Known risk flags
GoPlus can return explicit flags, such as phishing activity, for supported EVM networks.
Public security desk
Check public scam signals, investigate suspicious addresses, and get practical wallet security guidance.
Scan progress
This percentage tracks the check. It is not a safety score.
0 of 0 finished
Each finished report names the source, the network, and the status. A missing source is not a clean result.
GoPlus can return explicit flags, such as phishing activity, for supported EVM networks.
A second report source runs only when it is enabled. Otherwise the card stays Not Checked.
Contract status is read from the same response. No extra lookup is invented.
Balances are not requested. Timeouts and empty answers stay Unavailable.
EXAMPLE REPORT
This block is an illustration. It is not a scan of an address you submitted.
Example advice: do not send funds based on a sample card, and never type a seed phrase into a website.
Paste a public URL to ask whether it appears in phishing-site data. This server does not open the page.
Tick the habits you have reviewed. The count is your progress in this browser, not a risk score.
0 of 5 reviewed
A surprise claim link asks you to connect before you have checked the domain.
A lookalike domain imitates a wallet or exchange and asks you to sign.
An unsolicited message offers to fix a loss and asks for a recovery phrase.
An unlimited allowance lets a contract move that token later.
A copied brand or celebrity asks you to send funds to an address they provide.
Answer five questions. The explanation appears immediately. The score is not a wallet audit.
GoPlus address and phishing checks are available. Two more address sources stay off until they are enabled on this server. Bitcoin, Solana, and Tron checks confirm the format only.
The address is sent only to sources that actually run. It is not placed in the page URL or in an analytics event.
Email notes are not available on this page. An address typed here is not stored and is not sent.
Short operational notes. They do not replace the official documentation of a wallet or a protocol.
Impersonation usually starts with an unsolicited message. The sender claims to be support, a project admin, or a recovery firm, then moves the conversation toward a link, a seed phrase, or a remote-access tool.
Fake mint and claim pages copy a familiar brand and add a connect button. The dangerous step is the signature or approval that follows, not the artwork on the page.
A recovery offer after a loss is another approach pattern. No service needs your seed phrase to look up a public address. Sentinel will not ask for one.
If you already signed an unexpected approval, revoke that allowance in the wallet you trust, and move remaining assets to a new wallet if the seed phrase was exposed.
A token approval lets a contract transfer that token from your address, up to the amount you set. An unlimited allowance remains in place until you revoke it or the token contract changes.
Before you confirm, read three things: the site domain, the spender address, and the amount. If the amount is unlimited, decide whether that spender should hold that permission after this transaction.
Approvals are not the same as a single transfer. A transfer moves tokens once. An approval can be used later by the spender.
Use the wallet's own approval or revoke screen to review old allowances. This guide does not connect to your wallet and cannot see your approvals.
A real distribution is announced on a domain you can reach without a direct message. A fake one arrives as a surprise link and asks you to connect, claim, or approve before you have checked the domain.
Lookalike names add or drop a letter, or put the brand in a subdomain of an unrelated site. Punycode hostnames can imitate a familiar spelling.
Any page that asks for a seed phrase in order to claim tokens is not a claim page. Close it.
If you want to check the URL rather than open it, use the website checker. The browser sends the URL to GoPlus and does not open the page.
Phishing pages imitate a wallet, an exchange, or a protocol and ask you to connect, sign, or reveal a backup phrase. The design can be convincing. The domain is the part you can check first.
Open financial sites from a bookmark or by typing the domain. Search ads and message links are easier to swap.
The website checker compares a URL with GoPlus phishing-site data. No match means that source has no record. It does not mean the site is official.
Do not sign a message you cannot explain, and do not approve a spender you do not recognize.
The steps below are generated from these answers. They are not a scan and they do not certify a wallet.
Sentinel is a read-only desk for public crypto addresses and public URLs. It checks address format, asks GoPlus about that public value, and explains what came back.
It does not connect a wallet, request a signature, or accept a seed phrase. It does not show asset balances.
GoPlus address and phishing-site checks run in the browser. Public scam reports and the second address scan stay Not Checked. Bitcoin, Solana, and Tron confirm the address format only.
A wallet check sends the public address from your browser to GoPlus. A website check sends the public URL from your browser to GoPlus. This page does not open the website you paste.
The report stays in this browser tab. It is not stored on a Sentinel server. The full address is not placed in the page URL.
This static page does not save email addresses, contact messages, or analytics events.
Language can follow a saved choice or a country lookup. The country lookup does not receive the wallet address.
Sentinel provides informational checks from the named sources. A risk flag is evidence from that source, not a legal finding. No match is not a promise that an address or a website is safe.
You will not be asked to connect a wallet or to reveal a secret. If you submit a seed phrase or a private key, the request is rejected and the secret is not stored.
Coverage is limited to the networks and sources listed on this page. Other chains and other attack types are outside this check.
GoPlus address checks run for the EVM networks listed in the selector, including Ethereum, BNB Smart Chain, Polygon, Arbitrum, Optimism, Base, Avalanche, and the other EVM networks marked as risk signals. The same response supplies risk flags and a few on-chain fields, such as whether the address is a contract. The phishing-site check runs for public URLs. The page is not opened.
Public scam reports and the second address scan are not enabled on this desk. The report says Not Checked. Empty responses, timeouts, and unrecognized payloads are Unavailable. They are not a clean result.
Bitcoin, Solana, and Tron are format checks only. Those addresses are not sent to the EVM risk API. Balances are not requested. No match in a source is not a guarantee that an address is safe.
This page has no message store and does not send email. Do not type a seed phrase, a private key, or a wallet backup into any website.