Service metadata & live sample

Code snippets

curl "https://api.oanor.com/phishingcheck-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/phishingcheck-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/phishingcheck-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/phishingcheck-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Example response

A real response from this endpoint, captured by the latest health check.

{
    "data": {
        "sample": {
            "version": 2,
            "blocklist": 198096
        },
        "source": "MetaMask/eth-phishing-detect config (raw GitHub), live",
        "service": "phishingcheck-api",
        "endpoints": {
            "GET /v1/meta": "This document.",
            "GET /v1/check": "Check a domain or url: blocked / allowed / fuzzy / unknown (domain=app.uniswap.org).",
            "GET /v1/stats": "Sizes and version of the loaded eth-phishing-detect lists.",
            "GET /v1/search": "Search the blocklist for domains containing a term (q=uniswap, limit, offset)."
        },
        "description": "Tell whether a domain is a known crypto phishing/scam site before a wallet connects, using MetaMask's canonical eth-phishing-detect blocklist, live and keyless. Runs the real logic: exact + subdomain match against the blocklist/allowlist plus a Levenshtein fuzzy match to catch typosquats. The dApp-connection safety layer for wallets and browser extensions. Live, lightly cached.",
        "upstream_status": "ok"
    },
    "meta": {
        "timestamp": "2026-06-14T08:04:09.205Z",
        "request_id": "fbfbfdba-817d-4984-a4b8-ea1d72abbb95"
    },
    "status": "ok",
    "message": "Meta",
    "success": true
}