cn-imtokenapp[.]com

PhishDestroy identifies cn-imtokenapp.com as an active brand impersonation scam targeting OKX users. The domain is currently under investigation but remains operational with confirmed malicious intent. This site mimics legitimate OKX services to deceive visitors into connecting cryptocurrency wallets or entering sensitive credentials, posing significant financial risk to users.

This domain was flagged by 4 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by antivirus engines. It was registered through Dominet (HK) Limited on October 08, 2025, and resolves to IP address 160.124.196.132. The SSL certificate, issued by Let’s Encrypt, adds a false appearance of legitimacy. At the time of writing, the domain remains unlisted on major blocklists, and its trust scores are critically low based on its recent creation and lack of legitimate infrastructure.

Given the domain’s active status, impersonation of a major cryptocurrency brand, and absence of widespread detection, users are strongly advised to avoid visiting cn-imtokenapp.com or interacting with any links associated with it. If you have recently visited this site or entered wallet credentials, disconnect your wallet from the internet immediately and transfer funds to a secure, offline wallet. Report the domain to your antivirus provider and consider notifying OKX’s official support channels to aid in takedown efforts. Monitor your wallet and transaction history for any unauthorized activity.