aptos-names-mainnet-temp[.]netlify[.]app

This domain, aptos-names-mainnet-temp.netlify.app, is flagged as a high-risk brand impersonation threat targeting users of the Aptos blockchain platform. The site presents itself as the 'Official name service to register your .apt name,' a direct mimicry of Aptos' legitimate naming service. Such impersonation schemes are commonly used to deceive users into connecting their crypto wallets, entering sensitive credentials, or approving malicious transactions, which can lead to unauthorized access, token theft, or irreversible financial losses. The page title and branding are designed to exploit trust in the Aptos ecosystem, making it particularly dangerous for unsuspecting users seeking to register or manage .apt domain names. Analysis indicates this domain is not affiliated with the legitimate Aptos platform. The site is hosted on Netlify, a widely used static hosting service, and resolves to the IP address 98.84.224.111, which is part of Amazon.com, Inc.'s AS14618 network in the United States. The SSL certificate is issued by DigiCert Inc, specifically under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain, which is standard for many legitimate sites but does not validate the site's authenticity. According to VirusTotal, 15 out of 95 security vendors have flagged this domain as malicious, with detections ranging from phishing to brand impersonation. Additionally, the domain appears on at least one security blocklist and is actively blocked by PhishDestroy, further confirming its malicious nature. The combination of brand mimicry, hosting on a reputable but abused platform, and multiple security detections underscores the high risk associated with this domain. Users who have visited aptos-names-mainnet-temp.netlify.app should take immediate action to mitigate potential risks. If any wallet connections were made or credentials were entered, disconnect the wallet from all dApps via the wallet settings and revoke any suspicious token approvals using a blockchain explorer or a trusted revocation tool. Scan the device used to access the site with up-to-date security software to detect and remove any malware. Monitor connected accounts and wallets for unauthorized transactions, and consider transferring assets to a new wallet if there is evidence of compromise. Report the domain to relevant security teams, such as the Aptos Foundation or Netlify's abuse team, to aid in takedown efforts. Always verify the authenticity of a service by cross-referencing official communications from the legitimate platform, such as Aptos' verified social media channels or official documentation, before interacting with any domain claiming to offer .apt name services.