Report - getimtoken.pages.dev/

Report Overview

Submitted URL
getimtoken.pages.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-19 15:37:01
Access
public
Website Title
imToken | Ethereum & Bitcoin Wallet
Final URL
getimtoken.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
74

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
getimtoken.pages.dev	unknown	2020-09-02	2024-02-11	2024-04-11	17 kB	2.4 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet
2024-04-19	medium	getimtoken.pages.dev/	Crypto/Wallet

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	getimtoken.pages.dev/2ab5d871ffbcee3b5a5b9.js	1.7 MB	2024-04-19	2024-04-19
Pretty URL getimtoken.pages.dev/2ab5d871ffbcee3b5a5b9.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 17:37:03 Last Seen2024-04-19 17:37:03 Times Seen1 Hash 7c1e34caf11ad291f9dca150753d86fa 402933865e08090ec04400b808f138cc9b237705 5c3526b1e5ece1c3c1751ab6985af6c773c2da02a6393124753fcc5fa6710cfa Loading...

	unknown	34 B	2023-04-11	2024-05-02
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-02 19:40:44 Times Seen75925 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 0268d5f47b5d8d26caa10fab2d17630d	1.1 MB	2024-01-08	2024-05-02
Pretty Observations First Seen2024-01-08 17:46:07 Last Seen2024-05-02 06:49:08 Times Seen295 Hash 0268d5f47b5d8d26caa10fab2d17630d 48fd4feaca25e166b5195f018d69e00eda4eca3b ff96737bddf403db1ba3ec5c3400fe449d9440115a27866d2dbb6eecca04c66e Loading...

HTTP Transactions (37)

URL IP Response Size

getimtoken.pages.dev/app-example.png

188.114.97.1

200 OK

15 kB

URL GET HTTP/3
getimtoken.pages.dev/app-example.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
PNG image data, 720 x 316, 8-bit colormap, non-interlaced
Size
15 kB (15374 bytes)
Hash
50dc94f68ed13a76f5ecf3f44a3b4700
79cd47a2e9b02e72884d23c10db40cb9fb5fe107
6d879640fafe9b02ff62caac7fb998f7b8c23bae0a020124054a22dfaf433b55

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /app-example.png HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/png
content-length: 15374
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "b0e69bcaddbad17f775640623ad4f8a4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=34bgg8Lu3MMV%2FBxUgxMjvXXFk8BU4O530WG0OHLU0js9WJzg7o43mCAUDJISTuAl6VoNzGH7u5cQynAxcLMMpQKwzqQVeTbgDW0bwnZYDfErGtVK2tcgdHEji%2FLPWM0eJrwWuq%2B9fA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8c7b4ff-OSL
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/banner.png

188.114.97.1

200 OK

46 kB

URL GET HTTP/3
getimtoken.pages.dev/banner.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced
Size
46 kB (46178 bytes)
Hash
ad9792ead2ce10cf4db72cb8a5ad7abb
1eafd79d8630feebc01d806a4bf525b0c6b1e0e8
e075e1cdad6e176e330ac0f927da14388ba5ad54cc0888b39dd54051b9987e61

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /banner.png HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/png
content-length: 46178
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "3c5f5040716ad1a762d93efcfa89854d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ld3GLTysolHlaG94BG2VR22nNU0ET0t0J9pyWJxCNZ9edSyfRegS91y2c5DCOg%2BWePM%2F7Diq9Jsa9%2FKWQ01J%2BMx6F0nCwegXN0Tg88wjAw6jJs1hklmwvbd6Mv7FLvargRvFVTzC%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8a1b4ff-OSL
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-consensys.svg

188.114.97.1

200 OK

18 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-consensys.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
18 kB (18044 bytes)
Hash
e6c8c3635e46cc20c06379fb68fa638c
8b1ecdf3c884347449e8eb40802a78e8d8c8e258
7d39b719ac59dba8e899accd2c2cdcbcc4cfccdb8ac7a05f74d8c866373034d4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-consensys.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"0cb78a911e05b645d8ef999099cdaa49"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DO3hZkx9IatwFhZ%2FUuXbgqRoeCj23m79dMYL%2BrLhgVKtW2w2TjHYQIAxPrI04YnJrj6ooiNBCNgvX7a5lPxOdUyklTTA4xe0FSxhCAXD3eEXecqZtyVgkCYcdMltB08JDKWw5Px2oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8b3b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/tokenfans-1.svg

188.114.97.1

200 OK

2.3 kB

URL GET HTTP/3
getimtoken.pages.dev/tokenfans-1.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
2.3 kB (2297 bytes)
Hash
4e04f06c03173fda09427b277300b06a
6929723c8522f86632090ca657e45e132f1ede02
2ffb6220e64d52868c4ac80421efeb49c990bac0af584b00987e76a541b23e6a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /tokenfans-1.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e5f12e9637e891f106bce865a813e491"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1di4xEFXY2uGoxC5x9nPH7hv1fFSZbI3MyTXMor2YNWJmpOlMrw6yrYG2Wu%2Bo2S9VGFZy%2BK736zIwx1kEGVuBaWwP6DTjCy6RSP2729%2Fw%2FrdZJoQ8%2FPmip1E4ZlEYSwPHqEQGy841Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8ccb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/index_1

188.114.97.1

200 OK

6.9 kB

URL GET HTTP/3
getimtoken.pages.dev/index_1
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
HTML document, ASCII text, with very long lines (22685)
Size
6.9 kB (6932 bytes)
Hash
d95594de774659025f5c616f6b3312ee
d5e67287fe787352c61ec56831161aa8f1417ab2
2ef1e2c764638606d5f21547290ccc768e81f9914b1b868f5043ed277b6b579a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /index_1 HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"759ba4ff7fec03b7a838f41d5780def9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDDiyb%2F3CdZSoP7k%2FMyPluBgIxyYyzgbPsMDnN8unK4Ph%2Fbn%2BSyP0U1%2B4RF%2FtAsUVuxgOolyCht1cyzxQ17ShsaGeW7xsQvS%2BWiseRtXM2e07ejkgBYlAi4CvC5Ze26WxYOiYsxogw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88d8bc5b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/subscribe.svg

188.114.97.1

200 OK

789 B

URL GET HTTP/3
getimtoken.pages.dev/subscribe.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
789 B (789 bytes)
Hash
78f86cd737a9a0fcbfc9f23b1478550f
4b36dbf9b0d3e338565618d31c6f7aee0a073d85
5f2206d50773ff3d50037d78573b8b661efb7acc84c1412427b6472f15ef578a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /subscribe.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fd88042bfa59b8eff510ddcd9344a345"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2dPXOVqG2nZvlM3qqp2HeUA%2BPyjsD3HC6ZgY4XYPqlFZ4A1kUSmrJzl7zTZns184x47bXm3LH2P5skjWCYKmi761dqzAghJqpzsD9tWwbpmSxka7CS5IyAGUJYWVbwiQUlVgAfHyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8d6b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/discord.svg

188.114.97.1

200 OK

8.9 kB

URL GET HTTP/3
getimtoken.pages.dev/discord.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
8.9 kB (8895 bytes)
Hash
4843ef32f5106881cea9a4da691223cc
6f806744b2e9dc22ac05491301d663c7cd01f219
76e374e9e73d1f9fc28f6d5c31bd17fe07819599a35cb431f16cadba6b71e612

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /discord.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"55d417f3fb01a9dde9f08d6b1f9995a9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eLBUEkuYv1MEE7pqOg0vngUCZIfVM8%2BQjVJV8gwIeZ8wky8Hv1MHfgKJkBysmknWU1H24KAjIX0uU73a5JPoAY6QlNgvSTw1EIPbvVcZ%2BkGN5AmfVhUdFN8%2FkNSh75iNsVmTAl9adg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8ceb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/medium.svg

188.114.97.1

200 OK

12 kB

URL GET HTTP/3
getimtoken.pages.dev/medium.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
12 kB (11814 bytes)
Hash
6a49621075d683c755db86def96ca77f
738d6ed4c702623f09a65afeeba6688d229f3f42
077943f1b01d0d63a8becbaa9f8a8af2aee71f368081f6a43576ce1e0da56049

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /medium.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bdaac7a4d28aa3f62a8c0dd74854723a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eeJgKgYY44Z2jB3vzdfSFU%2Fx%2B95KclnpuxQN7NMTiuIjQ5CwXDksJH7RBnuKG%2F8mg911B5nKwvaqCiXJa5zCkGuuZUjqewFzQvFS62E04MesSP1YaTwhOFhQQnI8N3Xyhw6qr1MtBg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8cbb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-slowmist.svg

188.114.97.1

200 OK

16 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-slowmist.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
16 kB (15759 bytes)
Hash
cd1543d84d6df21421d32250cabff94b
89d96677e7c5228a075a97cc92f965b6c34ed875
68a63273a5b96f112d1d41a2d3a480d99b49a4f45468b05fa4b29582720f9f5d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-slowmist.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3e0df999cbc945f905b97f3267454fee"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3H6d2x%2BY1z7Rn2SBCw9Sshrvc8Qi2YnwL6bN7tVJaf4iguNfBnAOL0R9TC6cvVS5ODtkW7YjZwc3uIiuh3sWUAgoCu6h300SuaobNgGxHP9OpKxsCvJje4rJVhkJGIo4SIyagGxnqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8bfb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-walletconnect.svg

188.114.97.1

200 OK

15 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-walletconnect.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
15 kB (15246 bytes)
Hash
31d494216fb084b7082d4a54a453d75d
35853344398fcac7b1b531728806ebf5c01ea439
d2ebea36ed0eeaec252edb040f075fb4b342fc3a68650e685387d87aaf33a513

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-walletconnect.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4a0b62140ac4ef37ac9077c3b0147360"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yGOlhuJaKDxuL%2FeY4ey0h4Zi71oN4UZdAfhDhRz6B1Y5tnuN2zvaooWEnoXok6uk6tnnrQKo8yiv8hKr1F2IEoqVkyYb3E0OvoyFZKXECSvKb%2FmwE6fnGacg9L8QXxE%2Fezv6tpT%2B%2BQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8bbb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/business.svg

188.114.97.1

200 OK

8.4 kB

URL GET HTTP/3
getimtoken.pages.dev/business.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
8.4 kB (8358 bytes)
Hash
5edce84229c2295c6fc6b49a18afcda9
8e93ee77317b040d252bea7e41da9a405d76642f
f3752af7aab239ede54fdd4f23390750ad0d7719e2a60b63ab35166965b6b9c2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /business.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a0a62c34dfe48d80280c114a5fa86820"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8hAOL%2B6zjNXgISc6DP20G%2BVkoX1W2lwkImlnUZbXnl95LkVBqRPEejwUYgPIfWtBRR0AaaCyU3KL3KNthHvfH%2FUwc9nY4I8YsTynFd%2BwlLEmbTrMeaAzKS6K4zAvx72xKq1BMjxxMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8c5b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/tokenfans.svg

188.114.97.1

200 OK

8.6 kB

URL GET HTTP/3
getimtoken.pages.dev/tokenfans.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
8.6 kB (8601 bytes)
Hash
ccb9eab093240587905ab16659346d3e
d4048ca15d5a35b99f83da664d1a85e2967fce7b
2c081b94d2a381db87ba69c0eeec6fb5c5fc0779971e162e322157c2818f8446

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /tokenfans.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e6e5082024eb5125764b91825eec6e27"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tfja0NnXDJXw5MgZu%2FvrBxLBCNvna5a4HkSTcuAf19pRk%2FohYQMh3NyRb6gAM7cLcd0pLpN8xqScyeP2rM5KEAYZD51zn5cyhBlWrWdftM59u38iDfit%2FbYtOsPlLwVAzykWrSK3JA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8c1b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-polkdot.svg

188.114.97.1

200 OK

15 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-polkdot.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
15 kB (15112 bytes)
Hash
43cf963b81e048636c39d1e514ce1184
2e604e4e2086cc0c0189d911af4fe4c70694acbc
0b486f91fee9220388fa9f7e8a8869105aff8a197582ded63b1078d4001c092e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-polkdot.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5555746e7322b17cb6d9def42a3e0923"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OJ9qORqiNUTrmBpUmsOGqPE8g5d83%2BsREJf9uJyBRJQWWkO612vkrkvqhm0NhIsJQeUiMem3iEVAnziXNZwbdDfSbq84Gnxoi3hvvN92Ur7fRvn3AKGtBZNMH6Fc3U2nbGmx5lKqFQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8abb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/styles.66d25378.chunk.css

188.114.97.1

200 OK

13 kB

URL GET HTTP/3
getimtoken.pages.dev/styles.66d25378.chunk.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
ASCII text, with very long lines (511)
Size
13 kB (12659 bytes)
Hash
4643a31647d24334dcb1c944708d1bdd
3166c154a681f8562fd1f9601970f7b3cc3a8b2c
a83fef58a41c01bdb1d5f1c905d48425a0534b159f3e74eed2f6588b197bd6a5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /styles.66d25378.chunk.css HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"39c9c4b4543204010a5d8470ec92ac7a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2FWIoN8216GJ%2FKiRUwLugHULhBbKqqCkBNTGS6WBF%2Byox4%2FOq9WsIWLLGcbPYUx73rPa165ZjJuV9cNae9%2FOCrkVG%2F3bi2P%2BqmqE3DVKiatj%2F4kHpTffOMsXZYvA2DCuqqvkwZ5CeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a989bb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-eea.svg

188.114.97.1

200 OK

9.1 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-eea.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.1 kB (9073 bytes)
Hash
54e48fc167fe85b3e748c77c78589439
7b5063202ec2336e24d83f3d7ee8bf5f16c97a99
bef808fd670dd1cf32866e44669ecacd9639f13f503ff634d3a202b0c2293873

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-eea.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2cc438095c7b0c3d4529b6e9a0fa9783"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6x%2B2CiZl76dyCEI%2BjIU1tV42QycxRMKvJrA1selSDnNZ1hRLlYI%2BxdpmmlyKG%2F5uXipNk%2FNubCWEbSyN9qCvPPdxer3kyQHKQbEGsc%2F54yTfVuaI9zgxEdHzpKgSoX34ctWfbk%2B4EQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8b2b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/2ab5d871ffbcee3b5a5b9.js

188.114.97.1

200 OK

1.7 MB

URL GET HTTP/3
getimtoken.pages.dev/2ab5d871ffbcee3b5a5b9.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type

Size
1.7 MB (1686789 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /2ab5d871ffbcee3b5a5b9.js HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"828fc6fc1dd64ce1d42cfea1e2023794"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7TEBld8Gdfb1TBl%2B6eJywOMSSw90ZJWmCqwD2U1Egbdz1TgrTVGHfJajRSkdM509ZETEUNdP4cQZJUJAF5kFa%2BWdD3ICeutl6xn2Jsip5H%2BYA9CbaKKvXkqxC9NmQE2qgbC6lrSE5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a9893b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/wallet.svg

188.114.97.1

200 OK

8.3 kB

URL GET HTTP/3
getimtoken.pages.dev/wallet.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
8.3 kB (8294 bytes)
Hash
ad061091c93304db13477b82b9bf81cb
40a9b50dbd7f47f7effe1b689195aaec2abcf87d
4d3a86098904a7b70491e2867e81172cb60c1e65b0910b0f495b7b2c6ddcd83a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /wallet.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e5a10988cf17c4fd578a69806c1df067"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1pTQj6Q7D12a1A2Z9%2BuZ%2BdrGhgVoeyk%2F11KfdR3%2FHWindA7d1IMsZo0HVtObyIL83xDvvk4aYfEc%2BiUiClLyMA%2FKgVXAQ9fDRIkzr%2B7ShIY8PCPwRjQCor7HgA3zzRlXWb%2FgW7%2BzWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8a4b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-cosmos.svg

188.114.97.1

200 OK

5.8 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-cosmos.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
5.8 kB (5790 bytes)
Hash
1c6e3e89aa2ff077995650b7c1e29d80
6446e2042d1274a92349ec275befc61929478e95
30b659073de39ed80b4ae2abcfe5e916e9440da88d1187d8a514d167fe7dcadc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-cosmos.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"36bb583ea7d78a8dd041ab54e2122f34"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yvh2AqZmFUHZW5zg73UGtCMO6%2BM9ilW2JRbBJonhfhvHxCWCVlQqWGS5fTdjkJzw%2F5bUuLBzef8LgTFd5p0QYjvPCyXKQ77YEMVZuU8WJYcRcSxnAybIoY9XesZlQNNs2r%2ByJhxU%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8aeb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/twitter.svg

188.114.97.1

200 OK

599 B

URL GET HTTP/3
getimtoken.pages.dev/twitter.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
599 B (599 bytes)
Hash
5beefdf19ab6756d608f9b1ecd8451b6
37fbaebcc4b573670c539916448d8e2b0f8a3efd
75353c5791d44c093f6ad7fb970287b863abe0d377bd6e035af7c5f06eb12e01

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /twitter.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"9977f8a74759f569da012a4301b39678"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nQIq5ZSQiQnLy4CgGfVA5wWEMU0oh8rz4UEDI922JspMo9HKavUn1OOPD3u6ax6ZVZ%2FNyUkSjJV7XVTdVGxSJ4dPaHQ5T%2BDZheAZqtaaz2%2F6XSRjJ%2BhVgu6b47%2FHTiG5goqXax0BXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8c9b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css

188.114.97.1

200 OK

79 kB

URL GET HTTP/3
getimtoken.pages.dev/484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
ASCII text, with very long lines (1864)
Size
79 kB (79186 bytes)
Hash
97eb2778a01a0c4b1c896a7cb8bfa0b6
dea33be51e016efb3b21c51317b019bea45ce3ef
a66bea6150e71194f367eb7a072faebbe27b2fac2a5366fbd1d76f6b3756a10b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /484c840239a025432effd6ecc373d498fa764368_CSS.1009f594.chunk.css HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"515d665237067b5d88f610f483d81fc4"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2BtR61lVaKry8OBgsDmZ9FTqczeYqOtbKWUL1mwpxv2i%2BBUOYjKYNF%2BQpEpSL2l0dIHuc%2FRfBIRO8m%2FCDMykfumhMzf1B98y04PzS5KMYf4vZ509KR7YBqehmqZ6XJCxHNrwV8DXSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a989ab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/index_1.html

188.114.97.1

308 Permanent Redirect

34 kB

URL GET HTTP/3
getimtoken.pages.dev/index_1.html
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
HTML document, ASCII text, with very long lines (22685)
Size
34 kB (34474 bytes)
Hash
d95594de774659025f5c616f6b3312ee
d5e67287fe787352c61ec56831161aa8f1417ab2
2ef1e2c764638606d5f21547290ccc768e81f9914b1b868f5043ed277b6b579a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /index_1.html HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 308 Permanent Redirect
date: Fri, 19 Apr 2024 15:36:34 GMT
content-length: 0
location: /index_1
access-control-allow-origin: *
referrer-policy: strict-origin-when-cross-origin
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vwwSUAwLZEYSmGRyoEQH%2BVkISOmm9yknHCk3kp1SoDkTmrVY3yq8OaEgWoWwvg5KADUTpv23yFjESfcDxK1vQVjd6472TN6EjgJyDN6ymHvjphpPEuOISrudANBCg4loGHxMOQW7Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88d6bb1b4ff-OSL
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-ethereum.svg

188.114.97.1

200 OK

9.7 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-ethereum.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.7 kB (9680 bytes)
Hash
1da60610bbf37b83d753b7a466f79e00
b0c2a7f66c39cd8b46ecf5cb3bc525843a8f95b7
76163fb876246dfb469aea5f62fbde7830b2d3125bc6bb5ba09cc5631b7b3e5d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-ethereum.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3e76e7ae2059238b675ac0775218c9fe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuelFlTPb8otfLEZ1q4cw5rw6eYBEttqcmQjPGmDxoH5UDEttWw%2BBjvXzSGLqnVkF%2BzJO5B8VlgJf3ZdvcyqlUoogSTPlE5GmS3AmwfuwZJqt8atRYQaJRsVua9L8Uwysl61SsCRGA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8aab4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/feedback.svg

188.114.97.1

200 OK

881 B

URL GET HTTP/3
getimtoken.pages.dev/feedback.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
881 B (881 bytes)
Hash
32f3ca0d1b344fc3890332bd81dd1c13
add396582ce5b43daee11cfc4f6cfd9199208579
036f3fe33495b2298b87118a8a03b09538d2a551fea053be9dc44a5428aae737

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /feedback.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d0ead2984ab00ca9c1e6194572ad60d5"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oh407zR3aSUXZcM8huT2HUiLfptTDubMMqpDyyUrPOTK4cFbV0QuDkh24JkRZEtFIJoqLME%2FNrxIFpLLijBHz6mlasbAppt%2BEi3mNS9BZpQqiz%2B%2FTqWfRetn43galpxdp0trx4KeWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8c3b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/github.svg

188.114.97.1

200 OK

696 B

URL GET HTTP/3
getimtoken.pages.dev/github.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
696 B (696 bytes)
Hash
ac33b4de642f62a906c68c5d8d4e3ab2
f8db5a9910cadd17e771036a1ccfcf7b0d6fdc58
c7dcbae4528eda7efca9dfd1ecaac9bee9e637403579eb0706cde9f71a6b31b2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /github.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2386499f4609ee106520acbb70a674a0"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hcWyBTxnLdSeQYmcXc8kaAQviuw5YPjr8uwfs8r7vQatusoBSR1TZQDBUicK8GSnGbtT1GOB3z%2FjZ9mAeSci4of%2BqwMCz%2FZHM2YzmzLtLzqq0j87DU3ru9PDpI3BZ6ShvVaJ3mZ4%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8cdb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-zksync.svg

188.114.97.1

200 OK

9.2 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-zksync.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.2 kB (9181 bytes)
Hash
796b63717478ea06f40a51bf1d43e713
fc73af902fcce4ee94c2f8b1fb19bd0f86293419
7efe81b59ae2120ff4a058b7d13b2f9a01fc6f34aa569b8cbe3bd838adf4115e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-zksync.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"ed3c47cfc98a86df57fad8e7120575be"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HvvqZQuIWI0QI5Qvhmxrc2mWqFhMF8OWTDB%2Fsuxvzqdtu%2F4shBmJXyIlq3uR4Eiw6v8lL0V0GGaFsRSfAobYjrk87diCByx%2Fb80NPFACs8I9ZmnUuby79PPRzX6yhx5nPBEGHhNmaQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8bdb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/globe.svg

188.114.97.1

200 OK

693 B

URL GET HTTP/3
getimtoken.pages.dev/globe.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
693 B (693 bytes)
Hash
901b8121299fbb575d2241cc297bb348
96ef48d1d498877d1f92db2a0b2dd88325ea0331
ee66226799529d3df883f669a22c29f8d70b855ae040709f43c815d762f596c2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /globe.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3ee236e4c46006cd8073059702c1c0f8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HIindnP5SY9viHHEEMSEFpXH2%2BdEb4kyJIlNojdVtwiF59aKDDrVMLFIP9Bmm7UMxI%2BaEeulrJgkWqC3Q1vGVXsyaqp58yKN6dL2uyF8FK2eaUu7g8MpStbzABh1khKKFfXwbR1hvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8d0b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/down.svg

188.114.97.1

200 OK

273 B

URL GET HTTP/3
getimtoken.pages.dev/down.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
273 B (273 bytes)
Hash
b4e8b0966ebe090e756d5b343673075b
3fcd486c9e8efd14cd684dd8677af21df81629ef
77a9e6e807a07d6ccd56e903a493c7522c196cba571d17bd31c67f37c6845a76

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /down.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bf18b00f1a1cb4e0875177542509a232"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gsFOwxK%2FLebKV%2B1e1KvQEsk0J2vYOaqzqEDxkKNhco5k6%2FCvXIjXVasULwAQ1bbBpFAUJrr78wzD31WRk5wHLCDbuDx8qOX8N4NiZJtTw1a2hyiQo2fEzXmrYLhvyG8auPnSL1VPhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88ab8c8b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/swiper.min.css

188.114.97.1

200 OK

15 kB

URL GET HTTP/3
getimtoken.pages.dev/swiper.min.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
ASCII text, with very long lines (15130)
Size
15 kB (15392 bytes)
Hash
febb8132aa08348a018e67ca9c16cd95
a0f0afb836b06d1af647881a31cb3159b316f7a5
cada218b4f92ce2bff7d5a749838ef45b65d75c08cb9f89f6b06bbb1eec041e4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /swiper.min.css HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b150ae5a1df0575ea542f2f6637c8e70"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sm6i8eZQz6YT2frY5EXxaXTFkGmSXYLuDcvWHjFhqj1z%2F5nObSB12Ni1wbR5EfexiO%2FyNhjmQMSDNV1oJxmBSR2tlsay2w0yLlqZijE3o58rbSgV32sgyqSVFkhwZMPi5PumC4E7FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a9898b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/alarm.svg

188.114.97.1

200 OK

533 B

URL GET HTTP/3
getimtoken.pages.dev/alarm.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
533 B (533 bytes)
Hash
d21c434a402059b25e2c6b3380215449
031e251cd9e9da3aebdc38b649885113aa5ee582
9c014f0306734b9a72da79c4a03f516f519b8e5edaf2c38a2528b3a6b82b02ab

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /alarm.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e490a1f42ae96c910a0a4ac3fb057231"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4h77lc0M7nyWN231dBYFQGXILxacW8EX7LTypfF04LGmxkuHDKpc9dVNIv9V3WJkcUhT4Os4yMcvk03SA72GSNlVTxBiYZazYlsfnTQrBPRSq9tr%2BE54kGYd20frhT53VLEdd6qvQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8a0b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/imkey.svg

188.114.97.1

200 OK

13 kB

URL GET HTTP/3
getimtoken.pages.dev/imkey.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
13 kB (13347 bytes)
Hash
a3fd6cd4340f73f2f44388e97964f3eb
694e8d4a2dfdd16c8f3444e77fe5d58c8ff1e907
ef070fb21fd2892969662d3f1d08792aef524bd34a1c437a8e4129c3f99bbf69

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /imkey.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b34ba58aa9137351036240a3be90d611"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I3NhRRx3kysYnQ242S0FxOZgh5WY%2BkqZVBXzGaZipchmX%2FvKGbyfTK4YYjaPaNHEOQ118N8nGIZhf2bBX0s4%2BIddWe8QJZo%2FxNerEmkvcOzIvMFnz7jXqYoiOHz0Y%2F2DQlCJkVjYvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8a8b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/arrow-down.svg

188.114.97.1

200 OK

207 B

URL GET HTTP/3
getimtoken.pages.dev/arrow-down.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
207 B (207 bytes)
Hash
7f3ff5c380a0c27308ad1f9b8b932d31
e36a25efcc6b9e85dcb80de8718221e7b1cffeaf
165d7b457ba23edb0a595cc1306771c264fe0cac96a7b1ea8b2f05324ae91207

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /arrow-down.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"c6dcf65227e2fe4364fba36f13fd8498"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FUotub%2FjkFDxKSjRJnYHtBlmWYcQeULzpQ4%2FY4oUvzzXP5JYC5FkkvVQbolmT8E4OS92w%2FHjEnkB0eM0yo6Sa4ikhuT9WtSJrS39QKM1ZD91ouirOAbnQGdt5d181NWAGqh5Thrjiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa89fb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/55d17a2f7e4f460fe3eea315326b845e02f28de2_CSS.6da4c16f.chunk.css

188.114.97.1

200 OK

244 kB

URL GET HTTP/3
getimtoken.pages.dev/55d17a2f7e4f460fe3eea315326b845e02f28de2_CSS.6da4c16f.chunk.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type

Size
244 kB (244164 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /55d17a2f7e4f460fe3eea315326b845e02f28de2_CSS.6da4c16f.chunk.css HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"76e250d233025663f881d13afc233a26"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0zHo%2FqzU7bcNztlDrlULJylB4%2Fd49H0CZGuAbQ8%2BXdjweUB1uJ%2FkWkN4JOKfyC2NFjJPhC3ZMLAVW6%2FaHXfp2%2F59tbroOnfVgqyrOEi4DttUoI2nbX30ejNn91S0K3GYT9gJnD5vA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a9899b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/39f4923d3fecaf7625ea659cb7d17691fe869b49.svg

188.114.97.1

200 OK

226 B

URL GET HTTP/3
getimtoken.pages.dev/39f4923d3fecaf7625ea659cb7d17691fe869b49.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
226 B (226 bytes)
Hash
d10328204dbf842d00829863f9006e3b
1a4fed4208c6e912b96c0b9ae25fb04642aaaa35
78e164bf09f41bf863ab1947a9178c8a4135205d13bbeef511fd78b9cd24e80a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /39f4923d3fecaf7625ea659cb7d17691fe869b49.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/55d17a2f7e4f460fe3eea315326b845e02f28de2_CSS.6da4c16f.chunk.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b3671812e8a44105055757919c4f3e52"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2OcnVM9s7UldgligkaF33LLIEj%2FQkmA6%2FrQN94PexVu%2Bdms9FkQjnGiwUs7DYA9G%2B2JQ8endtwk%2BL%2BnYt1Ts8G%2FHAp%2BvJcfsEGXnKLzm4oJCSz1ypYXP7G6DJCtsihx3PHgrS9M6Zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88d9bc8b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/favicon-16x16.png

188.114.97.1

200 OK

1.4 kB

URL GET HTTP/3
getimtoken.pages.dev/favicon-16x16.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Size
1.4 kB (1411 bytes)
Hash
2a9cad9ed022cf5bd4963bcdcea52cb5
57ceaf49f92376f1ea3b033eb5dc35a4f51d55e3
5630afc2f4986e01d355c91eff9f1cb036a3d551520876508ff12076e25b1e63

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /favicon-16x16.png HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: image/png
content-length: 1411
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "efc7e9be171385b2429ded34ab116357"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pj7mjdgZu72azW%2BAubohEov7ce7BOLXEx%2BzPskyx14PtorSOORROU76Pgnizkt%2Bi8iLfYeLwd27GHZdnpTnlQCk7ogJH%2B7o8Q0578KDmSV7OcpqPJ0LS0SlbWn7kpMPGFL3IxR5pyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88e7d07b4ff-OSL
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/imTokenLogo.svg

188.114.97.1

200 OK

9.3 kB

URL GET HTTP/3
getimtoken.pages.dev/imTokenLogo.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
9.3 kB (9277 bytes)
Hash
a23a74486d8bb65b4a2f2abb2446f562
ad53016660ba3ed1f066c68a51179a7360efcbac
d10be550eb64e47ed5762c452b4ba1ea558ec9e1ba77904cc6aa15d1c008ef11

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /imTokenLogo.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"e3c785148df267fc8b50cf990da12df6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jbj5MxigT83Ug4MSxKpdEB1LvEam%2F%2FWyuVYQXe7Fp8JtnmyGedp11TrdP1tdvhCIYPKkxtik4haz7ZuQmhjEyiiYsmn1fGS5aWOjzuzIxEDG%2B%2Bcm14Shm9cA5d9AXofxKtAt%2FuHORw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88a989eb4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/partner-etherscan.svg

188.114.97.1

200 OK

11 kB

URL GET HTTP/3
getimtoken.pages.dev/partner-etherscan.svg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://getimtoken.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type
SVG Scalable Vector Graphics image
Size
11 kB (11263 bytes)
Hash
c2396dfee53ab9d34632f6fedd15c47e
f2e7cc706a3486b0e8c27ec8ad71a97d671707d4
d9c83c68c73cab3ade09c13bd2d323325648c652b28cc92a535b2db8068a92b3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET /partner-etherscan.svg HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://getimtoken.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 19 Apr 2024 15:36:34 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"094022a461831204d95d05735579678a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3GlxtZ8qYHCC13KG5GgmaJjJatjePOaC8wFuy8BbJkejZnegfd7OwvdaESsdgIv%2FjcYkuZ2wWGCRFU%2FiTNsKoMJBpINtkBMNG3D0MqHnhjisOmoftjz6mzbeh0w6LkgLSkzw35K3Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df88aa8b6b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

getimtoken.pages.dev/

188.114.97.1

200 OK

47 kB

URL User Request GET HTTP/2
getimtoken.pages.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectgetimtoken.pages.dev
Fingerprint7A:0C:0B:83:8F:EC:7A:A8:AD:76:1F:5A:75:85:73:6C:EB:CD:D6:23
ValidityWed, 10 Apr 2024 08:13:00 GMT - Tue, 09 Jul 2024 08:12:59 GMT

File type

Size
47 kB (47292 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Crypto/Wallet

HTTP Headers

GET / HTTP/1.1
Host: getimtoken.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 15:36:33 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"cb7719b9e57c804d35efa02e42970f4e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bcaO9ewfQoITl6cyjxClo9TIp%2BkRfDEfAB%2BYN524%2BQHoXPuMfsfRZRH0kpwO6Zyqyyl2q5cSW5EFe4XdQfEvHvDrtHVWYR4tphRGBjbg6g%2FE7Nu8x2cVlt1bqB6R9J8RYduBigrs7Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876df8891d621c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (37)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers