Ingest from honeypots, wallet telemetry, and community tips — continuously.
Live threat intake
See the drain before you sign.
Aegir watches phishing domains, drainer kits, and scammer wallets — then publishes them as a lookup your phone can finish in one breath.
Check a domain or 0x before you tap Connect.
0
Reports filed
0
URLs scanned
0
Domains blocked
One pipeline, first sighting to your lock screen
Candidate sites and addresses arrive around the clock. They are verified, attributed, then shipped to lookup and to the public desk.
Automation first. A human reviews anything that is not clear-cut.
Verdicts land in lookup, partner feeds, and the public report graph.
Who queries Aegir
People on mobile
Check a link before you tap Connect. Most drainers are decided in the first signature.
Wallets & extensions
Screen domains before a dapp sheet opens. Fail closed on BLOCKED.
Risk desks
Screen addresses during review. Merge community reports with the blocklist.
Abuse the community actually files
Same taxonomy you already know from public crypto reporting desks — rebuilt for a thumb.
Phishing560,600
Rug pull387,269
Impersonation27,174
Blackmail98,968
Ransomware55,013
Fake project14,458
Airdrop bait2,541
Romance / pig-butchering2,435
Fresh intake
A rolling view of what just landed. Names are defanged.
Lookup: BLOCKED or PASSED
One edge check. Paste a host or address. This page ships a client-side demo only.
GET /v1/check?q=app-uniswap-fi.net
{
"host": "app-uniswap-fi.net",
"status": "BLOCKED",
"family": "inferno-drainer",
"updated": "2026-09-22T14:41:08Z"
}
Before you tap anything else
Is this legal advice or a recovery service?
No. Aegir is an intelligence and reporting desk. We do not recover funds, ask for seed phrases, or take custody.
Why does the first scan take several seconds?
The cover runs a full fingerprint — host, drainer family, funded wallets, then a verdict — so you can watch the work instead of bouncing.
What if lookup misses a brand-new kit?
File a report. On this static page the note is stored in your browser only.
Which chains are covered?
BTC, ETH, BNB, TRON, SOL, and the usual L2s. The desk stores the chain with every report.