imtokenp[.]com[.]cn

PhishDestroy identifies imtokenp.com.cn as an active phishing domain impersonating OKX, a major cryptocurrency exchange. The site mimics imToken’s official page to trick users into divulging credentials or transferring funds. The threat is real: the domain’s page title explicitly references imToken’s services and OKX-related blockchain asset solutions, leveraging brand trust to deceive visitors.

This domain was flagged through verified threat intelligence with precise technical indicators. It registered with 温州市中网计算机技术服务有限公司, went live on May 03, 2026, and uses a Let’s Encrypt SSL certificate. Crucially, VirusTotal currently shows 0 detections out of 95 security engines as of the latest scan, allowing the site to evade detection by common antivirus tools. The domain resolves to IP address 45.192.219.13, a known hosting infrastructure in the region commonly abused for low-sophistication attacks.

If you visited imtokenp.com.cn, immediately disconnect from the internet and scan your device using updated antivirus software. Do not enter any login credentials, wallet addresses, or private keys on the site. Change passwords for OKX and imToken accounts if used on this domain. Report the domain to your security team and block it at the network level. Monitor financial accounts for unauthorized transactions and consider revoking any API keys exposed during the visit.