# Phishing sites impersonating Aptos PhishDestroy has recorded 140 phishing domains impersonating Aptos since 2025-07-12, 6 of them in the last 30 days. The most used registrars are NiceNIC and Cloudflare; the most common TLDs are .com and .app. Open Aptos only from its official app or a saved bookmark. 140Domains, all time 6Last 30 days 65Online at last check 21Confirmed takedowns ## New domains in the last 90 days Aptos phishing domains detected per day: 21 from 2026-07-25 to 2026-10-22; peak 2. ## How to tell a fake Aptos site Words most often added to the brand in reported domains: tokenpocket, wallet, mascor, airdrop, tbdehgv, bridgefromtron, swap, jutroen, drift, aptoslabs. - Type the address yourself or use a bookmark; phishing links for Aptos arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Aptos will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Aptos phishing domains The 50 most recently detected domains impersonating Aptos Domain | First detected | Status at last check | Registrar | [bestchange.guru](https://phishdestroy.io/domain/bestchange.guru/) | 2026-10-16 | Online | Eranet | [smart-passport.singular.sh](https://phishdestroy.io/domain/smart-passport.singular.sh/) | 2026-10-14 | Online | NAMECHEAP | [xuanxi.app](https://phishdestroy.io/domain/xuanxi.app/) | 2026-10-09 | Online | Devexpanse | [crawlnets.network](https://phishdestroy.io/domain/crawlnets.network/) | 2026-10-07 | Online | NICENIC | [crawinets.network](https://phishdestroy.io/domain/crawinets.network/) | 2026-10-07 | Online | NICENIC | [myxrp.finance](https://phishdestroy.io/domain/myxrp.finance/) | 2026-10-05 | Offline | NameCheap | [aptosgaminglabs.com](https://phishdestroy.io/domain/aptosgaminglabs.com/) | 2026-09-20 | Online | GoDaddy.com | [tokenopocket.com.cn](https://phishdestroy.io/domain/tokenopocket.com.cn/) | 2026-09-19 | Online | 成都西维数码科技有限公司 | [cofreroganancoz.shop](https://phishdestroy.io/domain/cofreroganancoz.shop/) | 2026-09-08 | Online | NETIM | [starknetpro.opcagent.cc](https://phishdestroy.io/domain/starknetpro.opcagent.cc/) | 2026-09-08 | Offline | HiChina (www.net.cn) | [dexscreenervoter.com](https://phishdestroy.io/domain/dexscreenervoter.com/) | 2026-09-06 | Unknown | NICENIC | [aptos-docs-git-dependabot-npmandyarnastro-5181-aptoslabs.vercel.app](https://phishdestroy.io/domain/aptos-docs-git-dependabot-npmandyarnastro-5181-aptoslabs.vercel.app/) | 2026-09-06 | Offline | Vercel | [dexscreenervoters.com](https://phishdestroy.io/domain/dexscreenervoters.com/) | 2026-09-05 | Unknown | NICENIC | [dexscreenervotes.com](https://phishdestroy.io/domain/dexscreenervotes.com/) | 2026-09-05 | Online | NICENIC | [pay.aptosconnect.net](https://phishdestroy.io/domain/pay.aptosconnect.net/) | 2026-09-01 | Online | GoDaddy.com | [movemaisclub.com](https://phishdestroy.io/domain/movemaisclub.com/) | 2026-08-31 | Online | Wix.com | [martianwallet.to](https://phishdestroy.io/domain/martianwallet.to/) | 2026-08-28 | Online | Dynadot | [jwkuiwdiwdiwjdwkdn.com](https://phishdestroy.io/domain/jwkuiwdiwdiwjdwkdn.com/) | 2026-08-18 | Online | NICENIC | [aptospoints.com](https://phishdestroy.io/domain/aptospoints.com/) | 2026-08-13 | Online | GoDaddy.com | [aptospecunia.com](https://phishdestroy.io/domain/aptospecunia.com/) | 2026-08-09 | Online | HOSTINGER operations | [trackingo8.info](https://phishdestroy.io/domain/trackingo8.info/) | 2026-07-30 | Online | Trustname.com | [aptos-ai.net](https://phishdestroy.io/domain/aptos-ai.net/) | 2026-07-08 | Online | NameSilo | [webtrader.aptos-ai.net](https://phishdestroy.io/domain/webtrader.aptos-ai.net/) | 2026-06-29 | Offline | NameSilo | [trustee.io](https://phishdestroy.io/domain/trustee.io/) | 2026-06-11 | Online | ENOM | [martianwallet.org](https://phishdestroy.io/domain/martianwallet.org/) | 2026-06-10 | Online | Dynadot | [ssusshi.com](https://phishdestroy.io/domain/ssusshi.com/) | 2026-06-10 | Online | UnstoppableUS3 | [fs.cpa-advogados.com](https://phishdestroy.io/domain/fs.cpa-advogados.com/) | 2026-06-09 | Online | PublicDomainRegistry.com | [secure.security-service.cloud](https://phishdestroy.io/domain/secure.security-service.cloud/) | 2026-05-18 | Online | TUCOWS.COM | [ekidenfi.com](https://phishdestroy.io/domain/ekidenfi.com/) | 2026-05-07 | Offline | NICENIC | [ekiden.exchange](https://phishdestroy.io/domain/ekiden.exchange/) | 2026-05-07 | Offline | NICENIC | [weshometse.com](https://phishdestroy.io/domain/weshometse.com/) | 2026-05-05 | Online | PublicDomainRegistry.com | [tokenpkcket.org.cn](https://phishdestroy.io/domain/tokenpkcket.org.cn/) | 2026-05-01 | Taken down | Dynadot | [aptos-livepeer-nft-dapp.vercel.app](https://phishdestroy.io/domain/aptos-livepeer-nft-dapp.vercel.app/) | 2026-04-27 | Online | Vercel | [tokenpocket.onl](https://phishdestroy.io/domain/tokenpocket.onl/) | 2026-04-15 | Taken down | Dynadot | [app-imtoken.net](https://phishdestroy.io/domain/app-imtoken.net/) | 2026-04-15 | Online | Dominet (HK) | [aptos-apt-com.pages.dev](https://phishdestroy.io/domain/aptos-apt-com.pages.dev/) | 2026-04-13 | Taken down | Cloudflare | [tptoekn.top](https://phishdestroy.io/domain/tptoekn.top/) | 2026-04-09 | Offline | Dominet (HK) | [topokect.top](https://phishdestroy.io/domain/topokect.top/) | 2026-04-09 | Offline | Dominet (HK) | [tokenpocket.games](https://phishdestroy.io/domain/tokenpocket.games/) | 2026-04-05 | Online | GoDaddy.com | [drift-safe.com](https://phishdestroy.io/domain/drift-safe.com/) | 2026-04-05 | Unknown | NICENIC | [nokyc-noaml.com](https://phishdestroy.io/domain/nokyc-noaml.com/) | 2026-04-02 | Online | Tucows Domains | [tokenpocket.mom](https://phishdestroy.io/domain/tokenpocket.mom/) | 2026-03-29 | Offline | Hongkong Kouming | [tokenpocket.ceo](https://phishdestroy.io/domain/tokenpocket.ceo/) | 2026-03-28 | Offline | Porkbun | [tokenpocket.cash](https://phishdestroy.io/domain/tokenpocket.cash/) | 2026-03-28 | Offline | Dynadot | [sageswap.cc](https://phishdestroy.io/domain/sageswap.cc/) | 2026-03-27 | Online | NICENIC | [aptosnetwork.info](https://phishdestroy.io/domain/aptosnetwork.info/) | 2026-03-23 | Unknown | NICENIC | [tokenpocket.boo](https://phishdestroy.io/domain/tokenpocket.boo/) | 2026-03-23 | Offline | Porkbun | [tokenpocket.win](https://phishdestroy.io/domain/tokenpocket.win/) | 2026-03-22 | Online | GoDaddy.com | [cryptomus.uk.com](https://phishdestroy.io/domain/cryptomus.uk.com/) | 2026-03-17 | Offline | Instra | [aptos-apt.com](https://phishdestroy.io/domain/aptos-apt.com/) | 2026-03-11 | Offline | NameCheap | [All 140 Aptos reports](https://phishdestroy.io/domain/?brand=Aptos) ## Where they are registered and hosted ### Registrars - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)11 - Cloudflare11 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)11 - [NameSilo](https://phishdestroy.io/registrar/namesilo/)9 - [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)8 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)7 - [Tucows Domains](https://phishdestroy.io/registrar/tucows/)6 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)6 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)44 - [.app](https://phishdestroy.io/tld/app/)12 - [.top](https://phishdestroy.io/tld/top/)9 - [.dev](https://phishdestroy.io/tld/dev/)8 - [.io](https://phishdestroy.io/tld/io/)6 - [.net](https://phishdestroy.io/tld/net/)5 - [.finance](https://phishdestroy.io/tld/finance/)4 - [.network](https://phishdestroy.io/tld/network/)4 ### Hosting networks - CLOUDFLARENET, US45 - Cloudflare, Inc.24 - CLOUDFLARENET - Cloudflare, Inc., US9 - Amazon.com, Inc.8 - AMAZON-02, US7 - ASLINE-AS-AP ASLINE Global Exchange, HK4 - AS-COLOCROSSING, US3 - ThorDC-AS Advania Island ehf, IS2 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Aptos; share of all PhishDestroy reports: 0.06%. Canonical: https://phishdestroy.io/brand/aptos/