{"report_id":"0e7b4c44-7453-409e-ac8e-ae62fb479baf","version":0,"status":"done","tags":[],"date":"2026-10-01T15:57:18Z","url":{"schema":"https","addr":"imtokeu.com.cn/","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"imtokeu.com.cn/","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"title":"imToken钱包官网 | 多链数字货币钱包平台","dom":{"size":19280,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (402)","md5":"83bd0a229ba85e0b951c799ecab931ad","sha1":"fdc66c8299077539962b9d726af433233a03f658","sha256":"e2bdfbeee3089e123b076f6ffdda1d79c01be70b3176f5c94e4f79266992ba7f","sha512":"9e82f499ad0f1e848140470e01c15caf224222dd4eda31b7680c1070f63428947588a97febb44a93d03b346b4b8f8e4435dfa8920f26ffa5a95116e8956c349c","ssdeep":"384:yLVGpXV/oc8GpX04hJB6xbsuxNMMTzapVzxW0e7Wq4T7kWscjo3LfvP52g2SvVOm:tpnp5axbsuxNMMTzapVVWl7p4XkWscj2","tlshash":"7882d67a94e47db3806745daa977938e3af0e847e4674900baf88bec4fc1d854d0354e","dom_hash":"domhash60bf5ff7f72a4fecefc90cf071f36def","first_seen":"2026-10-01T15:57:26.892812Z","last_seen":"2026-10-01T15:57:26.892812Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"imtokeu.com.cn/","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-05T15:57:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imtokeu.com.cn","ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-10-01T15:57:19.649655Z","last_seen":"2026-10-01T15:57:19.649655Z","alert_count":44,"request_count":11,"received_data":448672,"sent_data":5559,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"imtokeu.com.cn/","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c44ac9271d320de693c74198938e72f7","sha1":"4ee6d671c81446598b6c3848f76a9b96e616a8af","sha256":"844dbe7ff02ed9c19d7883395e72250284ff5c6217d0c447a400fa8f12a93547","sha512":"cf163fd0287fa492b6826d3e494c71072d014a10d2cccbd1373ef833fd15adf7831c13d12f6f7d3b480de0ac62e6cb310fa52f8d85441a1bbf3fa9ae1da49721","ssdeep":"","tlshash":"d031ae2d92a12d3398b336d566fb91e43b2110c3e093d8023b6ccbcd1f56a919dbb4c9","size":1468,"data":"","first_seen":"2026-09-09T21:34:37.259902Z","last_seen":"2026-10-01T15:57:26.907492Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"imtokeu.com.cn/logo.png","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.403Z","timestamp":1790870210403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"a9f-657e1d54d543f\"\r\naccept-ranges: bytes\r\ncontent-length: 2719\r\ncontent-type: image/png\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2719,"size_decoded":2949,"mime_type":"image/png","magic":"PNG image data, 111 x 20, 8-bit/color RGBA, non-interlaced","md5":"197ec51954ea32665d924a0c726704aa","sha1":"3a37ab2ab2bd1f9178eb6ba5207e3ac4f52f6a40","sha256":"9810f755db415409a6cb9497ca98a308c413ab4ac0945353034f89279a659312","sha512":"627b2024237aa396bc926f5e11ce6f733a2aa8d8588781fc86d5a811253beff25e4f400f70b4ad97c6dd13eb3d5d7ae1398703252800c622513affc7a534d1fb","ssdeep":"","tlshash":"df510a5d72248932c91b727a12c5d19af72208e851c795cc761dbae2c49361bcdbc2e2","first_seen":"2026-08-03T06:43:56.533308Z","last_seen":"2026-10-01T15:57:26.894799Z","times_seen":11,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/%E5%85%AC%E9%93%BE.svg","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.408Z","timestamp":1790870210408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /%E5%85%AC%E9%93%BE.svg HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"1194-657e1d54d543f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1600\r\ncontent-type: image/svg+xml\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4500,"size_decoded":1887,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a37a9f9f157732d20505e23849a5547d","sha1":"cfe870bf1afefda1eb6ee2dfdc519b6560c33a6c","sha256":"e5e0f4d25deb31b8b9e9dcba9391a25b6e76a914de63b77689333697a7948326","sha512":"fc6494ec8e0f674cb241034e23394eec0092667cf2e5fbf4912dfa6496ceb2d561aeceb4572b10c6035fcbf305aa7c8f988f429fa3db07c195637945dae01d3d","ssdeep":"48:AOz7g173USgW6YvTxerz01UDkOp/cTouiq3gWXepG3bgerTNHDyagMZOieqAO:p43U8xLOK7CQjNjyzMQieS","tlshash":"239120ec232d1ce9d85c9ac7b7089078305360fa9568ca4cd548be791929d6d3c3b9cf","first_seen":"2025-07-02T21:10:54.847975Z","last_seen":"2026-10-01T15:57:26.895616Z","times_seen":9,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/EVM%E5%85%BC%E5%AE%B9%E9%93%BE.svg","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.410Z","timestamp":1790870210410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /EVM%E5%85%BC%E5%AE%B9%E9%93%BE.svg HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"543-657e1d54d5057-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 488\r\ncontent-type: image/svg+xml\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1347,"size_decoded":773,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d5bcbed90e3a17aa0a18202ff15871f","sha1":"994840d472942f210542e70e22bf3bfcb76af371","sha256":"22abb2a3f944b1d773e417a23223386c7783f185b7e8f11c47e530f1dc8f577b","sha512":"b2280821c2aeb3f0c1d3b1c7f942988ed2a3a0de4d12f6d9e746c96ff72bb51269708d3c70f197259ac6da3dda5ef97dc7a397607b28a3ffd7f3040a901006de","ssdeep":"","tlshash":"672111a26298513ccb440f04e3883467153ff6ce4a05ca2cb520603b79e699fae3f24d","first_seen":"2026-08-13T23:21:55.099759Z","last_seen":"2026-10-01T15:57:26.896468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/%E7%A6%BB%E7%BA%BF%E7%94%9F%E6%88%90%E5%92%8C%E5%AD%98%E5%82%A8%E7%A7%81%E9%92%A5.svg","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.411Z","timestamp":1790870210411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /%E7%A6%BB%E7%BA%BF%E7%94%9F%E6%88%90%E5%92%8C%E5%AD%98%E5%82%A8%E7%A7%81%E9%92%A5.svg HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"3423-657e1d54d5827-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4481\r\ncontent-type: image/svg+xml\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13347,"size_decoded":4768,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3fd6cd4340f73f2f44388e97964f3eb","sha1":"694e8d4a2dfdd16c8f3444e77fe5d58c8ff1e907","sha256":"ef070fb21fd2892969662d3f1d08792aef524bd34a1c437a8e4129c3f99bbf69","sha512":"4962daa17f6fad3aa449210f0ad381083b9a8c524dd539c592feb3cc3fc96d08f8b26ac24296634c2d3a5c557eb56086e45bcd1bb1a42937f22d7ac5d698a294","ssdeep":"192:WFDb/y/y3W0o7HYkS53bOz9cJnJ+ujFNg8znwtjuo+jco8aBP:cbPmYX53bZPNnzwtjuo+jcoL","tlshash":"925279dc2f1867e894c053daaf2a50fdac2bd0ee6688d514c6042f1d788947ebc775ca","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-10-01T20:05:24.647624Z","times_seen":1808,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/layer2.svg","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.412Z","timestamp":1790870210412,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /layer2.svg HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"b0d-657e1d54d543f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 714\r\ncontent-type: image/svg+xml\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2829,"size_decoded":999,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca73167507e857072688801923131d11","sha1":"c0702bb33cafcbfa124f2469cf7bac0f915e90af","sha256":"4f32da99395c64c52a2674e9454763bf3b098b15dc0a90b81f3a489d25e76ceb","sha512":"03e602a51438a2b9f9e325840cfc1975bc37b15bbd62d3da0fd124547806bd151d7af2ec45a1769fe887873fe11e9baa4cbae28033f972829760513d327e59cb","ssdeep":"","tlshash":"e5519598372c1bf4baa12648eb1d7278207764a15b3521848c10773a68adddf3c7facd","first_seen":"2026-03-23T13:51:29.064523Z","last_seen":"2026-10-01T15:57:26.899115Z","times_seen":8,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-01T15:56:48.888Z","timestamp":1790870208888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 31 Aug 2026 08:37:41 GMT\r\netag: \"4cd5-65a53b71d9651-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 7499\r\ncontent-type: text/html\r\ndate: Thu, 01 Oct 2026 15:56:33 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19669,"size_decoded":7782,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (402)","md5":"83de0d07c657ff8f44da76338e152410","sha1":"6c0a5d1a33cbb9f448346e2ea152a263eab1c2b8","sha256":"a4d07c302d84dabbb99a667013323ebff193e8e2bdfa44768f50ec70ec8ad84a","sha512":"486a0304892909b27a1041dbaa3e6ef550b3fa7d10deb63acc363be7f8f2049e9c1226d35c91041378dcc0d7c9d4935929fa1945f177cf690c54b36e1dc1ce3a","ssdeep":"384:eLVGpXV/oc8GpXh4hJB6xbsuxNMMTzapVzxW0e7Wq4T7kWscjo3LfvP52g2SvVON:RpnpyaxbsuxNMMTzapVVWl7p4XkWscjd","tlshash":"a082d67a94e47db3406745daa9b7938e3af0e847d8674900baf88bec4fc1d854d0354e","first_seen":"2026-10-01T15:57:26.899939Z","last_seen":"2026-10-01T15:57:26.899939Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1268,"timings":{"blocked":-1,"dns":467,"connect":160,"send":0,"wait":317,"receive":0,"ssl":323},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/style.css","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.366Z","timestamp":1790870210366,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 06:16:26 GMT\r\netag: \"48b0-657e220e88657-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4299\r\ncontent-type: text/css\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18608,"size_decoded":4581,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b4af7371e2fee345e14ca357142db337","sha1":"639ecce01802eae298f104db799e1bc42e4aaf08","sha256":"f7441a1f369c7d73f24f28e1e3c2ddd455fea93d41806eb00a7f26e5813b44bf","sha512":"2ce433222394b9ba788046d7ade4d15df213768ffcd0190218936129c385ed4460bc1ca0209ae1fe2638af2f2219d700b47da8f8d3d72639b904701bc528e375","ssdeep":"192:+igRavfUupkCTI4Cyxj20CEID2auPktflijN/tegktdu2G33MHq/DTF3IFWayeTy:HLZaQrxhlDjXH+zr/ElP","tlshash":"4782892723346378f41ffaa4fe97ab8aa324e103e10555fd9ed95048c1cd1e851b7e8a","first_seen":"2026-10-01T15:57:26.901638Z","last_seen":"2026-10-01T15:57:26.901638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/app.png","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.405Z","timestamp":1790870210405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /app.png HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"5b574-657e1d54d4c6f\"\r\naccept-ranges: bytes\r\ncontent-length: 374132\r\ncontent-type: image/png\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":374132,"size_decoded":374366,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"478b32f8921118491a905cd0211dc23d","sha1":"f542080bba4dea9f3cd314c6ade23fd29ebe42b9","sha256":"83af90576b7ca1db29e19ae24b62b86741715838f66cc59b56317d2b2e6748da","sha512":"e159c79fd045f1ef717819c11af6f8e02cb3f987bb62201a6cde76d9cc24a4eee2d21a461355afab80633d9ca9b2afe5ec8495aef032d8fd0ae9101bd56c7ac7","ssdeep":"6144:we67KpR984XcTTowPV0SXC0ADXTt0A5/JNAHiAV+EVbLvTFc9zqPSPNJc6iJ3Npz:wT7S84Xc/HtK50Ap7arVvTicSk5dPG0d","tlshash":"e98423acd043cadaca00817221071f7a7bb059d5c604738fb372b69bbc5e19b7c5ae65","first_seen":"2025-07-02T21:10:40.156775Z","last_seen":"2026-10-01T15:57:26.903169Z","times_seen":85,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":482,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/%E5%A4%9A%E9%93%BE%E5%A4%9A%E7%BD%91%E7%BB%9C.svg","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.407Z","timestamp":1790870210407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /%E5%A4%9A%E9%93%BE%E5%A4%9A%E7%BD%91%E7%BB%9C.svg HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 31 Jul 2026 05:55:18 GMT\r\netag: \"1fd7-657e1d54d5827-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2837\r\ncontent-type: image/svg+xml\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8151,"size_decoded":3124,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f4a8d60705c4da90ce91d4f8903c235c","sha1":"6ad45ab8c6cb2a8ea097c79c1eb197d4462a01a4","sha256":"fefe0ac8ca8b6c7a2999e3c7923ab67cced26355f9b5eab0bbc7140d578eff59","sha512":"8cf7c7286a422458b80d6e37bc3970afdbf012f69d7307497e7bd78ab526ce6cc800120d8f150dd54038ee3d60bc35710841c6836edca29085ab767fbcb7f0f6","ssdeep":"96:lXSa2PgQvn0Nn5dpwOOzd+f/Y9rQTBNMazWRtt4qsQm9i8g3eybccDjFYDeSp:1SPgLdWOi+/9lkBF357uDeQ","tlshash":"a3f1a6cc23096ef18d80c3f4ef2aa0f4a51751f99a64506ccb706e6e39155ae1c7b9c7","first_seen":"2024-04-26T06:55:29Z","last_seen":"2026-10-01T20:05:24.64069Z","times_seen":509,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/favicon.ico","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:51.061Z","timestamp":1790870211061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 301\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":301,"size_decoded":455,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"26eaf776237a2a67c0114a25bb1e4ee9","sha1":"450ae80dfc2488147603212e690d5f6014056252","sha256":"f3a6ef5c2adafb160691da28bdaf5e58abfcedcff2cd09574b0f0c1744b738b3","sha512":"1e798027aaaaaeeb6cc4e5c2717a87184e3deb6e5a63c866cfd6ca4c93224bab967923c8a5f9e44c6d6252c78b192edb37a00155ed268ceed6e8413696c4d91e","ssdeep":"","tlshash":"ede07d9e505293820400ad503dc022c1234513eb247483e46ac1c043910827dc8e519e","first_seen":"2026-10-01T15:57:26.906023Z","last_seen":"2026-10-01T15:57:26.906023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokeu.com.cn/qtj.js","fqdn":"imtokeu.com.cn","domain":"imtokeu.com.cn","tld":"com.cn"},"ip":{"addr":"52.128.237.116","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokeu.com.cn/","date":"2026-10-01T15:56:50.367Z","timestamp":1790870210367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokeu.com.cn","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 22:40:30 GMT","end":"Tue, 29 Dec 2026 22:40:29 GMT"},"fingerprint":{"sha1":"10:B9:99:D7:6F:5F:B8:57:A2:4E:23:9B:2E:AD:77:2A:C8:96:72:7A","sha256":"C4:4C:67:07:9C:4C:EA:55:F4:D4:56:0D:29:C3:BF:62:54:A5:35:9A:AD:23:21:41:5C:73:DB:2E:17:6C:3F:D4"}}},"request":{"raw":"GET /qtj.js HTTP/1.1\r\nHost: imtokeu.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtokeu.com.cn/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 301\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 01 Oct 2026 15:56:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":301,"size_decoded":455,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"26eaf776237a2a67c0114a25bb1e4ee9","sha1":"450ae80dfc2488147603212e690d5f6014056252","sha256":"f3a6ef5c2adafb160691da28bdaf5e58abfcedcff2cd09574b0f0c1744b738b3","sha512":"1e798027aaaaaeeb6cc4e5c2717a87184e3deb6e5a63c866cfd6ca4c93224bab967923c8a5f9e44c6d6252c78b192edb37a00155ed268ceed6e8413696c4d91e","ssdeep":"","tlshash":"ede07d9e505293820400ad503dc022c1234513eb247483e46ac1c043910827dc8e519e","first_seen":"2026-10-01T15:57:26.906023Z","last_seen":"2026-10-01T15:57:26.906023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-01","alert":"Phishing Block","trigger":"imtokeu.com.cn","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-01","alert":"Sinkholed","trigger":"imtokeu.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}