Nothing has been sent
Leave the message. Do not sign, approve, or type a recovery phrase. Open the official app from your own home screen, not from the link in the message.
Someone is asking you to sign. Compare the link on this phone first. The list is four fictional samples that ship with this page. A miss is not a clearance.
- 4sample entries
- 6patterns named
- 16languages
Sample feed
01 Check
Compare it with the bundled list
Paste a domain, a full URL, or a 0x address. The comparison runs on this phone. A hit means the string is one of those four samples. A miss is not a clearance.
Try a sample
After the check
Two ways forward
Money has already moved
On this phone, write down the transaction hash, the amount, and the time. Then use a report channel published by the exchange or by the police. Open that channel yourself. Do not use a link from the message.
Published desks
- The exchange or wallet's own support, opened from the official app.
- IC3 — FBI Internet Crime Complaint Center.
- cyberpolice.cn — Report site published by China's Ministry of Public Security.
02 Path
Three beats, no account
-
01
Bring it
Bring the link, the address, or just what the message asked you to do.
-
02
Compare
The page lifts the hostname and compares it with the bundled list. Nothing is uploaded.
-
03
Keep
A note receives a reference and stays in this browser until you delete it.
03 Patterns
Names for the usual traps
Phishing
A page or a message borrows a known product’s voice and asks for a phrase or a signature.
Impersonation
Someone plays support, a founder, or a friend, and the clock is always running.
Rug pull
A project takes the funds, then erases the public trail.
Fake reward
An airdrop, a rebate, or a claim page that wants an approval first.
Extortion
A threat to publish, lock, or accuse unless crypto is sent.
Trust lure
Days of warmth, then a transfer, a fee, or a request to share your screen.
04 Brief
Six checks before you sign
- 01
Read the hostname slowly, including the letters after the brand word.
- 02
If a reward arrived uninvited, do not connect a wallet.
- 03
Never type a recovery phrase into a website.
- 04
Support does not need your screen, your phrase, or a sync transaction.
- 05
Urgency is a tool. Wait until you can open the official app yourself.
- 06
If money already moved, write down the hashes and the time, then use the exchange and law-enforcement channels published by those offices.
05 Data
What this page touches
Language
The root page asks a public IP-country service once. If that call fails or runs long, the browser language is used. English opens when that language is not one of these pages.
Lookup
The comparison runs locally against the four sample entries.
Note
The text stays on this device until you delete the note.
This desk does not ask for a recovery phrase, a private key, or a wallet connection.
06 Note
A record for yourself
For your own memory. The text stays in this browser.
07 Teams
If you build a wallet or a help desk
This static page is not a live feed and it is not an API. A team that needs a maintained blocklist should use a security vendor that updates one. Harborline shows the shape of the pause: check, name the pattern, write down what happened.
