Phishing sites impersonating Aptos

PhishDestroy has recorded 140 phishing domains impersonating Aptos since 2025-07-12, 6 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .app. Open Aptos only from its official app or a saved bookmark.

140
Domains, all time
6
Last 30 days
65
Online at last check
21
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 12026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 12026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 12026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 12026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 12026-08-29: 02026-08-30: 02026-08-31: 12026-09-01: 12026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 22026-09-06: 22026-09-07: 02026-09-08: 22026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 12026-09-20: 12026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 12026-10-06: 02026-10-07: 22026-10-08: 02026-10-09: 12026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 12026-10-15: 02026-10-16: 12026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Aptos phishing domains detected per day: 21 from 2026-07-25 to 2026-10-22; peak 2.

How to tell a fake Aptos site

Words most often added to the brand in reported domains: tokenpocket, wallet, mascor, airdrop, tbdehgv, bridgefromtron, swap, jutroen, drift, aptoslabs.

  • Type the address yourself or use a bookmark; phishing links for Aptos arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Aptos will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Aptos phishing domains

The 50 most recently detected domains impersonating Aptos
DomainFirst detectedStatus at last checkRegistrar
bestchange.guru2026-10-16OnlineEranet
smart-passport.singular.sh2026-10-14OnlineNAMECHEAP
xuanxi.app2026-10-09OnlineDevexpanse
crawlnets.network2026-10-07OnlineNICENIC
crawinets.network2026-10-07OnlineNICENIC
myxrp.finance2026-10-05OfflineNameCheap
aptosgaminglabs.com2026-09-20OnlineGoDaddy.com
tokenopocket.com.cn2026-09-19Online成都西维数码科技有限公司
cofreroganancoz.shop2026-09-08OnlineNETIM
starknetpro.opcagent.cc2026-09-08OfflineHiChina (www.net.cn)
dexscreenervoter.com2026-09-06UnknownNICENIC
aptos-docs-git-dependabot-npmandyarnastro-5181-aptoslabs.vercel.app2026-09-06OfflineVercel
dexscreenervoters.com2026-09-05UnknownNICENIC
dexscreenervotes.com2026-09-05OnlineNICENIC
pay.aptosconnect.net2026-09-01OnlineGoDaddy.com
movemaisclub.com2026-08-31OnlineWix.com
martianwallet.to2026-08-28OnlineDynadot
jwkuiwdiwdiwjdwkdn.com2026-08-18OnlineNICENIC
aptospoints.com2026-08-13OnlineGoDaddy.com
aptospecunia.com2026-08-09OnlineHOSTINGER operations
trackingo8.info2026-07-30OnlineTrustname.com
aptos-ai.net2026-07-08OnlineNameSilo
webtrader.aptos-ai.net2026-06-29OfflineNameSilo
trustee.io2026-06-11OnlineENOM
martianwallet.org2026-06-10OnlineDynadot
ssusshi.com2026-06-10OnlineUnstoppableUS3
fs.cpa-advogados.com2026-06-09OnlinePublicDomainRegistry.com
secure.security-service.cloud2026-05-18OnlineTUCOWS.COM
ekidenfi.com2026-05-07OfflineNICENIC
ekiden.exchange2026-05-07OfflineNICENIC
weshometse.com2026-05-05OnlinePublicDomainRegistry.com
tokenpkcket.org.cn2026-05-01Taken downDynadot
aptos-livepeer-nft-dapp.vercel.app2026-04-27OnlineVercel
tokenpocket.onl2026-04-15Taken downDynadot
app-imtoken.net2026-04-15OnlineDominet (HK)
aptos-apt-com.pages.dev2026-04-13Taken downCloudflare
tptoekn.top2026-04-09OfflineDominet (HK)
topokect.top2026-04-09OfflineDominet (HK)
tokenpocket.games2026-04-05OnlineGoDaddy.com
drift-safe.com2026-04-05UnknownNICENIC
nokyc-noaml.com2026-04-02OnlineTucows Domains
tokenpocket.mom2026-03-29OfflineHongkong Kouming
tokenpocket.ceo2026-03-28OfflinePorkbun
tokenpocket.cash2026-03-28OfflineDynadot
sageswap.cc2026-03-27OnlineNICENIC
aptosnetwork.info2026-03-23UnknownNICENIC
tokenpocket.boo2026-03-23OfflinePorkbun
tokenpocket.win2026-03-22OnlineGoDaddy.com
cryptomus.uk.com2026-03-17OfflineInstra
aptos-apt.com2026-03-11OfflineNameCheap

All 140 Aptos reports

Where they are registered and hosted

Registrars

  1. NiceNIC11
  2. Cloudflare11
  3. NICENIC11
  4. NameSilo9
  5. PublicDomainRegistry.com8
  6. GoDaddy.com7
  7. Tucows Domains6
  8. NameCheap6

Top-level domains

  1. .com44
  2. .app12
  3. .top9
  4. .dev8
  5. .io6
  6. .net5
  7. .finance4
  8. .network4

Hosting networks

  1. CLOUDFLARENET, US45
  2. Cloudflare, Inc.24
  3. CLOUDFLARENET - Cloudflare, Inc., US9
  4. Amazon.com, Inc.8
  5. AMAZON-02, US7
  6. ASLINE-AS-AP ASLINE Global Exchange, HK4
  7. AS-COLOCROSSING, US3
  8. ThorDC-AS Advania Island ehf, IS2

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Aptos; share of all PhishDestroy reports: 0.06%.