launching soonPHISHNCHIPS checks the address you're about to send to, and the link you're about to click, for the tricks that drain wallets: lookalike addresses, lookalike domains, borrowed names and hidden redirects. One paste. Nothing leaves your browser.
Free. No wallet connect. No sign-up. The page blocks every outgoing request.
Two checks, one paste each. Everything runs on this page. Nothing you paste goes anywhere.
Scammers send you a tiny amount from an address that starts and ends like one you use, so it sits in your history waiting to be copied. Wallets only show the first and last 4 characters. The swap hides in the middle.
Side-event season is drainer season. Paste the link someone sent you: a Luma invite, a claim link from the replies, a "verify" page.
It reads the link text only. It never opens the link, and nothing you paste is sent anywhere. It can't prove a link is safe; it spots the usual tricks.
November 7
Minutes after we made an exchange deposit, two wallets we'd never seen sent our wallet dust.
Both addresses started with the same 4 characters as the real deposit address. Both ended with the same 4. In a wallet, that's all you see.
They weren't sending us money. They were planting a fake in our history, waiting for the next time we copied "the usual address" from the last transaction.
We caught it. Then we built the thing that would have caught it for us.
You move SOL all day: bank to burner, burner to exchange, exchange back. Every move lands in your history, and every move tells someone which address to fake.
The links are the other half: fake claim pages, lookalike wallet sites, "verify in 10 minutes". One signature on the wrong page can empty a wallet.
Paste the address you meant and the one you're about to send to. It checks every character, not just the ends.
Paste your wallet history, a chat, or an explorer page, plus the address you trust. It pulls out every address and flags any that copy the start and end of yours.
Paste the link someone sent you. It reads the text only. It never opens the link.
One click loads a lookalike pair, and you watch the middle light up red.
phantorn.app/claim and lu.ma@evil-site.xyz both come back Rotten fish.
24 links, real and fake, and 6 address cases. The test file ships with the code: tests/checker.test.mjs.
In early November, a fake "claim" app briefly sat in a major Solana app store's spotlight and asked for seed phrases. Coverage: CCN, Crypto Briefing.
The trades you lose are part of trading. The SOL you send to a fake isn't. It's just gone, and it took your next entry with it. One paste before every send. That's the whole habit.
Six rules that stop most drains before a tool is even needed.
Nothing you paste leaves your browser, because the page blocks all outgoing requests. And your public address is public anyway. Never paste a seed phrase or private key, here or anywhere.
No, and nothing can. It spots the common tricks. "No common tricks found" means just that. When in doubt, don't click and don't send.
No. There's nothing to connect and nothing to sign. If any site asks you to sign just to "check" something, close it.
Probably not. That's usually address poisoning: bait in your history, not access to your wallet. Don't interact with it, and don't copy anything from that transaction. Paste your history into the History Scan to see the lookalikes.
Use every warning you can get. This one shows you which characters differ, works on any address from any app, and also checks links.
It's the memecoin for the project. The checker is free and doesn't need the coin. Memecoin, no promises.
The domains the Link Fryer knows are genuine. Anything that only looks like these isn't.