imtokec[.]com[.]cn

imtokec.com.cn has been confirmed as an active brand impersonation scam targeting OKX users. Security analysts flagged this domain for mimicking the OKX cryptocurrency exchange interface to deceive visitors into revealing login credentials or initiating unauthorized transactions. The threat involves fraudulent replication of a legitimate crypto platform, aiming to harvest sensitive financial data or directly siphon crypto assets via malicious drainer scripts. This domain was flagged based on multiple technical indicators. imtokec.com.cn was registered on March 25, 2026, through Dynadot Inc., resolving to IP 154.206.139.78 with an SSL certificate issued by Let's Encrypt. At the time of analysis, VirusTotal reported zero detections (14/95 engines) and no confirmed presence on major blocklists. The domain’s recent creation and lack of historical reputation raise immediate concerns about its legitimacy. Organizations and individuals should treat imtokec.com.cn as a confirmed threat to cryptocurrency assets and account security. To mitigate risk, block access to the domain at the network and endpoint levels. Never enter login details or crypto wallet information on this site. Report the domain to your security team and cryptocurrency platform. Use hardware wallets and enable multi-factor authentication (MFA) on legitimate exchanges like OKX to reduce exposure from impersonation scams.