{"report_id":"3ff36dad-5346-47c6-af66-03e524df0fc0","version":6,"status":"done","tags":[],"date":"2026-04-06T13:06:01Z","url":{"schema":"http","addr":"imtokentrade.com","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"104.21.29.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"imtokentrade.com/#/home/index","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"title":"imtokentrade","dom":{"size":111860,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (63766)","md5":"569f98d2c24622089c6f41d0b7e80f27","sha1":"6adeff197d2156f5c20832e6ca16b7ae8637d509","sha256":"53c619bedb8c3296b4a30ee522a4df294ed9951b74193f6faa830087d488d53f","sha512":"2cb93f57a69f43973a4080859460eecb3e7be73d83f20bbd47a6c5bcdf68366698cbf8b908a3e7bf1cdf4fc9a318b4339dbad9a84c179605cdd9b4ed35fd9412","ssdeep":"1536:VxGDbkkFga7NlzPXlzPXlzPCswwRlzPvlzPvlzPvlzP8ab4:KlTlTl+swwRlrlrlrlQ","tlshash":"07b39774a16821ab63a7c5c4b4a07f4d36d3a31bc10ac6706efeb2945fc3da0f9254e5","dom_hash":"domhash4f17f69d0414f347f1c6cfa36ce1f31f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"imtokentrade.com","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"104.21.29.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T13:06:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":60858,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.039390+0000\",\"flow_id\":899360508716744,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":60858,\"dest_ip\":\"47.79.64.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":903,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:05:41.501448+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":60872,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.056938+0000\",\"flow_id\":1636479975925682,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":60872,\"dest_ip\":\"47.79.64.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:05:41.501682+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":60886,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.296640+0000\",\"flow_id\":2158610560155359,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":60886,\"dest_ip\":\"47.79.64.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:05:41.753375+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":60900,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.318884+0000\",\"flow_id\":1083893778579416,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":60900,\"dest_ip\":\"47.79.64.175\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-res.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":903,\"bytes_toclient\":6037,\"start\":\"2026-04-06T13:05:41.753624+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":45600,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.368660+0000\",\"flow_id\":1175217668206178,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":45600,\"dest_ip\":\"47.79.48.217\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shipin666888.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":910,\"bytes_toclient\":5965,\"start\":\"2026-04-06T13:05:41.700002+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-06T13:05:42Z","timestamp":1775480742,"ip_dst":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":45614,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-04-06T13:05:42.667512+0000\",\"flow_id\":1742428229174730,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":45614,\"dest_ip\":\"47.79.48.217\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"shipin666888.oss-ap-southeast-1.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":910,\"bytes_toclient\":3148,\"start\":\"2026-04-06T13:05:41.951754+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2024-12-31T04:07:26.192616Z","last_seen":"2025-11-29T07:35:55.614341Z","alert_count":0,"request_count":3,"received_data":122044,"sent_data":1655,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-05T22:43:44.876774Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"echo-res.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2023-05-24T09:03:08Z","last_seen":"2026-02-24T15:52:18.374757Z","alert_count":0,"request_count":2,"received_data":454,"sent_data":933,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"imtokentrade.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-20","domain_rank":0,"first_seen":"2026-04-06T13:06:08.090519Z","last_seen":"2026-04-06T13:06:08.090519Z","alert_count":29,"request_count":29,"received_data":41519527,"sent_data":13255,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"apiweb.imtokentrade.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-20","domain_rank":0,"first_seen":"2025-08-04T13:33:35.915122Z","last_seen":"2025-08-04T13:33:35.915122Z","alert_count":19,"request_count":19,"received_data":88317,"sent_data":11129,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kk.zetagl0bal.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-09-12","domain_rank":0,"first_seen":"2025-08-04T13:33:35.916282Z","last_seen":"2026-02-24T16:01:15.351615Z","alert_count":27,"request_count":27,"received_data":0,"sent_data":12789,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"imtokentrade.com/cdn/axios/1.0.0/axios.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c42cd03c654cb660f17ae6082bffc47f","sha1":"bedd2879ab587dd9f5e6b1fe5df95f857c31ff10","sha256":"104840bf105259d57d70c1dd737c254d63a696ff7c20bcb1e26d5b00c5a46d45","sha512":"36ccb0591342cc562e2629331c1acef96f2f60c66493db63364aa3ac69d42be077ed2da56cfb5b650a9467a1470745c3065a7e288131a6ec76257be1820640e3","ssdeep":"384:Kao8KsKMMT6nbNp0nkJFP5F0YS6DagzzNYT9ee8u:sGNp0EPb46DaT9edu","tlshash":"9c42a7ce78a1b4d747e320f0905f5a0fb2b6992a644d84b0e560e8f66cb546e8737f4c","size":12977,"data":"","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.783469Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efaab15e02a58e04969131674b16ae94","sha1":"4c021daa835cb0aff0bc9a2ef56d4fb0c6d5d753","sha256":"4340198e80cdeef16fc5d919bd8ac000b0416c905e66cc60bc3db0dcdd387697","sha512":"81c1357b05dd1ea1a1a42e7504001a3ac64eed50bbf805ad7f8d26d09bb46cca67b88eba43da002004eee35e792ad948a72ca9959fb887db4ec320e66cc3e045","ssdeep":"384:fxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:up+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"77b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","size":24560,"data":"","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.764481Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vuex/3.1.1/vuex.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"523fd0003a2d5752369f3a6c1ed2e4ef","sha1":"700851f0610166761548335ee7eb3abfcac2af2f","sha256":"39bd72dde7538a33e2fd11645beae7b0091104be75aec5f655883058c0963773","sha512":"111899e8a1537782b6d2846cdba31fec448a517b14b29a5941dc7b15e5d9c7fcb279cc0323e42897471ec0643a0b489ca1c7b7b193fa435a859ee1761c8343da","ssdeep":"192:aiDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:aeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"ab32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","size":11658,"data":"","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.768674Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86b771c563266fc492f03331377562bb","sha1":"b6e4fd38968b715099fc3a058c848b2d6bd6384a","sha256":"594dbe1476a378470586ca67ce950ce0770dedbc4e04cbcaedcc97d833aee565","sha512":"940866be5e591244c3970ab5f56c746aa6b866bd843dbbab6c66231f035f9b988d1773583d5adff0c47c51d7586d976c266ca5d815d0627eecc08a2cf85c2601","ssdeep":"","tlshash":"40019c29c99b8e2b5866241d5b9eb00424a641034e09f416ba9ecb8d1f1de2f41f6eed","size":845,"data":"","first_seen":"2026-04-06T13:06:16.119636Z","last_seen":"2026-04-06T13:35:43.785059Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/element-ui/2.15.6/index.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","size":586253,"data":"","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-04-17T18:50:56.79088Z","times_seen":408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/#/","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bb675915568a4c80f160af61bd4f0a4a","sha1":"125fe1658a11d8cf0e3eb97c8dba7fe982f68727","sha256":"714988cc8b525e4fba3705b91a710adb13e688bd3e53a2122a4266b7bf0e4359","sha512":"887dd3a4059a592f6cded86230dad533cc9fdeb72b7a133e1b31a30029e5e445a29cbc3486f8bf9d44cf181e41825cc7351f6ceb85e482fdeff303ace9fcd428","ssdeep":"","tlshash":"d7f0a78775d48c15757417e58d9d713af620873a8b1d4a5b35b8042a1ff6f10d424c6c","size":452,"data":"","first_seen":"2026-04-06T13:06:16.120472Z","last_seen":"2026-04-06T13:35:43.785938Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T12:12:15.694384Z","times_seen":46128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/views.9cca37e5.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0fe6452d538bfa5292b082947b2a7f5","sha1":"aeeac014cadbf5c5e5e12fd353d3dc2a74a74409","sha256":"10fe232f8961b84e88b8a8a456dfc64fdfc3304e6d164eb207c95ab86bb5b1c7","sha512":"7af3faa2241e484d9bc309088058a0ceac6f9f5066fbb4b4ec202b3e12af73aba50cdd19301954e603e2c640c6b933e6b020a5d75564e84761dc53d0fb954a85","ssdeep":"24576:ZRwRyx6n0fX/A/1pf9wfvQ8u/UBcVY/B1Aii/ejXRAS+3cL5Wew:ZRwRyx6n0fX/A/T9wfvQ8WUBuy1Aii/v","tlshash":"90651909b187f46de8df6110502f1628a2763ba4b106c0a9b774cdd69ae8d58332ff7d","size":1528274,"data":"","first_seen":"2026-04-06T13:06:16.121703Z","last_seen":"2026-04-06T13:35:43.784415Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/charting_library/charting_library.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-22T08:48:38.05083Z","times_seen":718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vue/2.6.10/vue.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f121238864e2a9ff7e97bf60b159feb0","sha1":"a624ad4e931043ac63ae5c2d8820004163ee7914","sha256":"309fbabff84fc5d37b4526113ee36e71aca5b4d656a5faa9b8dae23dec63e526","sha512":"3b21fbdbf22e0b5d08c95badae0bd962d9d56b05c5b31afd00996bf9f3985816c28a8f2aeb86742e76c7cffa80fbe437e912f88643798aaa3c0f106d6394fca0","ssdeep":"1536:KUXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:xYeJpN2yefjMBlPV00/g","tlshash":"3e9308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","size":93680,"data":"","first_seen":"2023-03-07T14:22:57Z","last_seen":"2026-04-19T15:03:01.413765Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/avue/2.9.5/avue.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d89b4133a3ce4ca2f3eb6637cc136c9b","sha1":"fa35953c859b3dc04037e2b76071d4ef8f797010","sha256":"4b27ebd2aa41a50d78bbfe53bb88b14a0ec9a0934b6b8149537521d4f018fcf7","sha512":"d1db2f0b2e91a304edcdb00268630f09834b36512623d08f26a75c085c43bf108e95ed004e450637794cbeb884c3fe3162b9d71213b550da1e319dba654ed9ad","ssdeep":"3072:YmWzlkGK5sx4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:YmlqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"9d540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","size":300361,"data":"","first_seen":"2025-09-09T17:59:55.892942Z","last_seen":"2026-04-06T13:35:43.749249Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/chunk-vendors.c7084fee.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eb319bdde10ce712a8e07b31e216242","sha1":"7e4b80a9c5d351f8ea86a6c42c5fae0b4f66876d","sha256":"9592ed68c85cfe547df4b96d72226468d3176a405835e247bd26b4d6d9f3d2e6","sha512":"259076affdffbbaf01a9d9e20f6e94d2ea6c6e12adfcd87fd952e236703b55e090d617aa25cc0791fa35be564479d103ac1476f24e2e3d81e7e3189827ae6930","ssdeep":"6144:J3QHI4m5bUaav+RcqE3rxa+m4R98VuHmQQccV7gIesJzn3blAXGCM8OlwwZqtg:JQpxao+R32Bm4R9XDQt7gIL3b7C1MOg","tlshash":"98e4d6ccb6d2b06543a375a4403f610bf27b6a18b40e85d4f266d5d6bcb898e8177f38","size":691612,"data":"","first_seen":"2025-03-06T09:16:43.424932Z","last_seen":"2026-04-06T13:35:43.769521Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/app.a8f3b37c.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"784301ff9ebeaf3205c797c03e863f09","sha1":"201f1e4f1449637d277bf2725d0229c27b06b05c","sha256":"4b7b16e0b92fd06ab698cf94df3e25ef730e13e2c4735137dbf5b314c29c309c","sha512":"3e5cc086460cf4dbbfaa68b5af28ef2c266c5f93ec236ff510c7c7e9026475780353787d36e6d9fccb43193dfa54e21d07b4db2a5eb559aa898f9683e26b8a45","ssdeep":"12288:s+G+Wf/Jjwkdg1Eo3DyMCzBKohWb2BiBZfioF6YcguAziyMrC8yM9r32S72:s+G+0Apbzb8ybSC","tlshash":"14a42bb9388ae8e8355523a0b44bb635b1acded07b0de4c415b8c6c7a2ec916d037f57","size":467375,"data":"","first_seen":"2026-04-06T13:06:16.098597Z","last_seen":"2026-04-06T13:35:43.752537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"imtokentrade.com/cdn/avue/2.9.5/index.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/avue/2.9.5/index.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYET0%2BTQAAfGCIlRKU0w8JhF7FlJWDvELIjpXegOCFh8RyykfpG%2BbgWv8iuitThcy8%2BsXkfr75es85%2Bv%2F7eZNf3zG1YayXkL3qxSH5xv%2BF5mZx2ghps1gH5dUlzeqwtwszP4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9fedc240c77e41ff163fe402b80c3330\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5df45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91485,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"75438b9f5aa0d855d110b2076cfa5247","sha1":"29f13a6935f57af10143ff6f34f1f0880aa6d5a5","sha256":"abc42b76590667a51c005569dda3104cdaab430832a56fb7ba8c5e12e0791779","sha512":"b6bd85dcf2a1d06e24b3435a89b95bb28394c61abe659acb3e846360ed22010a2ebd75e3819757c1b1a050d54e5a1db19a9cd66283550ee46618c277c44740c2","ssdeep":"384:BcJHGqGq1PrvhClHpK2/j/wPI22+NWoWId8K7ZQuODorhUilWJvcMY/+gNlWDKm3:uJHUqQE2483ClWJvcMYOFKKeax","tlshash":"cb93f1219a5b1547a233de642bd0077dfb6420238e0251bb7af171444ff6fac87a6e8d","first_seen":"2025-09-09T17:59:55.886776Z","last_seen":"2026-04-06T13:35:43.751427Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vue/2.6.10/vue.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/vue/2.6.10/vue.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6vQFoJAFbfFmCOUHj%2BpWjvuhTM90qWcLvhKxapjKKTUbjlcMyxNoTJC7tnYQTIZZEH3OOma%2F2KLkZMmcaIc9sF4kB74WyNOnadEERqmVFdJw2W0BPVFduakjC1uqQ0tACR%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7e94239575cc4211ecf612e96448b600\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e035693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93680,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65444), with CRLF line terminators","md5":"f121238864e2a9ff7e97bf60b159feb0","sha1":"a624ad4e931043ac63ae5c2d8820004163ee7914","sha256":"309fbabff84fc5d37b4526113ee36e71aca5b4d656a5faa9b8dae23dec63e526","sha512":"3b21fbdbf22e0b5d08c95badae0bd962d9d56b05c5b31afd00996bf9f3985816c28a8f2aeb86742e76c7cffa80fbe437e912f88643798aaa3c0f106d6394fca0","ssdeep":"1536:KUXY7qLtpHt2Pqe1mZ8I6H82RaLiMBlo2VV2B/S/g:xYeJpN2yefjMBlPV00/g","tlshash":"3e9308dc7299b07157eb31f1107f140bf2365a19ac0ec194b222e4e67cb984d92abe7d","first_seen":"2023-03-07T14:22:57Z","last_seen":"2026-04-19T15:03:01.413765Z","times_seen":352,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getAllSetting","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vM1OEEv7FDjJTAU5Bfu2CSp0rgluP0QqFgdkf7EGE2h2JrOFfwSb1hut2IwIUjqFVIKfqiZssf339Eq6sKuOV7zA89VVPQAe8imhn8kphPpYNWMJH8sYz6PZUa0Px7s5fD1oauNH2j3PMg%3D%3D\"}]}\r\ncf-ray: 9e810161db4256ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":887,"timings":{"blocked":63,"dns":10,"connect":14,"send":0,"wait":749,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getAllSetting","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOUMNYgN1K%2F4z6zJAIiwYeTOgNGIV%2BhRVhlYHJTDnLcEQ5%2BO%2BkLE8GziiK4ql51yJOFezWVvlpqrYOkNd%2B8mwy7u5WuU5TOEk9hjiX%2FqKNA8iZsOJc9xzdw4tqMKj3TFeBNDgWol1lyN%2Bw%3D%3D\"}]}\r\ncf-ray: 9e810166981a56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12617,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2439797bc36164c5902c6d976c36fb43","sha1":"ac81821eaf0e7b3d4c4a713ac0c29f7daf34646f","sha256":"b240beb8af1a54ea918f15b68999b00608ce55b8d75a246ddfc26177a3edc1d8","sha512":"293d7fdd3ee9d6ea8c1d6c2cb1048bb45d29a1d51eb412eaa311fcfe6700466a5a6605b36b3f4c2b08154c530da788cfb3904e384a3d848b79bea1050375ec5a","ssdeep":"384:c1nuGjDoFVH7igx1miO2yA45S7oANymLm2OnG:c1nRjDoFVbigXOHf54yma2OG","tlshash":"5142659e31dc8cbe93df5ac290ef3555a8dc2457dc98ac51e0ebef5cd8966b4480b009","first_seen":"2026-04-06T13:06:16.0905Z","last_seen":"2026-04-06T13:35:43.753738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/ripple.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.461Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/ripple.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1580,"timings":{"blocked":1580,"dns":0,"connect":240,"send":0,"wait":0,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/css/views.8305e29e.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:45.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /css/views.8305e29e.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePpYq7KPVRPRHKGJcgUwQEAJLdvunkvtQkLRbdnVvKI2OSYN36G%2BU9HqhhIOOaxN0C5WFmdXQIv0Ts%2BWdFBiZsc3zKL5aFdIH88L8GBX2R0x34yUgHx%2BD6GmmTCpYe41vPzx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f54d169f199e9281218963e5c53bedab\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e8101861a005693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497311,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8b19683d83d2587f60e10288c659914","sha1":"f16da5a1f2a175db262c7f7d4aeb1b6e8bead8b2","sha256":"df0f1825d19a091ba989eebcdb9efe92d832316a8181822d5b3360380086c757","sha512":"0cb479709b5ce9f2a128a0bf1656ae3d69199d81f6a75105f8c1db8d0652e1ba8763727cbcec904316afe3dcd40e6a57e38bf69dfd6ab6bc05abe717d332a037","ssdeep":"6144:5DOHuNWJxBhsM+fqgZiQ6v7f65WCXk2XCy+LRdVV3J6Q0RirvDcnlpYU71PP:PWJxBhsM+fqgZiQuOCXLRddClpYU71PP","tlshash":"17b4b923736a252ab17bcd3861c0769b3618f7b3c10252f9de91a829cbc7583376674d","first_seen":"2026-04-06T13:06:16.091525Z","last_seen":"2026-04-06T13:35:43.762077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vue-router/3.0.1/vue-router.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/vue-router/3.0.1/vue-router.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HBfW9rJnDYOYZvawMdVfJGNE7QJuPrE8K5T5Au4gGMDlP1T22CiYGC3Mw763PWZ5p%2Buq%2FLAslow%2FijpGpdFfh4hS4NpFOdhWXZcB4dGFBQMHZvmcJZC5C6Q6wUlWyCN%2FM2S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"fb871b256448ba9d7e1d7d7577cc8207\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e065693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24560,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24485), with CRLF line terminators","md5":"efaab15e02a58e04969131674b16ae94","sha1":"4c021daa835cb0aff0bc9a2ef56d4fb0c6d5d753","sha256":"4340198e80cdeef16fc5d919bd8ac000b0416c905e66cc60bc3db0dcdd387697","sha512":"81c1357b05dd1ea1a1a42e7504001a3ac64eed50bbf805ad7f8d26d09bb46cca67b88eba43da002004eee35e792ad948a72ca9959fb887db4ec320e66cc3e045","ssdeep":"384:fxwp+JvwAmXRZOYQFoB5RKbKBpZn6ySH1DhUxjImhFVP:up+JvwAGjOYQFoB5RK+nnTMa/hXP","tlshash":"77b2c69db582b03247d326a0816f150bf23b7999744e84a8f2a9f4d43cbd85e8427f7d","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.764481Z","times_seen":68,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.200Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/a58ddc5d6b8a4fc390d9026ea3a0f9ba.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3964,"timings":{"blocked":3434,"dns":0,"connect":258,"send":0,"wait":0,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/notice/list?key=ROLL_NOTICE","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JP%2Bu5bbeRDaN3Nnz%2B%2F6DFGBPWN5SAEdreaqRt%2B8Qe8nci7pTfMvj1BukOoSDMoVIlDk8JDjvV%2BxJGiXepk2Ad%2Fmn3lO1%2FbObRhlHQ3%2F%2Fp6XjvjiXfNdGl%2BbQm6h6mDadB%2BGTSnu6Uki%2F%2BQ%3D%3D\"}]}\r\ncf-ray: 9e8101699b5156ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80e1a9bcfed127026dedfbcc99d12642","sha1":"183b0f41f9b5a0d54bda86e720c4d602207f00c2","sha256":"321127c50a989790489ed04256fdc1d9ee55501bcc088014250286f888d15958","sha512":"549d07af3d665c9185863baa363d88a9f8e528e01b7c6c7ce482f3c8935010815d925b640fc720e4691f217292322222fc9c6f0ee2f97dd4a0c6de42ca7500d2","ssdeep":"","tlshash":"cc11004a223c8e71441611b373ccfdc9a2be1697d6a28d38855ecf2c03f14b9172b585","first_seen":"2025-08-04T13:33:44.843054Z","last_seen":"2026-04-06T13:35:43.765317Z","times_seen":16,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:43.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://imtokentrade.com/\r\nRange: bytes=32768-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:05:43 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11917951\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3AFA7D72D20363780268F\r\nContent-Range: bytes 32768-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48578,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"1c376db00ec1103c358a2e37114b3eeb","sha1":"ca17ab4790b16f05dd8b707b2ed5e62f3ca3b879","sha256":"5b26c6d1780ae4d003fb5667200d758cc381151a0dd402f94305987d06841130","sha512":"4e5b17a3ba958cff32e4494eba5b521ca01a65f8a165cd89d8e355c85b64c49b36eb176221c7d132dfe70962ea5e8581aa7d3c6812fe986153d7c3fec730fe8f","ssdeep":"768:Hzq5hNlac4jzuRhYhznsQoDRsBbOQX07fdwwJGkcjo5bJK6rhZUhagje:HSVa1jiR0LsQCkiw2cU5bJrhW5je","tlshash":"5e23f151c3fbb7ec70ffa7541b8635ded6a653121a900a64229c33d1936bf8746b2284","first_seen":"2026-04-06T13:06:16.09369Z","last_seen":"2026-04-06T13:35:43.759467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/views.9cca37e5.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /js/views.9cca37e5.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzIKOj5E5qMCj0Cxy4Jk%2Fi03KzrS3vZK1yizdpVrpDJo0mWeaBNtqITdyN2zS6mZZsfXczBsDYcA0sOZjml0%2Bv9kJjbRfeDpHBTQw2%2Bw%2BQAEoTfL88RvE1UtEOOOFkrjzmrW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"470d16ae8a44bd135a974b4b09c97f3a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e8101861a025693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"c6cb88ad8ddfe27eb0f8c4220e72a6cc","sha1":"738f676fa8e7d2d4c9ff948c3d23da19b9b28cfa","sha256":"2a1730d4377c1886fd4726377e9f931df78cf2843267c925223056089601efbc","sha512":"bded59ae65128e0cbf47f8c7a0e9a2e4356a7bcd71ea7015fc94800528f381c72e690c4d9c39e3147e19f3a07916cb2731f31181884c881ecf152c80d1ad89c5","ssdeep":"24576:ZRwRyx6n0fX/A/1pf9wfvQ8u/UBcVY/B1X:ZRwRyx6n0fX/A/T9wfvQ8WUBuy1X","tlshash":"7c250909b187f56de8db6014502f1628a2763fa47006c0a9f774cdd69ae8d98332ef7d","first_seen":"2026-04-06T13:06:16.094617Z","last_seen":"2026-04-06T13:35:43.771238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9e81015d8b6f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-22T12:12:15.694384Z","times_seen":46128,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/views.9cca37e5.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /js/views.9cca37e5.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzIKOj5E5qMCj0Cxy4Jk%2Fi03KzrS3vZK1yizdpVrpDJo0mWeaBNtqITdyN2zS6mZZsfXczBsDYcA0sOZjml0%2Bv9kJjbRfeDpHBTQw2%2Bw%2BQAEoTfL88RvE1UtEOOOFkrjzmrW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"470d16ae8a44bd135a974b4b09c97f3a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e810160e9445693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1528274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65454)","md5":"c6cb88ad8ddfe27eb0f8c4220e72a6cc","sha1":"738f676fa8e7d2d4c9ff948c3d23da19b9b28cfa","sha256":"2a1730d4377c1886fd4726377e9f931df78cf2843267c925223056089601efbc","sha512":"bded59ae65128e0cbf47f8c7a0e9a2e4356a7bcd71ea7015fc94800528f381c72e690c4d9c39e3147e19f3a07916cb2731f31181884c881ecf152c80d1ad89c5","ssdeep":"24576:ZRwRyx6n0fX/A/1pf9wfvQ8u/UBcVY/B1X:ZRwRyx6n0fX/A/T9wfvQ8WUBuy1X","tlshash":"7c250909b187f56de8db6014502f1628a2763fa47006c0a9f774cdd69ae8d98332ef7d","first_seen":"2026-04-06T13:06:16.094617Z","last_seen":"2026-04-06T13:35:43.771238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/1fcfc1414bce494a9fddcf0cd89d05fc.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.204Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/1fcfc1414bce494a9fddcf0cd89d05fc.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3975,"timings":{"blocked":3458,"dns":0,"connect":251,"send":0,"wait":0,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xau","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPPO66SbF0pZpeMY%2FPcs0mnzZJbiilLVSW0eFIpAFk8pmLBkSaSu0u6%2FgMwKQ6rufX56ImXHFVLvRu3ZBcVOXDWr%2BTDatRqNNDhOp2iTRH805Nw0Gjjuxlg9HQOfsEKSpJZWOO4h4MEnRw%3D%3D\"}]}\r\ncf-ray: 9e81016b3d1056ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xag","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:42.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=joRzUFcdpujkdlZ8zhT1NODaBbqMdCS7R1DNH%2B3nffQgsQ7mWbixz%2BOugPnLDAkb3%2B9YesTA13i%2FxAp1gFzGihmd8FeEKNooC3gpmZhFvTYHQkpFlcngZRRMx6Lg%2BiIVhNvHU3fkRbXHvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e8101718da4b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cd83faeb25ecc2bf71f1a1890b194e2a","sha1":"744e808d6e50e52c020c43af6070a70ccb8a1b07","sha256":"ec34c524beeadf570e2373c2014190cd90931528caf6d82a74be7e9abeca3d27","sha512":"f8d7f847c708f3536cc0f2597b019a872ceef966b38343d6cdcc86794caacad402d6f8f1630de1dc0359f7e16675deb316ff26908a42a30d16ec1d6474ac14af","ssdeep":"","tlshash":"fd9002551c198246b88300a9a5471204002431602a6892484c596135c2c816a2050858","first_seen":"2026-04-06T13:06:16.096153Z","last_seen":"2026-04-06T13:06:16.096153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/fonts/DINOT-Regular.d5ae250f.ttf","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /fonts/DINOT-Regular.d5ae250f.ttf HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/css/app.27a8d61b.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2vLjOuzs2irMAmSvYDlD0l6BO0Q1ZOhwjJO82hChUMjzHDCVIEq0dQMe22YpcT0hoCmP2FHze43IOkT4IvFvYNMKR%2Ba9OdItQAOpp48%2F%2Bts7Op0LRCv8bhJ%2BOpc%2FyXqUQeEV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5468a93ef9f23c729aee588b7a57ec49\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015e5ed15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12381068,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"BASE\", name offset 0xa88e6c","md5":"8c1c07fe2997321d54b049da39e880fa","sha1":"e85c69e54574d47b1a3b665a5f7c98ffeafcd371","sha256":"c6b6dd24e24ea6c07767f20fc1b2dfe86f31b1ca166ae620079c67dcdd5add6d","sha512":"192427288363eb352a702f85cbf2d714a78374d4583da9be541fdbcbbaf4e643103ded1b942d601838476029b05eb5b84d8b08998b546046255fa29670bf1127","ssdeep":"24576:H/8MftuDPIz9ZeJ199QETruMGR7JrhCannDH3l8cVZYIVY0:EituDduVjn7Zf","tlshash":"94257bc297c92d1eea22bd3c2440f63e70ce65088a56d6fade431f3718429741de9eb5","first_seen":"2025-07-29T21:26:30.315596Z","last_seen":"2026-04-16T15:51:37.925083Z","times_seen":49,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":294,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/binance-coin.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.467Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/binance-coin.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3877,"timings":{"blocked":0,"dns":0,"connect":258,"send":0,"wait":0,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/app.a8f3b37c.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /js/app.a8f3b37c.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4%2F8OcXjV1u72158ExQT9iuprkPJEpVhOmMnKqkeTPWrJg1tviuJQZHXwZH%2FkAPsl86zagq1q8VAMHIfifams9HZo5yJNps5Efwv1EHZeLhZGilTcnvlYZb4JkM6LPiod8Wa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"475cae8a0b6f4d45d2d19599e248ba91\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5dfa5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":467375,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"784301ff9ebeaf3205c797c03e863f09","sha1":"201f1e4f1449637d277bf2725d0229c27b06b05c","sha256":"4b7b16e0b92fd06ab698cf94df3e25ef730e13e2c4735137dbf5b314c29c309c","sha512":"3e5cc086460cf4dbbfaa68b5af28ef2c266c5f93ec236ff510c7c7e9026475780353787d36e6d9fccb43193dfa54e21d07b4db2a5eb559aa898f9683e26b8a45","ssdeep":"12288:s+G+Wf/Jjwkdg1Eo3DyMCzBKohWb2BiBZfioF6YcguAziyMrC8yM9r32S72:s+G+0Apbzb8ybSC","tlshash":"14a42bb9388ae8e8355523a0b44bb635b1acded07b0de4c415b8c6c7a2ec916d037f57","first_seen":"2026-04-06T13:06:16.098597Z","last_seen":"2026-04-06T13:35:43.752537Z","times_seen":2,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/3710d02454f84f55bc906630d53e0dbd.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.202Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/3710d02454f84f55bc906630d53e0dbd.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3986,"timings":{"blocked":3460,"dns":526,"connect":770,"send":0,"wait":0,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getCoinList","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02JeW0nidETVEIWQ8QjdMFLaMMU6OvMjTWLxXH3WjrRfkqBXXMkD%2FoKZY57Ew7YyCWVSetSoO91tuWi706dlGS9tiHIBzIReS8K1E7N3zdYey%2BZ18anyqcQu%2B%2F5sjLKxgZnhnGQE4luEdA%3D%3D\"}]}\r\ncf-ray: 9e8101699b4f56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21997,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a696e15502addf2c76f7b4bb2141fef7","sha1":"f33f86269b0413b27216700151417dd7aac6a699","sha256":"b47962785fbfc2572fd8f79244d7ec893dfbe4902dc981c39d2ea79694e0d78c","sha512":"f954425f1dcf55e85a30bdcc1cf594e7500936458483216af8f997ad7a6c220706e70a27cfe7eba8a902595a9af8f54ed4af12e9da880a9b82862a9b14ef3482","ssdeep":"192:VXe6Xj+XkN8XPqcXx6XBs0XDsXOwTXkPXyoeubwXHwY5K7ZYfvCKyPnjG3SG+/bw:HQrkQykP+s","tlshash":"2ba23396212894bdc5be80d12ebf791351dc352fecc98e1ad6ce8d8c8ed5eb4150af06","first_seen":"2026-04-06T13:06:16.099381Z","last_seen":"2026-04-06T13:06:16.099381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-res.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png","fqdn":"echo-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png HTTP/1.1\r\nHost: echo-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:05:42 GMT\r\nContent-Type: application/xml\r\nContent-Length: 333\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3AFA6B1E8233631AD2E7D\r\nx-oss-ec: 0003-00000905\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1145,"timings":{"blocked":-1,"dns":38,"connect":281,"send":0,"wait":270,"receive":0,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/AUDUSD.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.488Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/AUDUSD.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2141,"timings":{"blocked":1628,"dns":0,"connect":252,"send":0,"wait":0,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/GBPJPY.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.491Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/GBPJPY.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2084,"timings":{"blocked":1033,"dns":1051,"connect":1305,"send":0,"wait":0,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/XAU.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.492Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/XAU.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1548,"timings":{"blocked":1033,"dns":0,"connect":252,"send":0,"wait":0,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn-cgi/rum?","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:45.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\ncontent-type: application/json\r\nContent-Length: 640\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":640,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":678,\"startTime\":1775480738905,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"ab07f8c1-5a05-4ed4-9967-6062971cf118\",\"location\":\"https://imtokentrade.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":29,\"domainLookupEnd\":59,\"connectStart\":59,\"connectEnd\":86,\"requestStart\":86,\"responseStart\":366,\"responseEnd\":367,\"domInteractive\":1150,\"domComplete\":7008,\"loadEventStart\":7008,\"loadEventEnd\":7009,\"transferSize\":2608,\"decodedBodySize\":4778},\"siteToken\":\"7a768ea2f950495b9c9e6d064be82e1d\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 06 Apr 2026 13:05:45 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xC2uz%2B3XLPmpNIUn8LFyAMhFy0bjgudlNOb7%2B%2B90TZUUSm0%2FcYoCIz4a8bOYR22MxmgYzzRrLe4qzMZqwOB7SVY5onc0%2BXVK097hm2Gw9ce3MBY2GJmfZX4hIaXbnqwt6LGm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e8101863a135693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/js/chunk-vendors.c7084fee.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /js/chunk-vendors.c7084fee.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zDeuLGBo1HUKu%2FoVjy6%2BjkZ7VC87UkvdNUxmfvunqXq053TgnDu3jCSkxzJb5dBVJSwR6EW%2FOEnFaxGgPbcwLtmXzZWHf0%2BSlof89IYMmVCPc2OcZOopa8FJ37%2FQexwk8V2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"066280e6430e6c4906c184ceb98093c1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5dfe5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691612,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65456)","md5":"1eb319bdde10ce712a8e07b31e216242","sha1":"7e4b80a9c5d351f8ea86a6c42c5fae0b4f66876d","sha256":"9592ed68c85cfe547df4b96d72226468d3176a405835e247bd26b4d6d9f3d2e6","sha512":"259076affdffbbaf01a9d9e20f6e94d2ea6c6e12adfcd87fd952e236703b55e090d617aa25cc0791fa35be564479d103ac1476f24e2e3d81e7e3189827ae6930","ssdeep":"6144:J3QHI4m5bUaav+RcqE3rxa+m4R98VuHmQQccV7gIesJzn3blAXGCM8OlwwZqtg:JQpxao+R32Bm4R9XDQt7gIL3b7C1MOg","tlshash":"98e4d6ccb6d2b06543a375a4403f610bf27b6a18b40e85d4f266d5d6bcb898e8177f38","first_seen":"2025-03-06T09:16:43.424932Z","last_seen":"2026-04-06T13:35:43.769521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xag","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lA4HvX4j0LG0yc7%2F%2BPPMgpRH9DUFvoXygA35ttR81sTEjVWb34WwzwsXTMXwpPd0Zv%2BN%2FoiVX%2BDdv3Tz74FxOMVyv57E55OaVoQfJbaQ8PV9dqoBhUdVVAs3iyVglqU64Ljg6v9nP8SMXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81016cf809b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b75a9f7ed2e18336347e1d2a81a2d900","sha1":"51903f68ff002e7186d30da2d6364dd6ef9d6805","sha256":"e53236c09b63ebd968ea301731100ebb064196300f19b0b318744690fbbba354","sha512":"8a9187a1e6e31469e56e92ffb8bbfa46a826080ca185200eecab54c86e7a5ac4d8ee93a7f51fb27e5d2d4945bc33194bea17cb4de435b145ff3bd89d5ed27cb2","ssdeep":"","tlshash":"649002551c198346a98300a99546120400243161262493484c595236c1c816a2050858","first_seen":"2026-04-06T13:06:16.101291Z","last_seen":"2026-04-06T13:06:16.101291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":747,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T13:05:38.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xA0QNkKg9wTQRu6iDiY1%2FABs9fV8%2Bk5d2qoZpe2HwgvS%2FkPfW3pwQ2YiRB3sGGw9u5KTvh59OfJAuU3gCwVUB%2FZWdRG9f%2FTXvFmSsEV%2F0e8Y%2BYv0JSLpjTj692m3SY8hWbiz\"}]}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=65,cfOrigin;dur=210\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e81015abc4556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js:2.6.10","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Axios:1.0.0","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":4778,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1473), with CRLF, LF line terminators","md5":"52299e6201671f3b0accb8a11f0b9e22","sha1":"f6a40eb7d0a0ab44f128c9791164810fbbaec081","sha256":"5ccabbbc0a291bffa4bd2d2551692b8ef6cfeac9c1e4ec8f4f456266940e86b2","sha512":"dd6ee0a7f54a6af20658d6ff07a8146be8c3a66f066450c09610235059b9629b2dc80f14a05d3dbcd77c19460bc4742d3abe60612ec67d67440213f9548ce142","ssdeep":"96:AE1ECMiFpFvEC7N9kphkYzG/fQix1LtKKq7SC:AkECL/FvEqN9NIoB0PuC","tlshash":"72a19756cc00824e10320b98e766b60ce5a5611fdb50c825bcfcab5d0fb9fc885a3e9f","first_seen":"2026-04-06T13:06:16.102156Z","last_seen":"2026-04-06T13:35:43.750656Z","times_seen":2,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":57,"dns":30,"connect":1,"send":0,"wait":280,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/css/views.8305e29e.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /css/views.8305e29e.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePpYq7KPVRPRHKGJcgUwQEAJLdvunkvtQkLRbdnVvKI2OSYN36G%2BU9HqhhIOOaxN0C5WFmdXQIv0Ts%2BWdFBiZsc3zKL5aFdIH88L8GBX2R0x34yUgHx%2BD6GmmTCpYe41vPzx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f54d169f199e9281218963e5c53bedab\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e810160e9375693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497311,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c8b19683d83d2587f60e10288c659914","sha1":"f16da5a1f2a175db262c7f7d4aeb1b6e8bead8b2","sha256":"df0f1825d19a091ba989eebcdb9efe92d832316a8181822d5b3360380086c757","sha512":"0cb479709b5ce9f2a128a0bf1656ae3d69199d81f6a75105f8c1db8d0652e1ba8763727cbcec904316afe3dcd40e6a57e38bf69dfd6ab6bc05abe717d332a037","ssdeep":"6144:5DOHuNWJxBhsM+fqgZiQ6v7f65WCXk2XCy+LRdVV3J6Q0RirvDcnlpYU71PP:PWJxBhsM+fqgZiQuOCXLRddClpYU71PP","tlshash":"17b4b923736a252ab17bcd3861c0769b3618f7b3c10252f9de91a829cbc7583376674d","first_seen":"2026-04-06T13:06:16.091525Z","last_seen":"2026-04-06T13:35:43.762077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/ethereum.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.440Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/ethereum.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1406,"timings":{"blocked":1406,"dns":0,"connect":240,"send":0,"wait":0,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/08aee92ff5cb428893db32aebae6f3ed.jpg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.476Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/08aee92ff5cb428893db32aebae6f3ed.jpg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1047,"timings":{"blocked":536,"dns":0,"connect":247,"send":0,"wait":0,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://imtokentrade.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:05:42 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 11950719\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3AFA67CC7753437D9D845\r\nContent-Range: bytes 0-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Fq+h2big38MfdDRn0FG2pQ==\r\nx-oss-server-time: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":48543,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"116ce22122fc1932341d51a0d8c1b698","sha1":"51a3f16db7f7d49993b0cb87a1c3a386fd84713c","sha256":"dc34aea18dad5bad935a57b35e2131d94f2b95056b8c2a0f9e458d17604e1249","sha512":"a2ea28e5a85ec2a80f300c659d36b5c4491cd7522c07ff777ccf0993d595f3120fa592e18f795359310902b0efc7ac7ddf00dda63bebf613cf2255e7b70f30ed","ssdeep":"768:fEBHp3FCxEW7jIL599uCIc8wNAurh0ZjDgFLeFrU8zq5hNlac4jzuR1:fmFFGEW7ULT9u1c8wN/rOjDjFA8SVa1K","tlshash":"3a2302117ebc945cc9aff2699f83e1d692d11a14d98d798810cfb582c01ff62e8b21ed","first_seen":"2025-06-17T10:35:11.708565Z","last_seen":"2026-04-06T13:35:43.766564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1454,"timings":{"blocked":-1,"dns":39,"connect":332,"send":0,"wait":345,"receive":66,"ssl":671},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/fonts/PINGFANG-SC-BOLD.b9f4c4ab.ttf","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /fonts/PINGFANG-SC-BOLD.b9f4c4ab.ttf HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/css/app.27a8d61b.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLS7l%2BhJ614HABbm%2FQs4B%2BkS5NNMQrouLucYa7Gr5ZqszD2nhx7CxgCK4juLxyhOOtawfuPo83G6gAAZMhp4AeaHmbpO3gsxQ5b0HaikeRTSuvYD8LJtO9yF5ft%2Fm5jAqtXC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"53c94899a489080e774e549feb4c95d6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e810163cc625693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11139412,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa2b728","md5":"a5f40309207afeb657ed9436536d0d0c","sha1":"e08b67e9d2d1836268cdc905d4a7bc8aaf46d583","sha256":"b03430452ce3669613d60acaf8d799052aa1fdc03012feb481b5a27fe8a89fb8","sha512":"2a5d9eaeec304955d870d9e68b8efeb3a9ed268b1922a8750cc2fbc79b1eafbfde68f74b6dbddaae97950f0f722790d6a24ccda0c5e28ec0f5a7d252f9fd68f3","ssdeep":"24576:Jk3368WWqmO8+RYKjcpbR8z0AuxRbTn1tET64wBQFFlUqIY7NMIbvW:Jk336M5BI1E","tlshash":"36256d93c7c47d2d9b22fe3c6410f26ff48e5409892ad2f9cf632f36185656449a8eb1","first_seen":"2025-07-29T21:26:30.322215Z","last_seen":"2026-04-16T15:51:37.899732Z","times_seen":32,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/favicon.ico","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: null\r\ncontent-length: 4286\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a5569af23a3091b133a2baab2260a480\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyTHCjer9qeoGMPoTHQfKSyteE4WTwSf17tiK2e3B%2BYiummRMz7tLR%2FkfMtOTo6NE8W8CmOxQcakRRqbnRsJaVN8DgZzOx7k2okyOzzcxV8awB6MtVaGfcWxbjCf11YxjYdG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncf-ray: 9e810167bfdf5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f74da171ab637a9689be78a83ff70e83","sha1":"a488742f6d02faf69b52350788c0ae1cf72b231c","sha256":"6c945adb949c640c783e552808893fa9dadc83fab90101768dc8dde550c9b643","sha512":"2c64a60201199b6cfe0401d83091ec68cdfdae9bb4b0c6f3bb01aec417aba678429ddbb36830f860139ba8f529f5a172bb3f25121cfbbef348dadeb72092b8ee","ssdeep":"96:qSzOsgv+iZW+F4Cqm5gtDuZdkv5UisFMFnLEG:ZpOXZdkQM7","tlshash":"799105ac9153e8c7d460d3fa8d39fae059d62cd4b942f3e20078f60d097749eca21967","first_seen":"2025-08-04T13:33:44.896043Z","last_seen":"2026-04-06T13:35:43.767937Z","times_seen":3,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.196Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/0c8c12cc9884401aba4d11d362bf9974.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/tron.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.473Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/tron.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":0,"dns":0,"connect":270,"send":0,"wait":0,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/charting_library/charting_library.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTmrnNSl%2F2J47HJD7ccODPpsVy20GJM7zULIGGkNwOTIsSjD%2BU%2FxStyXLG%2BSd4F%2B4%2BOki6EuFVwtmg9%2FQNIZ7pRJeHmYvtfv2vsMxNnliqywAU7b5eX2unAou5JLJYdMwiMg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c634976ae75c3eb5a531667db12e09b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5df75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-04-22T08:48:38.05083Z","times_seen":718,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/css/app.27a8d61b.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /css/app.27a8d61b.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QpNHlaBYExt5HdDPe3OwmU8CUzDZt1GwrujLIM9mfIiioroJgwoU%2FV8bU94CbrejysKadGCO5nX7RJajBb5a%2F1CDpnS7fR%2F9IcVZSgL57EQUZTyJGQJcwh3%2FEb%2FuT6KrW3Ap\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8caf8f83d27051406500875f97411485\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5df85693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98491,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"9407689f0e0ce19c0ba41d6cb3e06623","sha1":"83a1d2a3cb7706673015b5198b1f2bcad773d4a4","sha256":"6f6ea46a6bb3c2ea8b4393ce8890d0790652e5a2e2ab475ac483ace4549c8636","sha512":"2289a53b6171c9cf27d9bca5ef4ee96859feeb56ae9f9d26c466a8a3bc4d05eed1a6fb2fdf2f83e552f15c70886f48c32aa04e4d4ba1010ed60a4d8239c785c1","ssdeep":"1536:duT4nuu8IktP2dPUWlmABQNNP0vf6yrtayUz6J1jJvX:dvuu8IkYh2oAye6JtVX","tlshash":"a3a33171d64a21e67327d55fab44b36a2375f37dd0412fb9f02b641d8ac228213d2b2e","first_seen":"2026-04-06T13:06:16.106263Z","last_seen":"2026-04-06T13:35:43.763827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/platform/dev/config.js?1775480739918","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /platform/dev/config.js?1775480739918 HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dz8RFWJ1PM1hGMVL1%2Fzke6ybMGZqihcSH83TJy1nR%2BOd7Lg5KVd8WHsAEOz%2B31Cmp7J1JI%2BXyDD2ZN4ESTW8lgXDEIOR1PEMzIfCtAVe6EKDDiumh6AohWNj6gCFCRrkd6T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa4b7b198480adf613ae68399ac1b3c3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81016159ac5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"e1989afade3fb21bee29204f8a302235","sha1":"56e7d179d175adb05fb8c178dcee731f2b415732","sha256":"8377a1bc8b582664fe3638253d74551c4118a55a0447cb25f0324a16dedce939","sha512":"144ad95ca2ec57b7f7ffbe87f680dbc46b0d97c5502cf9dc74ae585a266af41ef5b95c9ef78b159dee215f9fb46e3a55853979227fdef637dcbfe343c7fa6507","ssdeep":"","tlshash":"c0e0e58769d48c1570380be68d8c713af620873b8b2d462b39bc042a2ff2f00d424c68","first_seen":"2026-04-06T13:06:16.107167Z","last_seen":"2026-04-06T13:35:43.747786Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getCoinList","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=meHJwauxqLDPgJn7wyzJcRHx4ZxlaBSQi%2F8D4Mda56LBBokbh7YX7WrUtSEol%2F9k3p8bFYaqGm7HQJZi1uNyANN4CCCWiOaFcLjrrna9CtzWqPScyjcfNiDT57f1X3DrXHEpL5A09IMnyw%3D%3D\"}]}\r\ncf-ray: 9e810166a81c56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21997,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a696e15502addf2c76f7b4bb2141fef7","sha1":"f33f86269b0413b27216700151417dd7aac6a699","sha256":"b47962785fbfc2572fd8f79244d7ec893dfbe4902dc981c39d2ea79694e0d78c","sha512":"f954425f1dcf55e85a30bdcc1cf594e7500936458483216af8f997ad7a6c220706e70a27cfe7eba8a902595a9af8f54ed4af12e9da880a9b82862a9b14ef3482","ssdeep":"192:VXe6Xj+XkN8XPqcXx6XBs0XDsXOwTXkPXyoeubwXHwY5K7ZYfvCKyPnjG3SG+/bw:HQrkQykP+s","tlshash":"2ba23396212894bdc5be80d12ebf791351dc352fecc98e1ad6ce8d8c8ed5eb4150af06","first_seen":"2026-04-06T13:06:16.099381Z","last_seen":"2026-04-06T13:06:16.099381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getAllSetting","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVvv2p30p1hmzYYMXa6yIt1MyZH5EwSH0bhPBHsOYTebg4os1iWnwPCpiaIpJSTUzEPJ6NUhqSGqZcOolKoe%2FmnDHz7hylcBoXPWScRoBNpnRb%2Fn9u1olvYU3UB77ksYf9ZVv%2B%2Fp82727g%3D%3D\"}]}\r\ncf-ray: 9e8101698b4656ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12617,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2439797bc36164c5902c6d976c36fb43","sha1":"ac81821eaf0e7b3d4c4a713ac0c29f7daf34646f","sha256":"b240beb8af1a54ea918f15b68999b00608ce55b8d75a246ddfc26177a3edc1d8","sha512":"293d7fdd3ee9d6ea8c1d6c2cb1048bb45d29a1d51eb412eaa311fcfe6700466a5a6605b36b3f4c2b08154c530da788cfb3904e384a3d848b79bea1050375ec5a","ssdeep":"384:c1nuGjDoFVH7igx1miO2yA45S7oANymLm2OnG:c1nRjDoFVbigXOHf54yma2OG","tlshash":"5142659e31dc8cbe93df5ac290ef3555a8dc2457dc98ac51e0ebef5cd8966b4480b009","first_seen":"2026-04-06T13:06:16.0905Z","last_seen":"2026-04-06T13:35:43.753738Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/solana.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.470Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/solana.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":259,"send":0,"wait":0,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/USDJPY.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.489Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/USDJPY.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2312,"timings":{"blocked":1803,"dns":509,"connect":749,"send":0,"wait":0,"receive":0,"ssl":249},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/15/342613e378044a768d10fac2ae2216c2.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.495Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/15/342613e378044a768d10fac2ae2216c2.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2596,"timings":{"blocked":2079,"dns":0,"connect":250,"send":0,"wait":0,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-res.oss-cn-hongkong.aliyuncs.com/waihui/coinInfo.png","fqdn":"echo-res.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.175","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/coinInfo.png HTTP/1.1\r\nHost: echo-res.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:05:42 GMT\r\nContent-Type: application/xml\r\nContent-Length: 333\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3AFA6794D103837BF47D1\r\nx-oss-ec: 0003-00000905\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":40,"connect":267,"send":0,"wait":266,"receive":0,"ssl":548},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/GBPUSD.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.487Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/GBPUSD.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1094,"timings":{"blocked":593,"dns":0,"connect":246,"send":0,"wait":0,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/element-ui/2.15.6/theme-chalk/index.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/element-ui/2.15.6/theme-chalk/index.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iG9A4%2BtlOsXPzXtZE9OH9kwaOcb5GcQH7vwRk3gUTqyCWZJO9El4xbZZzJp8uI9pLQOP9wRUFYcuuGsnzBtT6nuxLmXAFOmm%2BEv44TlKKieTLaCdOkx4LvaVlxuXhRYOIX2f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23300b6350f23a24e367b69fb85276a4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5df05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238640,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2e0bf3411d54afa6402c0f114fc5a7cb","sha1":"0fcc1045629f8fa599d74eb33e44e5eb2406fd49","sha256":"c8df4deb1eaf507ea9e4c383d563c8f3bb6d35c0df018d5623a8e93d28df2a57","sha512":"4552f7d4f4119c1421778860f37fe49c27c28a0f77f957a9f176fab0001edb32e7b999a718e527087cf3a9c9c1c08d2e91daa01d357c2738fd48b606c47643a8","ssdeep":"1536:f28Y7SrW3YeWXA1u9w4HCe/l4Ttg5fqMEL0e/78OaiZkW1YO8eQFsGmtf0IcXyrc:k3H0Rkfeyl1hUEDw","tlshash":"0b34a7219b07216b612bde6db6c0ba895f18c323d4725bbbfe95740cc7d34891263a4f","first_seen":"2025-03-06T09:16:43.421068Z","last_seen":"2026-04-16T15:51:37.946522Z","times_seen":30,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/iconfont/avue/iconfont.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/iconfont/avue/iconfont.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nlink: \u003ccss/app.27a8d61b.css\u003e; rel=\"preload\"; as=style, \u003ccss/chunk-vendors.b57e4bfb.css\u003e; rel=\"preload\"; as=style, \u003cjs/app.a8f3b37c.js\u003e; rel=\"preload\"; as=script, \u003cjs/chunk-vendors.c7084fee.js\u003e; rel=\"preload\"; as=script\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BChWGURTYXvEPZf4XA7MmaAeHMPsSk5rMcVTWFPK8EbAhJvnqJXHMIXI6CrwHLfYSklZ8QBy1fKIqltCLFU8L90d69VWjnqHNTMuhXUxaKPc9tt37%2Fxpu%2BgmxX4lK2Wh0sX8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9e81015d5df25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/img/banner.81bde0f7.png","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /img/banner.81bde0f7.png HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 137583\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1ed1d78da7731840df8f4c6d1a016f2c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flCN2YAKtxldr4YiAuHMGvcFhG1e0Kwj3rtqq7EWam8IHhitcqlumFb%2FWUQuYiXGlX2dVuuXEybAY7SNJYHw6tPdGez%2BKZQGwsXL7977lhNj9jZPfQ7fOmCLr3iA%2FlZvaRBW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9e81016aaa605693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1096 x 982, 8-bit colormap, non-interlaced","md5":"81bde0f76b8d8c587f93c31ca0118911","sha1":"d7696679f1f1278787cc6242af6a2e9a9af49ccd","sha256":"b3c59f9007ae88ab2eb802cf5b2f48e0c8fd71d96e02182af7975cf0ef29350d","sha512":"c7958c6ace2b3db1cea047c4373ff2722b43da16fc7993f748dc87d6f4ddfe0946f36c7cadd76ab9e25e7e4b316636d4a208dbb1f2623ead1441676336ca890f","ssdeep":"3072:o8xzSTATdbv2PiNXSQy48F60fv1h089EECVPYTUlki5rWx6M6vD:n8ATdD1SQy48gOv1hDCmUlFAx6MED","tlshash":"46d312d39adb5b94ce0788707341af093dae6a21fdea24514089da0f55ae3b48dc093f","first_seen":"2024-08-19T17:34:46.604947Z","last_seen":"2026-04-16T15:51:37.81515Z","times_seen":85,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xau","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mSKkOV1DyNNZi%2BDkR4tz0ZLws4sqs5A5ZKVTJuBfIgR%2FCoOlagurwyJZqP3929dkPzlMUwzUgUYhoKFznSgD20Ayd81r1zA43P%2Fij5goCrgtZaP%2F%2FOLa6Z%2FosoegXT4zMVRbOJTgvxMAag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81016c9f0db28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":756,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.204Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/9e6ec6d5b9f349239a7195dc51983194.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getCoinList","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hv0ggkXnsHYc53mgr%2BdigHI7CfTPKTgVYqjZfjDILtnP2GShzCS95DqSg1qECB2PWqhf0o7d0s5Hr0AOELHv49H6mPOP%2FqztbRTn63yknOsok%2B%2Fbi8MOWdQzVwvWTn6t2Xil7umzFmh1ww%3D%3D\"}]}\r\ncf-ray: 9e810163bce156ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":924,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/vuex/3.1.1/vuex.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/vuex/3.1.1/vuex.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39p7BL8btqimu8yZRB9m3khEMi8Qqk9Ul1%2FgCrLCDvSDjt1zduIR2r7%2BgSsDjo6d1VsksKx0vKZhY7NHOXpwK7zQls1cn%2F1VvbicojRmFc4ATZIdVVQhs7HN5Nb8Wl2SxiID\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a797fc3b04f19c0c429764d72ebd3992\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e055693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11658,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11593), with CRLF line terminators","md5":"523fd0003a2d5752369f3a6c1ed2e4ef","sha1":"700851f0610166761548335ee7eb3abfcac2af2f","sha256":"39bd72dde7538a33e2fd11645beae7b0091104be75aec5f655883058c0963773","sha512":"111899e8a1537782b6d2846cdba31fec448a517b14b29a5941dc7b15e5d9c7fcb279cc0323e42897471ec0643a0b489ca1c7b7b193fa435a859ee1761c8343da","ssdeep":"192:aiDaQv4w9nWp4UvouC3Dqs/778IG0zqLVFcu8XCnrdVpVAQflmGcXg3H8VnbZqlp:aeJgqnWp4kYj78p16CrdKMQ0CbMB+a4+","tlshash":"ab32cb9a73e1762aca57b0b0ac5f9c08f275a9dc1686400c6a4dc0f99c754bccb7ed9c","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.768674Z","times_seen":51,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/element-ui/2.15.6/index.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/element-ui/2.15.6/index.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bsig4u8Ccsz8TwLufGjefk%2F7xtIEWyiynEqdk9ggr2trB0LydutOXxlRqFJDAUy4p9SORbZ8dA64WnSzuUyCDBWP53wnLEC116DTia5JWGHr%2BDJ3xpY5pyGrSmJL6iQ6vaPo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"96d07487a229a66e80947501a893c1db\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e085693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586253,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65105), with no line terminators","md5":"693f98461ce3fa58cbe5ac24d9a21b1e","sha1":"93661cc05514da433809e79f229815ae1ddbee77","sha256":"24ebdea828e938d3a45128b41979b320b4cbd40c8c0d4bad6a9cd9bc3bfa4e0c","sha512":"2dab95b96bfccc9f78069504b006adc198531831c53c81b23b8d05163428f0a66beefe7d466452e7142cbe98419e36d327b20ab24dd3c25a05de9f9363e05d3e","ssdeep":"6144:B4lry61ETrc+kymEidUVM+u0kXzVXsnDBH7SuLH8isMZgS7Lu5:2U61Wrc+kymEiuVM+k9uVHOuD7Lu5","tlshash":"d3c41b8d72c1b5314ba36070503f250bb33b299c680980dcb679d8ea6dbd949526ffbd","first_seen":"2023-03-07T13:53:00Z","last_seen":"2026-04-17T18:50:56.79088Z","times_seen":408,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/avue/2.9.5/avue.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/avue/2.9.5/avue.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jVIOGSuk8XhwNmhSylRAKb7tc8BiAAMpM%2FdZDqbL4cqyK7fP7CnkmeGaTZ1m5GUL58MI2ioqWfEcC%2F1mek3FF16BX2Rp57EwIkoyJx%2FaO4t4icjAWlbxwDF3IntyECxK88CM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0dc6a594a47aba95de5eca3c1ce00717\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e095693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300361,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55624), with CRLF line terminators","md5":"d89b4133a3ce4ca2f3eb6637cc136c9b","sha1":"fa35953c859b3dc04037e2b76071d4ef8f797010","sha256":"4b27ebd2aa41a50d78bbfe53bb88b14a0ec9a0934b6b8149537521d4f018fcf7","sha512":"d1db2f0b2e91a304edcdb00268630f09834b36512623d08f26a75c085c43bf108e95ed004e450637794cbeb884c3fe3162b9d71213b550da1e319dba654ed9ad","ssdeep":"3072:YmWzlkGK5sx4v9rD/2S4oqJNtvywiDjD7TefeKceKsT1/tF8vUoa:YmlqJNtvywiD37TefeKceKsT1/XBoa","tlshash":"9d540959f1cab8750ad76070003f210af2372b896409d0a4b679d9e1adbce4da16ff7d","first_seen":"2025-09-09T17:59:55.892942Z","last_seen":"2026-04-06T13:35:43.749249Z","times_seen":6,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.199Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/c730913a9ab1494d92b9bb71ce7f97b5.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3950,"timings":{"blocked":3436,"dns":514,"connect":772,"send":0,"wait":0,"receive":0,"ssl":269},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xag","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S%2BmjFd7KR7z5gB6pISgJz3CQmr6mY8JiFI4q3vzbpfbh4lPbx4xPooLpnrPzuS0LapwGMDJfpOVyfHEoVuQBev5ZdhCLXWCfDHRTaRilTjsvVGhSJpatH0hnDGBJQp%2BVdLjca9QnsG%2FHVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81016caf1fb28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xau","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:42.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKNJvHV3zglhbOBSwNuP%2BXjlWGpmVLgCCV1OgjPIxf%2BKOl4VCNQW734KGTxQFx17AYeSOjZiMnM9SLXBJfohgf%2F6ayW9Y0EqvP42crWKN1xeY%2B8w%2F0DruGWfINdUBp3%2Bty99tVxaQfcEWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e810171ce50b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39485f77752b7af4d66c2f0581335545","sha1":"5e2b38f174cd8f28d4e63e90e905aa19998c53ec","sha256":"645f3759a471e028402a9de514682003e5eb9e0aa36af287ec1a54c03e929622","sha512":"03615bf1ff6d98c0d822917ef76282e66d6a50cb488e6d09986b9c78c26b70d090b7788ca324616b63d63f5685fe7fb8efcde81e5643b48c0fa696c5b3b312f9","ssdeep":"","tlshash":"319002555c198242ac8300a5954a130508253264262492488c59917581c826a2090859","first_seen":"2026-04-06T13:06:16.112288Z","last_seen":"2026-04-06T13:06:16.112288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xag","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F34lVlzKxxtakVc7TmhOubVT1BAiHniTQFs6lJmDtWH1p1KP6g59mLoa%2BsyjWiIKWA8uGpip3NzRCNKlek43ZwXBVLJwJ4gBt5r05PCnt5AajcYt0EhTZn7knnRjSG19Z1uGi74f3BvWUg%3D%3D\"}]}\r\ncf-ray: 9e81016b4d2c56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"apiweb.imtokentrade.com/ws/8a4afb09-5376-43b2-bcf8-2e6762fff4c3","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"GET /ws/8a4afb09-5376-43b2-bcf8-2e6762fff4c3 HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://imtokentrade.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: y/YSuQauqm0RJT71dQ/4Jg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 06 Apr 2026 13:05:40 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://imtokentrade.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: CcjLOaGTMyCNoSIYfHex/mb2v+A=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xjY9NSkMakns%2FqAsnRa1yQjTuWscEMyyWoxOgc25HWlWDtb6Ijqe23X2XDGS6JzhFPVFdSBa82GFB3U9oFRvqN%2FvOMSn%2BUgzpqcYb6%2FvQWSAg%2FmEjn8AajDaDy1fkSlLUOfZsmHiMsjzWQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nServer: cloudflare\r\nCF-RAY: 9e8101618916b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=479\u0026min_rtt=441\u0026rtt_var=153\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3123\u0026recv_bytes=1204\u0026delivery_rate=7528596\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=0a661ee6615e52ca\u0026ts=801\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":0,"dns":24,"connect":24,"send":0,"wait":759,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/img/logo.6da5054f.png","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /img/logo.6da5054f.png HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 16769\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9473ddb1dc701a8f132514eec3e78b8c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jM9wlKvVEoZggc0m30%2FkBDKRv9tSh%2F1OnmGYMUNjW3Z%2BQ%2FDdg%2FEtTZTMxvPALHMeCOe%2BtXVW7TEp%2FiIjDty%2BN7MvI0flz4G8ZrNmGrVVx5BkNBf22hSZhrDbHZApiRHBgoJQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9e8101639c3c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16769,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 512x512, components 3","md5":"6da5054f2648e39def8667144910b037","sha1":"500fc0298f33733a826adcff9cc03e9c72551a9b","sha256":"f2a102d5a9939da1e1099a6ef5052b274ffd47519ca12024273c1d4ca0bf73b1","sha512":"b777bde279d8e39fbfc1c2bc4834afa1e100b378bb3f415176cdf275b47c4f837d3d6927385918639d9f9c2c24412210db54a582a9ef31fd87cac0634b2392ce","ssdeep":"384:0wD2/ZB7ug/Pc5GdN9yKUbbbgRwBBBBBBBGgKsJE3K9Mu9z+SgGtWQwcXPNjPY9W:xcB7ugHwC9yKUbbb1BBBBBBBdKC3zBge","tlshash":"fc72bf8167824436e4860df4d3f9b916fa05a873b627d7c7e05d46080bbfc66ee3a308","first_seen":"2026-04-06T13:06:16.113296Z","last_seen":"2026-04-06T13:35:43.781409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/notice/list?key=ROLL_NOTICE","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZVTn6Ol2YaTTXkp4c7pH58atXJZ26KzPq62sErVQJMOjYw1LyStvAEl3iCDdR8kdnmq2fy1ukMfh6fHxmtR8i9EU%2B3QhDHZ%2BF2EYAiw8crHeMnRB2%2F%2BO9k%2FDGFUYRhMKzslWefGxTYy%2BIw%3D%3D\"}]}\r\ncf-ray: 9e810163ccf056ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":916,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":916,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/NZDUSD.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.484Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/NZDUSD.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2049,"timings":{"blocked":595,"dns":1454,"connect":1717,"send":0,"wait":0,"receive":0,"ssl":274},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/AUDJPY.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.490Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/AUDJPY.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3144,"timings":{"blocked":2856,"dns":1,"connect":253,"send":0,"wait":0,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/css/chunk-vendors.b57e4bfb.css","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /css/chunk-vendors.b57e4bfb.css HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cATzzHkUjBcMRmhGF%2FLjA4W2A%2BV5AUUZXiuhCog3REEBJYFGnh5BzyXxj2v%2ByLvGKaqsdQ2C2DK8R5F9nW4BY%2BVHWdLy9Q87O9ShR1Y7d5VXWe%2FPhvCKndLzg8Lz2sSB%2BM3E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23944e826f605be542f396a4ada518ec\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5df95693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1182), with no line terminators","md5":"bfb572ddf961ce1e5d366017ddcf75dc","sha1":"5581fb5a4ba4645e0c7a08788b80c8f9adea0321","sha256":"10092d48c11ed6efd7474aa904ac1d89d6ad919b01efcc718fbb93715a92d87a","sha512":"f088f406fd3511782ff0fc2dbfba3d2adab4e676fafbba20235ffcb845b6bc275cbc08fa588251b3a317ec35a7d7c6d663b05531d89748bdcf6cb75af298795b","ssdeep":"","tlshash":"c221ab32cc900566a2276e07b6ce0a9a03aac602913bc1dd7f557519c386b6c1cdaf8b","first_seen":"2023-06-15T19:02:17Z","last_seen":"2026-04-17T12:27:21.618441Z","times_seen":182,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getAllSetting","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfynEgIyP3CVqcYFJFIEyMCtU%2Bbcwuaz3TIrB7313fBZ5oNX6kHAUm89xYl0KKNyxwyJbKcLUK0cGSQlyIoueygqVSFEbzzVfgzZzbhbSDa8iY3qMUIh6GZsUWie6YjFHa%2F9TY7JZ66%2FKQ%3D%3D\"}]}\r\ncf-ray: 9e810163bcde56ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":743,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/83f37c71fb65483587967faf88655d1e.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.192Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/83f37c71fb65483587967faf88655d1e.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/15/fab03cc8e2404279b3203cc7f5d7e5f6.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.496Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/15/fab03cc8e2404279b3203cc7f5d7e5f6.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2378,"timings":{"blocked":1310,"dns":1068,"connect":1317,"send":0,"wait":0,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/img/invest.369770fd.png","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /img/invest.369770fd.png HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 14745\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"59adf56c1ad94df0f77e25c0cd616890\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJ2XGl75M09JMHpOTt9tUJn67RlXEBYBpYEJJS8gLJXPHo%2BjOumUVTsHyEDchdTcfWztOQaQuNlOVM0LQhwV5FED3jNHoteUpWlUrNT6hnCItTKMT1xyftKWrxRUJ8odmJyK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncf-ray: 9e81016a6a285693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"369770fd998825fe249bf196d63b01ff","sha1":"c67c1216f80688f0ec760fee4ad9bcfa4bd736c8","sha256":"8c7e97c30ca5277d666e690246b6ed8e72269501c49802a6e33caf2b8074dbad","sha512":"9bb55b0025e544d29dd3a03e38f56d0af2f8379dddd545b3e3979782ca1c5c4636873e34ede9ca7363565e752a707ae2e10c1c4a5333bc49d7e5f1c1e724de64","ssdeep":"384:dGJvXvgQHEEXyJUZOWhK+lQAOUaYrLPbK8jN7MlXp:dUX3kKZOW9Qh2NgZ","tlshash":"e262cf42b9506095b01accaa541ab6ed6ebb8b2cc67f62ffdd51060c2560873d34be6c","first_seen":"2025-03-18T04:06:10.351045Z","last_seen":"2026-04-16T15:51:37.862858Z","times_seen":17,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/fonts/PINGFANG-SC-HEAVY.1965ab7c.ttf","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /fonts/PINGFANG-SC-HEAVY.1965ab7c.ttf HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/css/app.27a8d61b.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:41 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zd%2FnT4cMDFeV7cK6uM69PW%2FkPphzJvsNFqHEYMVbGWEX1AXxjQD6Wq3h8O690CX2nfscW3AEAzjO3RJcSalx4aSXSxcZQNSEV5mVg0EhQVUdvjLIzYWSpZAf3VQ3ccni5JYZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6c69ea7af9ffefb9a5786a119bfcfc61\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81016a9a4e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11114788,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"BASE\", name offset 0xa256ec","md5":"c11d4835ea9813d0e654d4c375257421","sha1":"44bdbe2b862dd5f236417788db8b286ebb2265af","sha256":"61a3b6d3ef3960a85ea310f8667b8615da678e9edea8b5036c8d9a09aea7169c","sha512":"1fe75b597c55aa2319b1d0efb5b02e4fd4b4e8a4772cf321100658f80957481254e68756b2e90f2cc7bdc0f585043659a10af097d18995037bd4e59917c18938","ssdeep":"24576:BkgBFPX1+oxFnjOPwVgsVDQezA7FEWXS5ltkCbudYqrj2wn0:BkkZC1q","tlshash":"07256dd3c7c87d299a21fd3c2510f66bf48e50088a25d2f9cf672f3618569744ea8eb1","first_seen":"2025-07-29T21:26:30.325138Z","last_seen":"2026-04-16T15:51:37.881444Z","times_seen":30,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":449,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/cdn/axios/1.0.0/axios.min.js","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /cdn/axios/1.0.0/axios.min.js HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmeVgNykz1CcFMvvqW%2FTnUOL2RQHlf2LSC198c1fj1OGJr3kzs9otiLjGlUD%2BLH2Y1VEo%2FmrqcW3INaYDl7%2FYRe0FfPOK5plGJaWk6PgtfOFWcHIMaPONfX9TZVO1zTZoYCR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"278d3ae828fc9b6b2751ed3162880de7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d6e075693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12977,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9720), with CRLF line terminators","md5":"c42cd03c654cb660f17ae6082bffc47f","sha1":"bedd2879ab587dd9f5e6b1fe5df95f857c31ff10","sha256":"104840bf105259d57d70c1dd737c254d63a696ff7c20bcb1e26d5b00c5a46d45","sha512":"36ccb0591342cc562e2629331c1acef96f2f60c66493db63364aa3ac69d42be077ed2da56cfb5b650a9467a1470745c3065a7e288131a6ec76257be1820640e3","ssdeep":"384:Kao8KsKMMT6nbNp0nkJFP5F0YS6DagzzNYT9ee8u:sGNp0EPb46DaT9edu","tlshash":"9c42a7ce78a1b4d747e320f0905f5a0fb2b6992a644d84b0e560e8f66cb546e8737f4c","first_seen":"2023-03-08T16:18:48Z","last_seen":"2026-04-06T13:35:43.783469Z","times_seen":59,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/litecoin.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.465Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/litecoin.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":3353,"timings":{"blocked":0,"dns":0,"connect":244,"send":0,"wait":0,"receive":0,"ssl":268},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/EURUSD.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.481Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/EURUSD.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1858,"timings":{"blocked":551,"dns":1307,"connect":1552,"send":0,"wait":0,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/XAG.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.493Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/XAG.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":1580,"timings":{"blocked":1089,"dns":1,"connect":240,"send":0,"wait":0,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getMt5Amount?coin=xau","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nauthorization: undefined\r\nsatoken: undefined\r\nlang: en\r\nlanguage: en\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:42 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jl5Fzdw8LqjrvDHGB4WBjPdLRreovh1jMl9nuvZ4RKbZt2c7YGzocEGjZnuRTwvEAyCa3ukzRLVvRk%2FKhMwsJ9OGRAPSmzbl8DQHQq%2FjKWrXaPJKEf%2FvVityHvA4Uih2IemAG%2Fr2W1qPJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e81016cdfb7b28a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dcbd53f20aa899c120e019c71f8817ad","sha1":"25477fd103890bb77dd44a94d2701e11f9dbf8b1","sha256":"6e88e88c458336517893dde7a01a7875c44eadda3903392fcce341cd8a01f8b9","sha512":"2cdcab43772f35eb829b2f0b7a93f13af4c23f08520155bac77e7805353dbd42d78b919ac334ba0ca6fb294280014e5a1d7ab68bcde48dbf6d96474b0e3c08b8","ssdeep":"","tlshash":"6e9002551c189242b8d300a9955e1344042431603624924c8c5a917585c85aa2050858","first_seen":"2026-04-06T13:06:16.11704Z","last_seen":"2026-04-06T13:06:16.11704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtokentrade.com/svg/loading-spin.svg","fqdn":"imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:39.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 16:53:32 GMT","end":"Fri, 26 Jun 2026 17:53:25 GMT"},"fingerprint":{"sha1":"92:A8:42:E9:4D:30:96:C3:D4:34:A6:E9:05:D8:B0:BA:C0:34:A3:F1","sha256":"4B:92:73:2D:28:4F:09:DF:5E:78:7C:27:F1:ED:7B:31:30:14:B4:F4:1A:05:BA:5E:0D:42:41:B8:9E:1C:8C:25"}}},"request":{"raw":"GET /svg/loading-spin.svg HTTP/1.1\r\nHost: imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:39 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liTePmucE9%2Fg3sOdAw7PrPx0XloY3Qolnlz4Owe3WEJzSAdz6PNBMy6EKYM1pR2wj4l%2F0mKFUUotPIaMhw9819Gieta56jYKYfWOwY6GT%2BuqtQ0z%2BK5rIojWwgi3lPSzv4lU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3781ecc1783f8bb78b15bcc982dd82f9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9e81015d5e015693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":427,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31a9b11cdce0af3a0ca817feac16bca2","sha1":"9e23296a918527cad7c2f18f924cd7495ba47e7b","sha256":"f86249ffdd37baae182d331b707996c6c84188aa614f53d070d870183fc0f9d8","sha512":"e8222ea12f935b1dae6d99502faa3f290ab3812b03a97a0a5600def81093060ccbad8b36a4dd5f947d95756a86159881ec96cbc4ce5936fc277d7b028c4760a3","ssdeep":"","tlshash":"31e02bb9ac5e770f003e879b7a6cd840239dd2f166050492f72c3c3b680f418dae710a","first_seen":"2023-06-27T22:41:30Z","last_seen":"2026-04-16T00:38:43.821637Z","times_seen":40,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apiweb.imtokentrade.com/api/common/getCoinList","fqdn":"apiweb.imtokentrade.com","domain":"imtokentrade.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:40.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtokentrade.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 02:37:18 GMT","end":"Wed, 17 Jun 2026 03:35:10 GMT"},"fingerprint":{"sha1":"50:43:75:7A:21:A7:08:B7:8A:1F:E8:DE:3C:6D:6C:10:AE:0B:CA:7F","sha256":"25:C0:E2:7A:0B:E2:94:99:5B:BD:79:94:C0:EC:65:BF:0C:53:60:71:59:3A:47:1E:C9:49:69:DA:D9:98:34:F8"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: apiweb.imtokentrade.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,lang,language,satoken\r\nReferer: https://imtokentrade.com/\r\nOrigin: https://imtokentrade.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 06 Apr 2026 13:05:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://imtokentrade.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization, lang, language, satoken\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8iRE%2BwEj%2FTVQE1QhI%2F4PS6%2FpzyiUg2JTmm1GvZqp5cfgHf7RHdaoQ3ob1EnQEwvFQRjO%2Bjpxohcw8cBZeZEqEzQhfDtNTT9mlF0%2FqJLU7njCqaO9imAcT6q7M%2Bdp7bQ7vjGg0FfR5BIlqg%3D%3D\"}]}\r\ncf-ray: 9e810161fb6356ae-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":900,"timings":{"blocked":82,"dns":7,"connect":14,"send":0,"wait":742,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"apiweb.imtokentrade.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/01/lever.jpeg","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.480Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/01/lever.jpeg HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2394,"timings":{"blocked":550,"dns":1844,"connect":2112,"send":0,"wait":0,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kk.zetagl0bal.com/daou/echo-res/2025/04/15/5f1e9e7ec7e347008a46d7fdd79c2b3b.png","fqdn":"kk.zetagl0bal.com","domain":"zetagl0bal.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:41.497Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /daou/echo-res/2025/04/15/5f1e9e7ec7e347008a46d7fdd79c2b3b.png HTTP/1.1\r\nHost: kk.zetagl0bal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://imtokentrade.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T12:09:26.497459Z","times_seen":14060157,"resource_available":true,"data":null}},"time_used":2849,"timings":{"blocked":1313,"dns":1536,"connect":1794,"send":0,"wait":0,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"kk.zetagl0bal.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shipin666888.oss-ap-southeast-1.aliyuncs.com/%E8%A7%86%E9%A2%91/shipin1.mp4","fqdn":"shipin666888.oss-ap-southeast-1.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.48.217","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://imtokentrade.com/","date":"2026-04-06T13:05:43.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ap-southeast-1.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:21 GMT","end":"Sun, 23 Aug 2026 08:21:20 GMT"},"fingerprint":{"sha1":"B9:90:C9:A4:F9:5C:D9:49:DE:99:F9:50:6F:7C:79:A9:07:4D:8B:1C","sha256":"C7:2D:29:D0:BF:4B:5B:A3:1E:70:8C:EC:31:B7:94:9E:7A:9E:C8:DC:DA:3E:FD:82:74:D1:49:D0:5D:DC:01:2E"}}},"request":{"raw":"GET /%E8%A7%86%E9%A2%91/shipin1.mp4 HTTP/1.1\r\nHost: shipin666888.oss-ap-southeast-1.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://imtokentrade.com/\r\nRange: bytes=11927552-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: AliyunOSS\r\nDate: Mon, 06 Apr 2026 13:05:43 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 23167\r\nConnection: keep-alive\r\nx-oss-request-id: 69D3AFA7D72D20363716258F\r\nContent-Range: bytes 11927552-11950718/11950719\r\nAccept-Ranges: bytes\r\nETag: \"16AFA1D9B8A0DFC31F743467D051B6A5\"\r\nLast-Modified: Sat, 14 Sep 2024 09:32:45 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16108348908044795448\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23167,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"4800ef247297f25d863add4a83165043","sha1":"d1579ce2e9b9780a79e6973377047e8b3ca15c72","sha256":"758467e2f317ac264884f382f7bec1c4bb33b6dd278a27d20cbe5ec03421a5a7","sha512":"bd4af4a4ff9a707360538e45e8ad8b34f0c9bc895d627b91331deab92c40cdb151a7bdf4f6963810de70e12ebf782125cbca4808ace8552fbfaf1747f12fbc7b","ssdeep":"384:2NsWV6+6L7womPOklR9XsJDC9uqAry3qnerq:OJV6t49Qdryhe","tlshash":"cea26a99f3754453da580bbd09fbc752b724e220375b4b4b53487b09fda8a94ae234c8","first_seen":"2024-12-31T04:07:32.409815Z","last_seen":"2026-04-12T06:33:18.417381Z","times_seen":8,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}