tplsutoken[.]com[.]cn

On July 25, 2026, tplsutoken.com.cn was identified as a fake TokenPocket Wallet website, impersonating the aptos brand. This domain was registered through 厦门易名科技股份有限公司 on February 21, 2026, and has since been taken offline. The domain's nameservers are ns1.judns.com, ns1.julydns.com, ns2.judns.com, and ns2.julydns.com. Analysis indicates that the domain resolves to the IP address 38.55.19.253, which is located in the United States and is part of the AS8796 FASTNET DATA INC network.

The domain does not have an SSL certificate, which may indicate a lack of secure communication. The page title found is 'TP钱包下载 - TokenPocket Wallet钱包官方网站', suggesting that the site was designed to mimic the official TokenPocket Wallet website. The domain has been flagged by PhishDestroy, MetaMask, and SEAL, and appears on three security blocklists. Gridinsoft has assigned this domain a trust score of 0/100, indicating a high level of distrust.

While the domain is currently offline, defenders should remain vigilant and ensure that the domain is blocked in their security systems to prevent any potential reactivation. The exact nature of the content and the specific mechanisms used for the crypto scam are not yet analyzed, but the associations with known blocklists and the low trust score provide strong evidence of its malicious intent. Defenders should also monitor related IP addresses and nameservers for any signs of similar activity.