01 · Detect
31M URLs scanned
Candidate sites and addresses are gathered around the clock from separate sources.
Field note · lookalike domains
Real-time scam intelligencefor crypto
Harbor describes a blocklist of phishing sites, drainer pages, and scam addresses. A free browser add-on for one person. An API when a team needs the same list.
Networks the blocklist is built to watch
- Ethereum
- Bitcoin
- Solana
- Tron
- TON
- Sui
How the data is made
One pipeline, from a sighting to the list
The add-on and the API are meant to read one feed. Candidates come in, get checked, then land on the list. The counts below are samples for this page.
02 · Verify
412K scams identified
An entry is checked before it is listed. A machine first, a person when the call is unclear.
03 · Deliver
186K domains blocked
Checked rows would ship to the API and the add-on from that same list.
For teams
Look up a domain or an address
One lookup, answered near the edge. The snippet below shows the shape of a response. This page does not call a live API.
- →Domain and URL checks, one at a time or in a batch
- →Address checks, one at a time or in a batch
- →A list export for teams that screen on their own
Example site check
$ curl "https://api.example/v1/site?url=https://swap-portal-fi.net" \
-H "authorization: Bearer $SAMPLE_KEY"
{
"host": "swap-portal-fi.net",
"status": "BLOCKED"
}Sample response. This page does not send that request.
Wallets and add-ons
Check a link against the domain list before someone opens it.
Security desks
Fold the list into the alerts and tracing you already run.
Risk and compliance
Screen an address against known scam addresses during a review.
Field notes
Notes from the same pipeline
Short notes for people who sign on a phone, and for the desks that watch those flows.
Where phone phishing tends to start
Where phone phishing tends to start
A lot of the losses traced in this story begin on a phone, inside an ad or a popup, not from a desktop bookmark.
A lookalike name is often up for hours, not weeks. A list only helps if it moves on that clock.
From an ad click to a seed request
From an ad click to a seed request
The page after a bad ad often does not ask for a signature first. It asks for a recovery phrase, dressed up as a restore.
This page will not ask you for a seed phrase. A blocklist does not need one.
When the preview before you sign is wrong
When the preview before you sign is wrong
A preview can show a friendly balance change while the transaction underneath does something else.
The add-on in this story is meant to flag that kind of prompt before an approval leaves the phone.
Do not paste a seed phrase, private key, or recovery words into any field. This page does not ask for them.
Pricing
Start free. Add the API when a product needs the list.
Add-on
$0
The browser add-on for personal use. The same list the API would serve, with a lighter rate of checks.
- ✓Warnings on known phishing sites
- ✓A prompt before a risky signature
- ✓No wallet connection and no seed phrase
Standard
from $890 / month
Lookups for a single product. The figure is a sample price for this overview, billed by query volume.
- ✓Domain and URL blocklist
- ✓Malicious address blocklist
- ✓REST lookup with ordinary limits
Enterprise
Custom
For wallets, exchanges, and security platforms. Scoped and priced by volume.
- ✓Bulk feed access
- ✓Notes on drainer families
- ✓A named contact and a custom fit
The same list, in the browser. Free.
Harbor would warn you when a site or an address is on the list, before a page asks you to sign or to type a recovery phrase.
- A check before the link opens
- A prompt before a risky signature
- No seed phrase, ever
Request
Tell us what you need
The form stays in this browser. Nothing is uploaded, and there is no inbox on this page.