Is imtokencn.top a scam? TrustSniffer's high-risk assessment: 24/100

Overview

This is a newly established Chinese-language website whose homepage carries the title "别哥号铺", which reads as the name of an account or "number" storefront. It presents a single short landing page with no discernible product catalogue, company profile or published business model beyond that storefront-style branding. Its apparent purpose is the sale or brokerage of online accounts or related digital goods, though the page content supplied is too thin to confirm the exact offering.

Scam/Impersonation Risk

This is the decisive area of concern. The domain is currently flagged by external reputation sources, and the signals converge on a confirmed blacklist-level warning: several independent scanners return malicious or suspicious determinations, and the domain is associated with known phishing activity. Because the domain was registered only weeks ago, there is no operating history to dilute these detections or to suggest a false positive. The homepage offers no corporate identity, so the reputational hits cannot be attributed to a legitimate, accountable operator. The sandboxed visit showed no outbound data submission, wallet-connection prompts, clipboard tampering, hidden forms or cloaking. That absence does not offset the external detections, because a page that is benign on first load can be switched to a malicious payload later. No conflicting legal identities were observed, and the concern rests on the blacklist hit rather than on identity inconsistency. Evidence:

• Homepage and domain-level reputation: multiple external scanners flag the domain (one malicious and two suspicious verdicts), and a blacklist-level listing is confirmed.
• Domain registration: registered 2026-09-13 through Dynadot LLC, about 0.1 years (roughly 38 days) old, with registration running to 2027-09-13.
• Web-archive depth: only 2 archive snapshots, both captured on 2026-09-13 (1 year tracked), so there is no prior history.
• Homepage behaviour: three sandbox runs returned stable HTTP 200 responses with no external requests, no external form posts and no console errors.

Regulatory Verification Notes

The evidence contains no licence, registration number, legal-entity name or regulator reference for this site, and on-page disclosure remains unclear. Real-world operator identity has not been independently established, so any identity the site implies cannot be treated as confirmed. No third-party broker or regulatory database matched the site, and this note records only that no corroborating record exists. A missing licence is a verification gap and is not by itself proof of wrongdoing. Here, however, it sits alongside the confirmed blacklist-level warning and gives no mitigating assurance. The site's encryption is a baseline control that scammers can obtain as easily as legitimate operators. Evidence:

• Hosting: served from AS25820 (IT7 Networks Inc, Canada, ARIN registry).
• Transport security: TLS certificate issued by YR2 at the domain-validated (DV) level, valid to 2026-12-12 (about 51 days remaining). DV validates only domain control and says nothing about the operator.
• Homepage: no company name, licence number or regulator reference was found in the captured page content.

What to Verify Next

No sensitive interaction should be started until the operator is identified through channels independent of the site. Any claimed company name, licence or regulator should be checked in the relevant official registry, entered manually and not through links on the site. The official support or contact channels should be confirmed through an independent, offline route. If the site claims to represent or resell a known brand or service, the brand owner should confirm that through its own official website. The domain's reputation status should be rechecked before any further engagement. The listings may have been triggered by compromise or abuse rather than by the owner's intent, and the evidence does not currently show that. Evidence:

• Domain age: the domain was registered in 2026 and has only two archive captures, so there is no long-term track record for an independent party to cite.
• Homepage: no verifiable corporate identity or registry reference is published for cross-checking.
• Reputation: the blacklist-level listing is current and should be rechecked before any engagement.

Summary Verdict

The available evidence supports a clearly cautionary, high-risk posture for this website. A very young domain, no verifiable operator and a confirmed external blacklist-level warning together outweigh the benign behaviour observed during the sandboxed visit. Legitimacy cannot be inferred from the evidence, and the site should be treated as unreliable.

Infrastructure Integrity

The site is hosted on a single address within the IT7 Networks hosting network in Canada, with no CDN or WAF in front of it and the origin directly exposed. No protective infrastructure is present to act as a mitigating factor. Several unconfirmed DNS heuristics point to a short-lived or disposable setup: fast-flux-like resolution, low record lifetimes without a CDN, a geography and registry mismatch, and a sparse subdomain footprint for a young domain. These are indicative only and carry no weight as confirmed risks, but they are consistent with the broader cautionary picture.

Closing Assessment

Use of this site should be limited to read-only viewing. Logins, credential entry and any payment or financial interaction should be avoided, and nothing should be downloaded from it until its reputation status is cleared and its operator is independently identified.