mtcken[.]cc

This domain, mtcken.cc, is actively engaged in cryptocurrency wallet phishing, specifically targeting users of the imToken wallet for Ethereum and Bitcoin. Analysis indicates the domain is designed to mimic legitimate wallet services, likely deploying crypto drainer scripts or fake login portals to harvest credentials and private keys. The domain remains operational as of the latest verification, posing an ongoing threat to users unaware of the impersonation. Infrastructure analysis reveals the following technical indicators: the domain was registered on July 04, 2026, through Hefei Juming Network Technology Co., Ltd., a registrar frequently associated with malicious domains. It currently resolves to the IP address 104.21.1.157, which may host additional phishing or malware distribution infrastructure. VirusTotal reports that 16 of 95 security vendors have flagged mtcken.cc as malicious, a detection rate of 16.8%. The page title explicitly impersonates imToken, displaying "imToken | Ethereum & Bitcoin Wallet" to deceive users into interacting with the fraudulent interface. No legitimate trust scores or blocklist entries from major threat intelligence platforms were observed, further confirming its malicious intent. Current status indicates the domain is still active and resolving to the aforementioned IP address. Users and organizations are advised to implement immediate mitigations, including blocking the domain and IP at the network perimeter, updating endpoint protection signatures to include mtcken.cc, and conducting internal sweeps for any indicators of compromise. Security teams should monitor for connections to 104.21.1.157 or DNS queries for mtcken.cc, as these may indicate successful phishing attempts or credential theft. Affected users should revoke any permissions granted to suspicious wallet applications and rotate private keys stored on potentially compromised devices. Proactive threat hunting is recommended to identify and neutralize any lingering access derived from this phishing campaign.