Blacklist Checker
Paste any domain or URL and check it against the Kunch blacklist — a versioned JSON database of documented scam operations, each entry backed by a regulator action, court filing or major newsroom. The whole database ships inside this page, so the check works with the network unplugged.
This tool is plain client-side JavaScript — no accounts, no server calls, no telemetry, not even a web font from a CDN. To keep it forever: press Ctrl + S (Mac: Cmd + S), choose "Webpage, Complete", and open the saved file any time — with Wi-Fi off, in airplane mode, on a machine that never touches the internet.
Check a domain
Loads the Kunch blacklist — a versioned JSON database of documented scam domains, each backed by a regulator, court or major newsroom — and checks the site you enter against every entry, including subdomains. The whole database ships inside this page, so the lookup works from a saved file with the network unplugged. For the full stories behind the entries, read the case files.
The full database — every entry, with sources +
| Domain | Operation | Category | Status | Since | Sources |
|---|
Machine-readable copy: kunch-blacklist.json — the exact file the checker loads, licensed CC BY 4.0. Entries marked reported are pending verification and have not completed our two-source confirmation process.
How the Blacklist Checker works
The checker starts by loading kunch-blacklist.json — not from a server, but from the page itself. The file is embedded as a local JavaScript object the moment the page opens, which is why the lookup keeps working from a saved copy with the network switched off. Every entry in the database carries the domain, the operation it belongs to, a category, a confirmation status, the date it was flagged, and links to its primary sources: SEC fraud actions, DOJ charges, FBI notices, FCA warning-list entries, and reporting from outlets like the BBC and Chainalysis.
When you submit a domain, it is normalized before any comparison happens. The tool strips the scheme (https://), any www. prefix, paths, query strings, ports and URL credentials, leaving only the host. It then compares that host against every entry in two passes: an exact match, and a subdomain match — so app.onecoin.eu is caught by an entry for onecoin.eu even though the strings differ. Scam operators routinely spin up lookalike subdomains, which is exactly why the second pass exists.
The verdict is deliberately blunt. A confirmed entry means two independent, citable sources document the scam. A reported entry means the domain appears on a credible warning list but has not yet completed our two-source confirmation process — treat it as unsafe while the review continues. A clean result means the domain is not in this database, which is a statement about this database only: absence of evidence is not an endorsement, and no list can substitute for the safety habits described in our guides.
Blacklist Checker — questions
Where does the blacklist data come from? +
Every entry cites its sources: SEC fraud actions (like the BitConnect and PlexCoin cases), DOJ charges, FBI notices on the OneCoin fugitives, FCA warning-list entries, and reporting from the BBC and Chainalysis. The full database is downloadable from this page as JSON, licensed CC BY 4.0, so you can reuse it in your own tooling.
Is my search sent to a server? +
No — there is no server involved at all. The database ships inside the page, the matching runs in your browser's JavaScript, and the page makes zero network requests. You can save the page with Ctrl+S, go offline, and the checker still works exactly the same.
A site came back clean — does that mean it is safe? +
Not necessarily. A clean result means the domain is not in the Kunch database, which is a statement about this database only. New phishing domains appear daily, and no list can be exhaustive. Combine the checker with the habits in our guide to spotting fake crypto websites, and check regulator warning lists before sending funds.
What is the difference between confirmed and reported? +
Confirmed entries are backed by at least two independent, citable sources — a regulator action plus a court filing, for example. Reported entries appear on a credible warning list but have not completed our two-source verification yet. Both are flagged; the label tells you how strong the paper trail is.
All eight tools.
Every one offline.
Blacklist Checker — you are here
Check any domain against the Kunch JSON database of documented scam sites — offline.
KID Generator
A public, shareable KID from a Bitcoin key — all four major addresses, verified offline.
Seed Validator
Validate a BIP-39 mnemonic's words and checksum before you trust it.
Address Codec
Base58Check, Bech32 and EIP-55 addresses — identified, checksum-verified, explained.
Vanity Generator
Mine a Bitcoin address that starts with your chosen prefix — locally, never uploaded.
Hash Toolkit
SHA-256, Keccak-256, RIPEMD-160 and HASH160, computed locally as you type.
Tx Decoder
Read exactly what a raw signed Bitcoin transaction does — before you broadcast it.
Unit Converter
Wei, gwei, satoshi, msat — plus vB × sat/vB fee math. Exact BigInt arithmetic.