dapp-token-im[.]com

This domain, dapp-token-im.com, poses a targeted brand impersonation threat against Across protocol users by masquerading as a legitimate cryptocurrency wallet interface. Analysis indicates the site is designed to deceive visitors into entering sensitive wallet credentials or approving malicious transactions, likely functioning as a crypto drainer. The infrastructure mimics trusted wallet services, specifically replicating the imToken brand in its page title, which increases the likelihood of successful social engineering attacks against users familiar with Ethereum and Bitcoin wallet interfaces. Infrastructure analysis reveals concrete indicators of malicious activity. The domain was registered on October 13, 2025, through Dominet (HK) Limited, a registrar frequently associated with high-risk domains. It resolves to the IP address 172.66.151.95 and is currently flagged by 4 out of 95 security vendors on VirusTotal. Additionally, the domain appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft, further corroborating its fraudulent nature. The combination of recent registration, low detection thresholds, and impersonation of a well-known wallet brand underscores the elevated risk level. Users who visited dapp-token-im.com should immediately revoke any wallet permissions granted during the interaction and transfer assets to a new, secure wallet. It is critical to review all connected applications and smart contract approvals in the compromised wallet for unauthorized access. Affected individuals should monitor their transaction history for signs of unauthorized transfers and report the incident to relevant blockchain security platforms. To prevent future exposure, users are advised to verify domain authenticity through official channels before interacting with any cryptocurrency-related websites, particularly those involving wallet connections or transaction approvals.