e7v11h1.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of e7v11h1.com
The domain e7v11h1.com appears to host a website presenting itself as the “imToken official website,” with branding, wallet-themed graphics, and download buttons for mobile applications. Based on the page title, screenshot, and on-page text, the site appears to promote a cryptocurrency wallet focused on Ethereum, Bitcoin, and other digital assets, and it encourages visitors to download an app or APK file.
The domain name itself does not appear to match the imToken brand and instead uses a short, random-looking alphanumeric format. That mismatch, combined with the site's use of established wallet branding and claims about digital asset management, suggests the page may be attempting to attract users looking for a known cryptocurrency service rather than representing an independently branded platform.
Based on the available categories and page content, this site appears to fall within the cryptocurrency / financial-services space, but it may also be imitating a known wallet provider.
Safety Assessment for e7v11h1.com
Several scan signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with multiple detections describing phishing, malware, or other fraudulent behavior. In addition, multiple web-classification sources associated the site with phishing or newly registered website activity, while the page itself appears to use the branding of a known cryptocurrency wallet on a domain name that does not appear related to that brand.
The domain is also extremely new, at only 4 days old, and it is not ranked in major traffic listings. That combination can be consistent with short-lived phishing infrastructure. Although one malware scan reported no flagged files and no malicious external links at the time of inspection, that does not outweigh the broader multi-engine phishing consensus. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than content-based detections but still adds some caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid Let's Encrypt SSL certificate expiring in early November 2026 and is served over nginx from a Microsoft Azure cloud IP located in Hong Kong. A valid certificate helps encrypt traffic in transit, but it does not by itself verify that the operator or brand presentation is legitimate.
WHOIS data indicates the domain was registered very recently through Cloud DNS Ltd and uses Cloudns nameservers. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer. The combination of very recent registration, generic-looking domain naming, cloud hosting, and branding associated with a known crypto wallet may be consistent with disposable phishing infrastructure.
Share your experience with this website. Was it safe? Did you encounter any issues?