imootken.top
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of imootken.top
The website appears to present itself as a cryptocurrency wallet platform branded as imToken, promoting Ethereum, Bitcoin, and other token support along with wallet downloads and token-swapping features. Its page title, metadata, and screenshot all describe a digital-asset wallet service aimed at users seeking non-custodial crypto storage and related Web3 functionality.
Based on the domain name and visible content, this does not appear to be an official corporate domain for a major financial or technology provider. Instead, it may be attempting to mimic the branding of an established crypto-wallet service while using an unrelated .top domain. The site is hosted behind a content-delivery and reverse-proxy network and includes references to blockchain-related services and wallet infrastructure commonly associated with cryptocurrency applications.
Safety Assessment for imootken.top
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. The page also appears to imitate the imToken wallet brand while using an unrelated domain, which may be consistent with a look-alike phishing setup intended to persuade visitors to download software or interact with wallet-related content.
A malware scan also reported malicious findings on two site paths and identified two flagged external references, although those detections appear more limited than the broader phishing consensus. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still worth noting. The domain is relatively new, not ranked for notable traffic, and presents financial-service content, all of which can increase caution when combined with multi-engine phishing detections.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure on IP address 172.67.146.112, with hosting geolocated to Canada. Its nameservers also point to Cloudflare, suggesting the site is using CDN and proxy services that can obscure origin hosting details. The certificate was valid at the time of this scan, which supports encrypted transport but does not by itself verify legitimacy.
From a domain-security perspective, the domain is relatively new at 197 days old, uses an unsigned DNSSEC configuration, and is registered through Gname.com Pte. Ltd. The combination of a young domain, phishing-related detections, and wallet-download functionality may be a concern, particularly because cryptocurrency-themed phishing pages often rely on convincing branding rather than obvious technical flaws.
Share your experience with this website. Was it safe? Did you encounter any issues?