Security Scan Report: xiazhai.imtoken.my.id

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 3 countries across 14 domains to perform 86 HTTP transactions. The main domain is imtoken.my.id and was registered 1 month ago.

Submitted URL: https://xiazhai.imtoken.my.id/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unofficial look-alike domain (24 days old) claiming to be imToken's official wallet site, mirroring the real brand's assets; no password or payment fields, only an external email signup. Treat as brand impersonation, not as official imToken.

Risk Factors (5)
Brand impersonation of imToken on a non-official domain (imtoken.my.id instead of token.im)
Very new domain (24 days) hosting a claim of being the official wallet website
Unranked domain, unlike the legitimate brand it claims to be
Email-harvesting form submitting to an external marketing platform rather than an own-domain endpoint
Site reuses genuine imToken third-party infrastructure, indicating asset mirroring
Domain age information unavailable

Details

Page Title

imToken 官网|以太坊和比特币区块链钱包

Scan Type

public

Domain Name Analysis

The domain 'xiazhai.imtoken.my.id' uses the Indonesian country-code top-level domain (.my.id) and includes subdomain 'xiazhai'. The second-level label 'imtoken' is 7 characters long holding three vowels versus four consonants. Breaking it apart gives 2 words: im, token. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xiazhai.imtoken.my.id/

Page Load Overview

3.09s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-cn
Text Length:836 chars
Detector Agreement:40%

Website Classification

Primary Category

cryptocurrency blockchain82% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
82%
technology software
62%
documentation technical
61%
finance banking
57%
blog personal website
54%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2391.110.236.210United States
AS40065CNSERVERS LLC
3142.250.154.97Google · CDNUnited States
AS15169Google LLC
3111.45.3.198China
AS9808China Mobile Communications Group Co., Ltd.
3142.251.20.101Google · CDNUnited States
AS15169Google LLC
336.248.16.48Xiamen, Fujian, China
AS4837CHINA UNICOM China169 Backbone
352.222.136.119Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
318.66.137.186Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
3216.198.53.6Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
3142.251.127.157Google · CDNUnited States
AS15169Google LLC
8622--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T170927473EC06FA2A15135CDEE4BAAF2CD0D7962ADA649C45B2FC85C953C1EDA0F07841

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:MT4KtyDHQgxJM1LY1/NMIoNfmbm3yofaXtAvTPjuMCCLmMQ7gC7Imygsy5:MT4K0DHQgxJM1LYdNMIoNfmbm3yofaXd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:21244:ghbIADEAGE4FYDECI3LiqFgyQaAVowEPwFEGQSQoVpQzkkBaAAwI0trAMOIc45AMMCCEBgHkwC2PkQ1iAKCcC8xCFIbkxEWR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffff000000
Perceptual Hash:aced4392921ac3ed
Difference Hash:39221235244371d5
Wavelet Hash:fdfbc3dfdf000000
Color Hash:#7740bf

Scan History

Scan history not available

Unable to load historical scan data