# Phishing sites impersonating Toncoin

PhishDestroy has recorded 15 phishing domains impersonating Toncoin since 2025-08-25, 0 of them in the last 30 days. The most used registrars are NiceNIC and MAT BAO; the most common TLDs are .com and .exchange. Open Toncoin only from its official app or a saved bookmark.

15Domains, all time

0Last 30 days

9Online at last check

1Confirmed takedowns

## New domains in the last 90 days

Toncoin phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Toncoin site

Words most often added to the brand in reported domains: tonkeeper, mixer, tonkeeperru, helpscoutdocs, change, wallet, ton, battery, sigma, toncoinmixer.
- Type the address yourself or use a bookmark; phishing links for Toncoin arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Toncoin will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Toncoin phishing domains

The 15 most recently detected domains impersonating Toncoin
Domain | First detected | Status at last check | Registrar | 
[tonkeeperr.com](https://phishdestroy.io/domain/tonkeeperr.com/) | 2026-02-26 | Taken down | NiceNIC | 
[tonkeeper-pro.com](https://phishdestroy.io/domain/tonkeeper-pro.com/) | 2026-02-26 | Online | MAT BAO | 
[tonkeeper-pro.org](https://phishdestroy.io/domain/tonkeeper-pro.org/) | 2026-02-26 | Online | Web Commerce Communications | 
[tonkeeper-web.com](https://phishdestroy.io/domain/tonkeeper-web.com/) | 2026-02-26 | Online | MAT BAO | 
[tonkeeperweb.com](https://phishdestroy.io/domain/tonkeeperweb.com/) | 2026-02-26 | Online | MAT BAO | 
[tonkeepers.com](https://phishdestroy.io/domain/tonkeepers.com/) | 2026-02-26 | Online | Tucows Domains | 
[toncoincash.com](https://phishdestroy.io/domain/toncoincash.com/) | 2026-02-26 | Online | Squarespace Domains | 
[toncoinmixer.com](https://phishdestroy.io/domain/toncoinmixer.com/) | 2026-01-26 | Unknown | NiceNIC | 
[tonkeeper-battery-sigma.vercel.app](https://phishdestroy.io/domain/tonkeeper-battery-sigma.vercel.app/) | 2025-11-23 | Online | Vercel | 
[toncoin-ton-mixer.com](https://phishdestroy.io/domain/toncoin-ton-mixer.com/) | 2025-10-17 | Unknown | NiceNIC | 
[toncoin-mixer.com](https://phishdestroy.io/domain/toncoin-mixer.com/) | 2025-10-17 | Unknown | NiceNIC | 
[tonkeeper.us.com](https://phishdestroy.io/domain/tonkeeper.us.com/) | 2025-10-16 | Online | Cloudflare | 
[wallet-tonkeeper.top](https://phishdestroy.io/domain/wallet-tonkeeper.top/) | 2025-09-17 | Offline | Gname.com | 
[toncoin-change.exchange](https://phishdestroy.io/domain/toncoin-change.exchange/) | 2025-08-29 | Unknown | NICENIC | 
[tonkeeperru.helpscoutdocs.com](https://phishdestroy.io/domain/tonkeeperru.helpscoutdocs.com/) | 2025-08-25 | Online | Amazon Registrar | 

[All 15 Toncoin reports](https://phishdestroy.io/domain/?brand=Toncoin)

## Where they are registered and hosted

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4
- [MAT BAO](https://phishdestroy.io/registrar/mat-bao/)3
- [Amazon Registrar](https://phishdestroy.io/registrar/amazon-registrar/)1
- [NICENIC](https://phishdestroy.io/registrar/nicenic/)1
- [Gname.com](https://phishdestroy.io/registrar/name-com/)1
- Cloudflare1
- Vercel1
- [Squarespace Domains](https://phishdestroy.io/registrar/squarespace/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)11
- [.exchange](https://phishdestroy.io/tld/exchange/)1
- [.top](https://phishdestroy.io/tld/top/)1
- [.app](https://phishdestroy.io/tld/app/)1
- [.org](https://phishdestroy.io/tld/org/)1

### Hosting networks

- CLOUDFLARENET, US5
- ETERNITY-AS ETERNITY INTERNATIONAL LIMITED, GB3
- Cloudflare, Inc.2
- AMAZON-AES, US1
- YURTEH-AS Virtual Systems LLC, UA1
- AMAZON-02, US1
- GOOGLE-CLOUD-PLATFORM - Google LLC, US1
- CLOUDFLARENET - Cloudflare, Inc., US1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Toncoin; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/toncoin/