Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
imtokens[.]co
“imToken official website|Ethereum and Bitcoin blockchain wallet”
Kaydedilmiş gözlem
Gözlemlenen başlık farkı
Kanıt özeti
Analysis confirms that imtokens.co is an active generic phishing site targeting cryptocurrency users. The domain was registered on February 21, 2026 and currently resolves to IP 20.247.100.105, which geolocates to Hong Kong and is announced by AS8075, a Microsoft Corporation network. The hosting server presents an HTTP 200 response and serves a page whose title reads "imToken official website|Ethereum and Bitcoin blockchain wallet," indicating an attempt to masquerade as a legitimate wallet service. The site employs Ant Design and Nginx, with Clicky analytics detected, and is protected by a certificate from a publicly trusted certificate authority. Security telemetry shows 22 of 93 VirusTotal scanners flag the domain, and it appears on three external phishing blocklists. The domain is listed by multiple blocklist providers and has a Gridinsoft trust score of 0/100. Defenders should block the domain and its resolved IP at the network perimeter, monitor DNS queries for the listed CloudNS nameservers, and add the host to local threat intel feeds. Ongoing observation is advised to detect any changes in hosting or content, as current evidence is limited to infrastructure and title metadata.
Gönderilen kanıt anlık görüntüsü
- Gönderildi
- Kayıt defteri kayıtları
- 1
- Vaka kimliği
PD-20260204-14E682- Yakalanan sayfa başlığı
- imToken official website|Ethereum and Bitcoin blockchain wallet
- PDF belgesi
- PDF kanıtı
Hukuki dayanak
Kanıtın tam metni
Acceptable Use Policy (AUP): The domain imtokens.co is engaged in phishing activities, which directly contravenes the AUP prohibiting illegal activities, fraud, and deception.
Terms of Service (TOS): The continued operation of this domain constitutes a violation of the TOS, which reserves the right to suspend or terminate services for any activities that promote fraud or phishing.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which is relevant as phishing schemes often involve unauthorized data access.
Wire Fraud Statute: This law makes it illegal to use electronic communications to commit fraud, which applies to the fraudulent activities conducted via imtokens.co.
Anti-Phishing Act: This legislation specifically targets phishing schemes and imposes penalties for those who engage in such deceptive practices.
Regulatory Note: Failure to take immediate action against the domain imtokens.co may result in liability for facilitating illegal activities and could lead to regulatory scrutiny or legal action. Compliance with your AUP and TOS is imperative to avoid potential repercussions.
Data Coverage
Ağ Güvenliği İstihbaratı
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | imtokens.co |
malicious | Sinkholed |
| OpenDNS | imtokens.co |
phishing | Phishing Block |
| Hagezi Threat Feed | imtokens.co |
malicious | Sinkholed |
| DigiCert UltraDNS | imtokens.co |
malicious | Sinkholed |
| DNS4EU | imtokens.co |
malicious | Sinkholed |
| Quad9 DNS | imtokens.co |
malicious | Sinkholed |
Tehdit Müdahale Pipeline
Engelleme listesi kapsamı
10 izlenen harici kaynak · kayıtlı anlık görüntü 13.08.2026
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of imtokens.co · checked Mar 1, 2026
Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin