# Phishing sites impersonating Imtoken

PhishDestroy has recorded 95 phishing domains impersonating Imtoken since 2025-08-25, 11 of them in the last 30 days. The most used registrars are Gname.com and West263; the most common TLDs are .com and .cn. Open Imtoken only from its official app or a saved bookmark.

95Domains, all time

11Last 30 days

63Online at last check

10Confirmed takedowns

## New domains in the last 90 days

Imtoken phishing domains detected per day: 26 from 2026-07-25 to 2026-10-22; peak 3.

## How to tell a fake Imtoken site

Words most often added to the brand in reported domains: pilot, meiqiea, cdn, usdt, wallet, tokenim, imtokens, tokenpocket, harmonyblogs, imtokenan.
- Type the address yourself or use a bookmark; phishing links for Imtoken arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Imtoken will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Imtoken phishing domains

The 50 most recently detected domains impersonating Imtoken
Domain | First detected | Status at last check | Registrar | 
[tokanim-cdn16-hk16.club](https://phishdestroy.io/domain/tokanim-cdn16-hk16.club/) | 2026-10-22 | Online | Dynadot | 
[tokinix-cdn21-hk21.club](https://phishdestroy.io/domain/tokinix-cdn21-hk21.club/) | 2026-10-22 | Online | Dynadot | 
[tokevim-cdn26-hk26.club](https://phishdestroy.io/domain/tokevim-cdn26-hk26.club/) | 2026-10-19 | Online | Dynadot | 
[hg027.cc](https://phishdestroy.io/domain/hg027.cc/) | 2026-10-17 | Online | GoDaddy.com | 
[lmtoken.wchmn.com](https://phishdestroy.io/domain/lmtoken.wchmn.com/) | 2026-10-13 | Online | Metaregistrar | 
[tokenim-hk-cdn.pics](https://phishdestroy.io/domain/tokenim-hk-cdn.pics/) | 2026-09-27 | Offline | DYNADOT | 
[tokenim-hk-cdn.beauty](https://phishdestroy.io/domain/tokenim-hk-cdn.beauty/) | 2026-09-27 | Offline | DYNADOT | 
[im-tok8e1k.info](https://phishdestroy.io/domain/im-tok8e1k.info/) | 2026-09-25 | Online | Name.com | 
[harmonyblogs.com](https://phishdestroy.io/domain/harmonyblogs.com/) | 2026-09-22 | Online | Dynadot | 
[orasonline.com](https://phishdestroy.io/domain/orasonline.com/) | 2026-09-22 | Online | NAMECHEAP | 
[m.harmonyblogs.com](https://phishdestroy.io/domain/m.harmonyblogs.com/) | 2026-09-22 | Online | Dynadot | 
[imtoken-wallets.com.cn](https://phishdestroy.io/domain/imtoken-wallets.com.cn/) | 2026-09-21 | Online | 成都西维数码科技有限公司 | 
[tokenim.trade](https://phishdestroy.io/domain/tokenim.trade/) | 2026-09-19 | Online | Cloudflare | 
[im-tokens.lat](https://phishdestroy.io/domain/im-tokens.lat/) | 2026-09-14 | Offline | NameSilo | 
[applup.com](https://phishdestroy.io/domain/applup.com/) | 2026-09-12 | Online | Gname.com | 
[tokenprcket.pro](https://phishdestroy.io/domain/tokenprcket.pro/) | 2026-08-28 | Offline | Spaceship | 
[9kcnjkxr.fmwqzoq.com](https://phishdestroy.io/domain/9kcnjkxr.fmwqzoq.com/) | 2026-08-23 | Offline | Cloud DNS | 
[imtokenoa.com](https://phishdestroy.io/domain/imtokenoa.com/) | 2026-08-23 | Offline | Ultahost | 
[zer2aypv.flvhzvq.com](https://phishdestroy.io/domain/zer2aypv.flvhzvq.com/) | 2026-08-20 | Offline | Cloud DNS | 
[m.imwwallet.shop](https://phishdestroy.io/domain/m.imwwallet.shop/) | 2026-08-18 | Online | West263 | 
[tokeimng.fit](https://phishdestroy.io/domain/tokeimng.fit/) | 2026-08-13 | Offline | Gname.com | 
[rnohphmo.imtcken.com](https://phishdestroy.io/domain/rnohphmo.imtcken.com/) | 2026-08-03 | Offline | Cloud DNS | 
[eye6269.com](https://phishdestroy.io/domain/eye6269.com/) | 2026-07-28 | Online | West263 | 
[hndsnf.cn](https://phishdestroy.io/domain/hndsnf.cn/) | 2026-07-27 | Online | WEST263 | 
[ertongeq.com](https://phishdestroy.io/domain/ertongeq.com/) | 2026-07-27 | Online | West263 | 
[gznywh.com](https://phishdestroy.io/domain/gznywh.com/) | 2026-07-27 | Online | Dynadot | 
[imtekcen.com](https://phishdestroy.io/domain/imtekcen.com/) | 2026-07-16 | Online | Guangdong JinWanBang Technology Investme | 
[hotelsjobsearch.com](https://phishdestroy.io/domain/hotelsjobsearch.com/) | 2026-07-12 | Online | NameCheap | 
[m.balstarhealth.com](https://phishdestroy.io/domain/m.balstarhealth.com/) | 2026-07-09 | Online | Gname.com | 
[imokentv.com](https://phishdestroy.io/domain/imokentv.com/) | 2026-06-27 | Offline | NameSilo | 
[m.happymachine.cn](https://phishdestroy.io/domain/m.happymachine.cn/) | 2026-06-24 | Online | Web Commerce Communications | 
[wzjsxx.com](https://phishdestroy.io/domain/wzjsxx.com/) | 2026-06-09 | Online | West263 | 
[imtoken.click](https://phishdestroy.io/domain/imtoken.click/) | 2026-05-21 | Online | NameSilo | 
[imtokende.com](https://phishdestroy.io/domain/imtokende.com/) | 2026-05-15 | Offline | Cloudflare | 
[hnkxyq.com](https://phishdestroy.io/domain/hnkxyq.com/) | 2026-05-01 | Online | West263 | 
[imtooken.im](https://phishdestroy.io/domain/imtooken.im/) | 2026-05-01 | Taken down | Redacted | 
[zdsyt.com](https://phishdestroy.io/domain/zdsyt.com/) | 2026-04-30 | Online | West263 | 
[goodmidi.top](https://phishdestroy.io/domain/goodmidi.top/) | 2026-04-30 | Taken down | Gname.com | 
[socialcmsbuzz.com](https://phishdestroy.io/domain/socialcmsbuzz.com/) | 2026-04-30 | Online | Gname.com | 
[imtoken.rip](https://phishdestroy.io/domain/imtoken.rip/) | 2026-04-29 | Offline | Dynadot | 
[imtokew.vip](https://phishdestroy.io/domain/imtokew.vip/) | 2026-04-25 | Taken down | Dynadot | 
[kaias.org](https://phishdestroy.io/domain/kaias.org/) | 2026-04-25 | Online | NameSilo | 
[imtokencn-web.com](https://phishdestroy.io/domain/imtokencn-web.com/) | 2026-04-22 | Online | Cosmotown | 
[ktxp.httvd.com](https://phishdestroy.io/domain/ktxp.httvd.com/) | 2026-04-21 | Offline | West263 | 
[imtokenapps.net](https://phishdestroy.io/domain/imtokenapps.net/) | 2026-04-15 | Online | Dominet (HK) | 
[imtoken-login.com](https://phishdestroy.io/domain/imtoken-login.com/) | 2026-04-15 | Online | Dominet (HK) | 
[imtokendefi-apps.net](https://phishdestroy.io/domain/imtokendefi-apps.net/) | 2026-04-15 | Online | Dominet (HK) | 
[tnm.meiqiea.com](https://phishdestroy.io/domain/tnm.meiqiea.com/) | 2026-04-10 | Online | West263 | 
[gasghv.meiqiea.com](https://phishdestroy.io/domain/gasghv.meiqiea.com/) | 2026-04-10 | Online | West263 | 
[adk8wm2.meiqiea.com](https://phishdestroy.io/domain/adk8wm2.meiqiea.com/) | 2026-04-10 | Online | West263 | 

[All 95 Imtoken reports](https://phishdestroy.io/domain/?brand=Imtoken)

## Where they are registered and hosted

### Registrars

- [Gname.com](https://phishdestroy.io/registrar/name-com/)31
- [West263](https://phishdestroy.io/registrar/west263-international-limited/)14
- [Dynadot](https://phishdestroy.io/registrar/dynadot/)11
- [Dominet (HK)](https://phishdestroy.io/registrar/dominet/)4
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)4
- Cloudflare3
- Cloud DNS3
- [WEST263](https://phishdestroy.io/registrar/west263-international-limited/)2

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)58
- [.cn](https://phishdestroy.io/tld/cn/)7
- [.top](https://phishdestroy.io/tld/top/)3
- [.club](https://phishdestroy.io/tld/club/)3
- [.fit](https://phishdestroy.io/tld/fit/)2
- [.net](https://phishdestroy.io/tld/net/)2
- [.invalid](https://phishdestroy.io/tld/invalid/)1
- [.icu](https://phishdestroy.io/tld/icu/)1

### Hosting networks

- Cloudflare, Inc.13
- CLOUDFLARENET, US12
- ACE7
- CNSERVERS LLC6
- Wen ZhangYu4
- SH2206-AP4
- Cloudie Limited3
- CLOUDIE-AS-AP Cloudie Limited, HK2

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/)
- [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Imtoken; share of all PhishDestroy reports: 0.04%.

Canonical: https://phishdestroy.io/brand/imtoken/