Security Scan Report: imtoken.hk.cn

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 48 HTTP transactions. The main domain is imtoken.hk.cn and was registered 1 month ago.

Submitted URL: https://imtoken.hk.cn/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Copycat imToken wallet site on a 38-day-old lookalike subdomain, flagged by a high-severity phishing IDS signature. No credential form seen, but do not download software or enter seed phrases here.

Risk Factors (5)
Impersonation of the imToken crypto wallet brand on a non-official, lookalike subdomain
High-severity IDS phishing landing-page signature triggered
Domain only 38 days old and unranked in Cisco Umbrella
Crypto-wallet theme is a common lure for seed-phrase and download-based theft
Opaque corporate attribution in the footer
Domain age information unavailable

Details

Page Title

imToken | Ethereum & Bitcoin Blockchain Wallet

Scan Type

public

Domain Name Analysis

Domain 'imtoken.hk.cn' uses the Chinese country-code top-level domain (.hk.cn) with no subdomain. Its registrable label 'imtoken' stretches across 7 characters containing three vowels alongside 4 consonants. Word splitting yields two words: im, token. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://imtoken.hk.cn/

Page Load Overview

0.94s
Total Load Time
378 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,878 chars
Detector Agreement:60%

Website Classification

Primary Category

cryptocurrency blockchain82% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
82%
technology software
36%
documentation technical
35%
cryptocurrency
30%
finance banking
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
24188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
482--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DEC2003198F4107B00A7D1C1ABB2FB6ABEC1A513D7569908B7FD4BC45F92E99CE23058

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:xeCrUBS3kWgUTgXOdiYu86nvJUPHfFqIoPYLz/Ol0pd:xeCrUBS3kbii99vJ+HfFOY/Oepd

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:26137:KUuGEEJBxOQBUIKoVAlCACUKR0ppOCJRISAQjYJjgKi3S2KhWoAZBQsIQIEsgbSFhKwaKog9AMYWCSGsgAjJA6AkUIEYkIJK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffbffffff0000
Perceptual Hash:a8ed43969269ed2c
Difference Hash:2b231217362751d5
Wavelet Hash:f1ffc3c7dbc30000
Color Hash:#1f5393

Scan History

Scan history not available

Unable to load historical scan data