Phishing sites blocked in wallets and browsers while the takedown runs

Phishing sites blocked in wallets and browsers while the takedown runs

A takedown can take days. Your customer may be clicking the link now. Blocking closes that gap: once ChainPatrol confirms a phishing site, it goes on the blocklists that wallets, DNS providers and browsers already check, so people see a warning instead of a fake login page. The takedown runs at the same time.

A takedown can take days. Your customer may be clicking the link now. Blocking closes that gap: once ChainPatrol confirms a phishing site, it goes on the blocklists that wallets, DNS providers and browsers already check, so people see a warning instead of a fake login page. The takedown runs at the same time.

Book a demo

Book a demo

Get a free scan

Get a free scan

Get a free scan

Where confirmed threats are blocked

Where confirmed threats are blocked

WhereHow fast
20+ wallets, including MetaMaskWithin minutes, typically 5 to 10
DNS providers such as Quad9 and Cloudflare GatewayWithin minutes
Major browsers, through Google Safe BrowsingTypically 1–3 hours
Your own app, through the API and SDKAs soon as the site is confirmed

From detection to blocked

From detection to blocked

Blocking and the takedown run side by side.

Blocking and the takedown run side by side.

01

01

Detect and score

A suspected site is detected or reported, then scanned and scored.

02

02

Confirm

Clear threats are approved automatically. Borderline ones, and anything that matches your official assets, go to an analyst first.

03

03

Block

The site goes on the blocklist and reaches every integration.

04

04

Take down

The takedown is filed with the registrar and host at the same time.

05

Recheck

Liveness checks keep watching the site until it is confirmed down.

Why blocking first matters

Why blocking first matters

Registrars and hosts set the pace of a takedown, and some take weeks. Blocking is the step that can happen within minutes. The takedown still matters, because it reaches people who aren’t covered by a blocklist and stops the operator reusing the domain.

Registrars and hosts set the pace of a takedown, and some take weeks. Blocking is the step that can happen within minutes. The takedown still matters, because it reaches people who aren’t covered by a blocklist and stops the operator reusing the domain.

False positives and disputes

False positives and disputes

Blocking a legitimate site is costly, so borderline cases get human review and your allowlisted domains are left out of automatic detection. If one of your own assets is compromised, it can be blocked until it’s fixed. Anyone can dispute a block at chainpatrol.com/dispute.

Blocking a legitimate site is costly, so borderline cases get human review and your allowlisted domains are left out of automatic detection. If one of your own assets is compromised, it can be blocked until it’s fixed. Anyone can dispute a block at chainpatrol.com/dispute.

What blocking includes

What blocking includes

Wallet warnings

20+ wallets within minutes.

Browser warnings

Major browsers through Google Safe Browsing.

DNS blocking

Quad9, Cloudflare Gateway and more.

Checks from your app

API and SDK lookups.

Liveness checks

Watched until confirmed down.

Public dispute process

Anyone can contest a block.

Frequently asked questions

More than 20 wallets, including MetaMask, DNS providers such as Quad9 and Cloudflare Gateway, and major browsers through Google Safe Browsing. See the integrations page.

Wallets and DNS providers pick up confirmed sites within minutes. Major browsers typically take 1–3 hours. The takedown runs in parallel and takes longer.

No. Blocking applies to websites and links. Fake accounts are removed through takedowns with each platform.

Yes. The API and JavaScript SDK let you check URLs, domains and addresses and get their status.

See it on your brand

See it on your brand

Book a 30-minute demo to see how we find, block and take down impersonation targeting your brand.

Book a 30-minute demo to see how we find, block and take down impersonation targeting your brand.

Book a demo

Book a demo

Get a free scan

Get a free scan

Get a free scan