Public security desk

Know the Risks. Protect Your Crypto.

Check public scam signals, investigate suspicious addresses, and get practical wallet security guidance.

Risk checks run on the selected EVM network. Bitcoin, Solana, and Tron are format checks only.

Read-only query. No wallet connection. Never enter a seed phrase or private key.

Example report

What We Check

Each finished report names the source, the network, and the status. A missing source is not a clean result.

Known risk flags

GoPlus can return explicit flags, such as phishing activity, for supported EVM networks.

Public scam reports

A second report source runs only when it is enabled. Otherwise the card stays Not Checked.

On-chain notes that came back

Contract status is read from the same response. No extra lookup is invented.

What is left out

Balances are not requested. Timeouts and empty answers stay Unavailable.

EXAMPLE REPORT

Sample security report

This block is an illustration. It is not a scan of an address you submitted.

Address
0x1234…abcd
Network
Ethereum · example
Checked
Example time · not a live query
  • Risk Found Example only: a source returned an explicit flag, with the field name as evidence.
  • No Match Found Example only: the source had no matching record. That is not proof the address is safe.
  • Not Checked Example only: this source was not queried.
  • Unavailable Example only: the source did not return a usable answer.

Example advice: do not send funds based on a sample card, and never type a seed phrase into a website.

Scam Website Checker

Paste a public URL to ask whether it appears in phishing-site data. This server does not open the page.

Wallet Security Checklist

Tick the habits you have reviewed. The count is your progress in this browser, not a risk score.

0 of 5 reviewed

Interactive Security Quiz

Answer five questions. The explanation appears immediately. The score is not a wallet audit.

1. Is it safe to share your seed phrase with a website that offers a security check?
2. What should you do before approving a token allowance?
3. Which pattern is a common fake-airdrop lure?
4. A site says your wallet is at risk and asks you to connect so it can fix the problem. What do you do?
5. A scam database returns no match. What does that mean?

Data Sources & Limitations

GoPlus address and phishing checks are available. Two more address sources stay off until they are enabled on this server. Bitcoin, Solana, and Tron checks confirm the format only.

  • GoPlus — available for supported EVM addresses and for public website URLs.
  • Public scam reports — not enabled on this desk.
  • Second address scan — not enabled on this desk.

Read the limits

Privacy

The address is sent only to sources that actually run. It is not placed in the page URL or in an analytics event.

Privacy

Optional security notes

Email notes are not available on this page. An address typed here is not stored and is not sent.

Common crypto scam patterns

Impersonation usually starts with an unsolicited message. The sender claims to be support, a project admin, or a recovery firm, then moves the conversation toward a link, a seed phrase, or a remote-access tool.

Fake mint and claim pages copy a familiar brand and add a connect button. The dangerous step is the signature or approval that follows, not the artwork on the page.

A recovery offer after a loss is another approach pattern. No service needs your seed phrase to look up a public address. Sentinel will not ask for one.

If you already signed an unexpected approval, revoke that allowance in the wallet you trust, and move remaining assets to a new wallet if the seed phrase was exposed.

Token approval safety

A token approval lets a contract transfer that token from your address, up to the amount you set. An unlimited allowance remains in place until you revoke it or the token contract changes.

Before you confirm, read three things: the site domain, the spender address, and the amount. If the amount is unlimited, decide whether that spender should hold that permission after this transaction.

Approvals are not the same as a single transfer. A transfer moves tokens once. An approval can be used later by the spender.

Use the wallet's own approval or revoke screen to review old allowances. This guide does not connect to your wallet and cannot see your approvals.

Fake airdrop detection

A real distribution is announced on a domain you can reach without a direct message. A fake one arrives as a surprise link and asks you to connect, claim, or approve before you have checked the domain.

Lookalike names add or drop a letter, or put the brand in a subdomain of an unrelated site. Punycode hostnames can imitate a familiar spelling.

Any page that asks for a seed phrase in order to claim tokens is not a claim page. Close it.

If you want to check the URL rather than open it, use the website checker. The browser sends the URL to GoPlus and does not open the page.

Phishing website awareness

Phishing pages imitate a wallet, an exchange, or a protocol and ask you to connect, sign, or reveal a backup phrase. The design can be convincing. The domain is the part you can check first.

Open financial sites from a bookmark or by typing the domain. Search ads and message links are easier to swap.

The website checker compares a URL with GoPlus phishing-site data. No match means that source has no record. It does not mean the site is official.

Do not sign a message you cannot explain, and do not approve a spender you do not recognize.

Personal security plan

The steps below are generated from these answers. They are not a scan and they do not certify a wallet.

Is a copy of your seed phrase stored in photos, email, or cloud notes?
Do you read the spender and amount before confirming a token approval?
Are long-term holdings kept on a hardware wallet or another device that stays offline?
Do you open airdrop or support links that arrive in direct messages?
Do you keep bookmarks for the exchanges and apps you actually use?

About

Sentinel is a read-only desk for public crypto addresses and public URLs. It checks address format, asks GoPlus about that public value, and explains what came back.

It does not connect a wallet, request a signature, or accept a seed phrase. It does not show asset balances.

GoPlus address and phishing-site checks run in the browser. Public scam reports and the second address scan stay Not Checked. Bitcoin, Solana, and Tron confirm the address format only.

Privacy

A wallet check sends the public address from your browser to GoPlus. A website check sends the public URL from your browser to GoPlus. This page does not open the website you paste.

The report stays in this browser tab. It is not stored on a Sentinel server. The full address is not placed in the page URL.

This static page does not save email addresses, contact messages, or analytics events.

Language can follow a saved choice or a country lookup. The country lookup does not receive the wallet address.

Terms

Sentinel provides informational checks from the named sources. A risk flag is evidence from that source, not a legal finding. No match is not a promise that an address or a website is safe.

You will not be asked to connect a wallet or to reveal a secret. If you submit a seed phrase or a private key, the request is rejected and the secret is not stored.

Coverage is limited to the networks and sources listed on this page. Other chains and other attack types are outside this check.

Data sources and limitations

GoPlus address checks run for the EVM networks listed in the selector, including Ethereum, BNB Smart Chain, Polygon, Arbitrum, Optimism, Base, Avalanche, and the other EVM networks marked as risk signals. The same response supplies risk flags and a few on-chain fields, such as whether the address is a contract. The phishing-site check runs for public URLs. The page is not opened.

Public scam reports and the second address scan are not enabled on this desk. The report says Not Checked. Empty responses, timeouts, and unrecognized payloads are Unavailable. They are not a clean result.

Bitcoin, Solana, and Tron are format checks only. Those addresses are not sent to the EVM risk API. Balances are not requested. No match in a source is not a guarantee that an address is safe.

Contact

This page has no message store and does not send email. Do not type a seed phrase, a private key, or a wallet backup into any website.