Phishing sites impersonating Toncoin

PhishDestroy has recorded 15 phishing domains impersonating Toncoin since 2025-08-25, 0 of them in the last 30 days. The most used registrars are NiceNIC and MAT BAO; the most common TLDs are .com and .exchange. Open Toncoin only from its official app or a saved bookmark.

15
Domains, all time
0
Last 30 days
9
Online at last check
1
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Toncoin phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Toncoin site

Words most often added to the brand in reported domains: tonkeeper, mixer, tonkeeperru, helpscoutdocs, change, wallet, ton, battery, sigma, toncoinmixer.

  • Type the address yourself or use a bookmark; phishing links for Toncoin arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Toncoin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Toncoin phishing domains

The 15 most recently detected domains impersonating Toncoin
DomainFirst detectedStatus at last checkRegistrar
tonkeeperr.com2026-02-26Taken downNiceNIC
tonkeeper-pro.com2026-02-26OnlineMAT BAO
tonkeeper-pro.org2026-02-26OnlineWeb Commerce Communications
tonkeeper-web.com2026-02-26OnlineMAT BAO
tonkeeperweb.com2026-02-26OnlineMAT BAO
tonkeepers.com2026-02-26OnlineTucows Domains
toncoincash.com2026-02-26OnlineSquarespace Domains
toncoinmixer.com2026-01-26UnknownNiceNIC
tonkeeper-battery-sigma.vercel.app2025-11-23OnlineVercel
toncoin-ton-mixer.com2025-10-17UnknownNiceNIC
toncoin-mixer.com2025-10-17UnknownNiceNIC
tonkeeper.us.com2025-10-16OnlineCloudflare
wallet-tonkeeper.top2025-09-17OfflineGname.com
toncoin-change.exchange2025-08-29UnknownNICENIC
tonkeeperru.helpscoutdocs.com2025-08-25OnlineAmazon Registrar

All 15 Toncoin reports

Where they are registered and hosted

Registrars

  1. NiceNIC4
  2. MAT BAO3
  3. Amazon Registrar1
  4. NICENIC1
  5. Gname.com1
  6. Cloudflare1
  7. Vercel1
  8. Squarespace Domains1

Top-level domains

  1. .com11
  2. .exchange1
  3. .top1
  4. .app1
  5. .org1

Hosting networks

  1. CLOUDFLARENET, US5
  2. ETERNITY-AS ETERNITY INTERNATIONAL LIMITED, GB3
  3. Cloudflare, Inc.2
  4. AMAZON-AES, US1
  5. YURTEH-AS Virtual Systems LLC, UA1
  6. AMAZON-02, US1
  7. GOOGLE-CLOUD-PLATFORM - Google LLC, US1
  8. CLOUDFLARENET - Cloudflare, Inc., US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Toncoin; share of all PhishDestroy reports: 0.01%.