# imtokens-dapp.com — SUSPICIOUS

> PhishDestroy identifies imtokens-dapp.com as brand impersonation scam with 0/95 VirusTotal detections targeting OKX users. Act now to block access.

## Summary
PhishDestroy identifies imtokens-dapp.com as an active brand impersonation campaign impersonating the OKX cryptocurrency exchange. The domain leverages visual and textual cues—such as the inclusion of 'imtoken' and 'dapp' in the label—to appear legitimate to unsuspecting users. This site is designed to deceive visitors into connecting cryptocurrency wallets or entering login credentials, resulting in asset theft or account compromise. The threat is exacerbated by the domain's misleading resemblance to genuine OKX branding and ecosystem tools, making it particularly effective in social engineering attacks.  The domain imtokens-dapp.com was registered through TuringSign Inc. d/b/a Cosmotown on March 21, 2026, and currently resolves to IP address 191.214.176.178. It employs a valid Let's Encrypt SSL certificate to enhance credibility and has evaded detection with a clean 0/95 VirusTotal score as of the latest scan. While VirusTotal coverage is not exhaustive, the absence of detections underscores the need for proactive blocking and user vigilance. The domain remains under active investigation, with additional indicators likely to emerge as threat intelligence communities analyze its behavior.  Users who accessed imtokens-dapp.com should immediately disconnect any connected cryptocurrency wallets, revoke any permissions granted through wallet connect interfaces, and run a security scan using reputable antivirus or anti-malware software. If login credentials were entered, change passwords on all related accounts—especially on OKX—and enable multi-factor authentication. Report the domain to your security team or platform abuse channels (e.g., via Google Safe Browsing or PhishDestroy’s AI threat tracker) to aid broader mitigation efforts. Avoid any interaction with this domain and alert others in your organization or community to prevent further exposure.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Target brand: OKX

## Domain Intelligence
- Registered: 2026-03-21 16:19:43
- Registrar: TuringSign Inc. d/b/a Cosmotown
- IP: 191.214.176.178

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/97658c47-2595-4255-8871-066ee407cc75
- PhishDestroy: https://phishdestroy.io/domain/imtokens-dapp.com/
- LLM endpoint: https://phishdestroy.io/domain/imtokens-dapp.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/imtokens-dapp.com/
Last updated: 2026-03-23