or LINKED (clear connection between the website and a scam contract). The AI also provides a detailed plain-language explanation of the specific correlations and risks before you approve or send funds.

BYTECODE PATTERN ANALYSIS AND DOMAIN CORRELATION

The tool scans the contract's bytecode for dangerous EVM opcodes including SELFDESTRUCT (0xff), DELEGATECALL (0xf4), and CALLCODE (0xf2), as well as administrative functions like withdraw(), mint(), and setFee() that are commonly found in scam contracts. It computes a bytecode fingerprint hash from the first 64 bytes and total length of the deployed bytecode, enabling detection of cloned scam contracts. It analyzes the domain for suspicious TLDs commonly used in phishing campaigns, and cross-references the contract owner address against known scammer addresses. The tool does not require executing a transaction to detect these patterns; it reads the deployed bytecode directly from the chain. If the contract contains multiple scam patterns and the domain exhibits suspicious characteristics, the AI elevates the risk level to LINKED. The tool can also analyze transaction hashes to identify patterns of rapid transfers or approval draining that are characteristic of scam operations.

WHAT IT CANNOT SEE

This tool cannot verify website content or domain ownership—it does not crawl or scrape websites, so it cannot detect off-chain phishing content, UI impersonation, or social engineering. It cannot detect phishing websites not reported by the user; the user must provide the suspicious domain for analysis. It cannot analyze bytecode that is obfuscated beyond EVM disassembly limits. It cannot independently crawl or scrape websites for scam indicators. It cannot detect off-chain website scams that do not involve an on-chain contract or on-chain transactions. It cannot verify that a domain is controlled by a legitimate project vs a scammer; domain registration is off-chain and not verifiable through on-chain data alone. It cannot detect websites that impersonate legitimate projects through UI/UX replication without involving the blockchain.

PLEASE NOTE

EVM chains only. This tool reads on-chain data and generates AI explanations—it does NOT sign transactions or execute any on-chain actions. The wallet's own signature prompt remains the final gate for every real action. Always review the exact transaction details in your wallet before approving any signature or transfer. The AI assessment is informational only and does not constitute financial or security advice. Always verify website and contract details independently through block explorers and official project documentation before interacting with any contract.