im-token-app[.]net

The domain im-token-app.net has been identified as engaging in brand impersonation activities, specifically targeting the OKX brand. This domain represents an elevated risk to users due to its potential to deceive them into divulging sensitive information or engaging with fraudulent transactions under the guise of a legitimate brand. Although currently offline, the domain has the characteristics of a phishing site designed to mimic the appearance of a legitimate service associated with OKX.

The domain im-token-app.net was registered through Dominet (HK) Limited and first created on March 19, 2026. Security analysis on VirusTotal indicates that 17 out of 95 security vendors have flagged this domain, corroborating its malicious intent. The domain's infrastructure includes technologies such as Nginx, HSTS, and HTTP/3, which are commonly used to enhance site security, potentially adding a layer of deception. The site was identified to have resolved to the IP address 177.211.126.5 and has been included on at least one security blocklist. The SSL certificate for the domain was issued by TrustAsia Technologies, Inc., a detail that might have been used to falsely assure users of its authenticity.

Users who have visited this domain should immediately conduct thorough scans of their devices to ensure no sensitive information has been compromised. It is recommended to monitor financial accounts for any unauthorized activities and change passwords associated with any accounts that might have been affected. Users should also be aware of further phishing attempts, as their information may have been harvested and could be used in future attacks. Employing robust security measures such as multi-factor authentication can provide an additional layer of protection against potential threats like these.