Security Scan Report: www.imtoke.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 3 countries across 11 domains to perform 80 HTTP transactions. The main domain is imtoke.net and was registered 6 days ago.

Submitted URL: https://www.imtoke.net/security

AI Security Verdict

High Risk

Confidence: 87%

8
Risk Score

Lookalike of imToken (imtoke.net, 3 days old) claiming in its meta tags and footer to be the official imToken website; clear brand impersonation, though no credential or payment form was found. Treat the wallet download as untrustworthy.

Risk Factors (5)
Typosquatted lookalike domain (imtoke.net vs. imToken/token.im)
Explicit claim to be the official imToken website in meta tags on a non-official domain
Domain registered 3 days ago (critical-age registration)
Unauthorized use of the imToken brand, content and corporate copyright notice
No ranking or reputation to substantiate brand ownership
Domain age information unavailable

Details

Page Title

Multi-chain Wallet | Supports Bitcoin, Ethereum, BNB Chain, Tron, Polkadot, Polygon, Litecoin, Bitcoin Cash, Cosmos, Optimism, Filecoin, Arbitrum, EOS, Kusama, Tezos, Nervos wallets | imToken

Scan Type

public

Domain Name Analysis

The domain name 'www.imtoke.net' uses the network infrastructure generic top-level domain (.net); it also runs on subdomain 'www'. Count 6 characters in 'imtoke' with 3 vowels and 3 consonants. It segments into two words: im, toke. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.imtoke.net/security

Page Load Overview

75.09s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:57%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:2,330 chars
Detector Agreement:80%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

cryptocurrency blockchain68% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
68%
corporate
35%
technology software
30%
cryptocurrency
30%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.127.139Google · CDNUnited States
AS15169Google LLC
352.222.136.107Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
336.248.16.48Xiamen, Fujian, China
AS4837CHINA UNICOM China169 Backbone
3111.45.11.83China
AS9808China Mobile Communications Group Co., Ltd.
3142.251.14.97Google · CDNUnited States
AS15169Google LLC
3120.52.95.244China
AS133119China Unicom IP network
3103.235.46.96Hong Kong
AS55967Beijing Baidu Netcom Science and Technology Co., Ltd.
3216.239.32.36Google · CDNUnited States
AS15169Google LLC
3142.251.127.154Google · CDNUnited States
AS15169Google LLC
8025--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16F33F773DA0AA61318093EEFD9F67B4DD045D06AC6125D99F2EC8ADC87CAF894D0361C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5tF/BmPQ0AkMQqe3ueb/MgKEEmcUbPN8lf:5tF/F0AxtiueblKjmciEf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:53318:GBKYWAqrQKFIQOdiMXSCFcrMaIByqJCIJUQHiw3IMygDUkasESLAKAENgGwNEiQEDAEAYCoArTAsIDEUFsEIsIjOxEKgBKOU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdd3c3c7f3e7e7d7
Perceptual Hash:e46dc9d39a323a49
Difference Hash:2b16172d270c0e26
Wavelet Hash:bc828381c3e7e793
Color Hash:#d279c1

Other Hashes

Crop Resistant:2b16172d270c0e26

Scan History

Scan history not available

Unable to load historical scan data