aptos-bridge[.]vercel[.]app

Analysis of aptos-bridge.vercel.app indicates a high‑risk brand‑impersonation operation targeting the Aptos brand. The domain was registered on 2026-02-21 through Tucows Domains Inc. and resolves to the IP 64.29.17.131, which belongs to AS16509 Amazon.com, Inc. and is geolocated in the United States. The site is hosted on Vercel infrastructure, serves an HTTPS certificate issued by Google Trust Services (CN=WR1), and enforces HSTS. An HTTP request returns status 200 while the page title reports "404: NOT_FOUND", suggesting a placeholder or intentionally obscured content. Security telemetry shows the domain is listed on two blocklists and has been blocked by the PhishDestroy and Enkrypt filters. VirusTotal records two detections out of ninety‑five scanners, and Gridinsoft assigns a trust score of 0/100, reinforcing the malicious assessment. The observed scam type is "Crypto Scam", and the domain actively impersonates Aptos. No additional payload or page content has been disclosed publicly. Given the concrete indicators—registered in 2026, active hosting, SSL certificate, blocklist presence, and multiple vendor detections—defenders should treat the domain as malicious, block network resolution, and monitor for related traffic. Continuous re‑evaluation is advised if new artifacts emerge, but current evidence supports immediate containment.