{"report_id":"7c18413e-34ec-4b99-9549-73882bb25e1c","version":0,"status":"done","tags":[],"date":"2026-09-11T10:06:46Z","url":{"schema":"http","addr":"imtouken.com/english/download.html","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":0,"asn":219502,"as":"Storm Industries LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"imtouken.com/english/download.html","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"title":"imToken Official Download | Secure Multi-Chain Wallet · Digital Assets Under Your Control","dom":{"size":7250,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"00c27ab7c7d161d67f8c93c1f272fe5c","sha1":"4d033229c78cf0d17001e52974acf8c34fa5f30b","sha256":"5109cc61589f1eadd29159041be66f298b709f998b6e88feeade862df0c8a0db","sha512":"a036536554494655c1bede058c011f61888128ece382d7ceb1fd0527c1d7e2211c62d3bd4974f1c821d0ebf1ae404aca5789e71e8a205aab8df8124e8c74d06c","ssdeep":"96:3BgvUE5KusutRjvg8SO6Uib+7q0XVcSv1owYF9FWmB0SHCyMj:3KcE5fVtxvwXTaXVvv1KnWy0SHCyMj","tlshash":"a1e1962154f1a1471181b3d0aa752f1a7ed2e147860a0d0576fc4fc59fe3e8acc97259","dom_hash":"domhash01e2a3c800ca724fcae0f006e93e9922","first_seen":"2026-09-11T09:02:04.647742Z","last_seen":"2026-09-11T10:06:46.795488Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"imtouken.com/english/download.html","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":0,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:06:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"imtouken.com","ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-12-30","domain_rank":0,"first_seen":"2026-09-11T10:05:11.612034Z","last_seen":"2026-09-11T10:05:11.612034Z","alert_count":105,"request_count":21,"received_data":139110,"sent_data":11334,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"imtouken.com/english/download.html","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"28da35f705b9c774a90c5388ea556683","sha1":"6450e34aaf6c695d7b560853e8fc24793efcf905","sha256":"d8e05d3bf9c6b61c5037bcd281e815514b324ec239dc93899bbfdf7588ac8f0e","sha512":"fea4486ba21260a7fb67d3218a196925ad2f7fe433440ebdd0defc67321657bd44ce9ad04f3d4f9081b6badbf76555edbd78eec895d8584464cce03f610c1411","ssdeep":"","tlshash":"760146ad68fb1ba1214b31382aaf934c34324007104ac7013c2c96948f72ea094d9be8","size":744,"data":"","first_seen":"2026-09-11T09:02:04.67055Z","last_seen":"2026-09-11T10:06:46.831776Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/qr-code.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.971Z","timestamp":1789121168971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/qr-code.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 390\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"356-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":854,"size_decoded":797,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ffc9c7b7b837f346930dd407888c951f","sha1":"a63da3b5edc1cf1cd8a5fbc88d342d86b8af326c","sha256":"073fafb124217f46fe5f0957fa6cef29bf96f0a69651e91139d4815ba7f76d59","sha512":"6d275944c194304a99b81b45f0da7ebd775763f5ebb199c3b60f34f273723752913c8355761f6d85256e4d2d360120ecbc56ef67b7bf48b28171c21baae5172b","ssdeep":"","tlshash":"7601826d53418cf8e558057aef3cb9d7502504e41514ed88ffa5262b7a0412ea47f3db","first_seen":"2023-07-31T21:17:56Z","last_seen":"2026-09-11T10:06:46.796789Z","times_seen":84,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/expand.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.979Z","timestamp":1789121168979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/expand.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 203\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"131-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305,"size_decoded":610,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2adff8aa86de6ce5c8fea7b606602384","sha1":"35e5fb10db08f17147c7f5bf468cc91c105d1224","sha256":"75865d8932e1b277e2c45fce66a31ee552929190ffbbe29c37563a182fd42549","sha512":"980ec23eb8fce4ad2e4a95854b85e2ea164a295325b7b97e7ade7b81fe23f5a9cedcdaf7224416c8e8436a213bcf7a03d0f2e2d5126aada55b5d55daa62c90cb","ssdeep":"","tlshash":"fce0c2f67b2cec27f1068430a36db4e131af00f385a89665c4511c3270249d7387e2e4","first_seen":"2026-06-13T18:04:40.743944Z","last_seen":"2026-09-11T10:06:46.798847Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/medium.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.987Z","timestamp":1789121168987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/medium.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 197\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"e0-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224,"size_decoded":603,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6a49621075d683c755db86def96ca77f","sha1":"738d6ed4c702623f09a65afeeba6688d229f3f42","sha256":"077943f1b01d0d63a8becbaa9f8a8af2aee71f368081f6a43576ce1e0da56049","sha512":"ba11c88f67891ba18ee2687f3556b8329f97c17d39560f6b71d18f388bf1a16f0cd82b9e12b00a293a955351445d485234da4b434dda9c22094065069b39463e","ssdeep":"","tlshash":"00d023e8c44c08048f3cc649df2f3d2e107561d3075c441fe0802200fc45aa2380c47c","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-11T10:06:46.801012Z","times_seen":1195,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/discord.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.991Z","timestamp":1789121168991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/discord.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 662\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"540-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1344,"size_decoded":1069,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4843ef32f5106881cea9a4da691223cc","sha1":"6f806744b2e9dc22ac05491301d663c7cd01f219","sha256":"76e374e9e73d1f9fc28f6d5c31bd17fe07819599a35cb431f16cadba6b71e612","sha512":"2ccede4eb3bb08d01d1875f8462ecf2b7a232e656c17668e1d4672d45a1aa97bbfc452b671258e0b86d12f66dc1f17f3da9bc856d5a56e92a3cb85f711f3d66d","ssdeep":"","tlshash":"6521c1f283e460e464479f85e4358913f51a34fab75e4a484780ebc17b25017984eca0","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-11T10:06:46.801568Z","times_seen":1118,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/globe.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.993Z","timestamp":1789121168993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/globe.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 294\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"2b5-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":693,"size_decoded":701,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10e9b7298119a70fcdb7ce6ed5430f6e","sha1":"942e41acc75f1fd1ec6b33dd2cb21b29126c6bff","sha256":"f55d4b245d10bad8715a66b9fc5461f23ecf2902bdf1c8ff7c6d04b41e0afea5","sha512":"82e217f7306036f635c6d7af212da66acd33a4547ecd6f91d10555532097627f02e8a707771e809282d7922b3119b7eaaef9b7a04b85f94de3be6a8776997c6e","ssdeep":"","tlshash":"9d012b59b36dce3d78631764d31232b660e7125309487395d432d1346990c5e6b77dcc","first_seen":"2023-05-07T16:57:14Z","last_seen":"2026-09-11T10:06:46.80212Z","times_seen":1045,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/favicon.ico","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:09.215Z","timestamp":1789121169215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 11 Sep 2026 10:06:10 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 258\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: nginx\r\nx-cache-status: MISS from L1:1119\r\nvia: L1:1119\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":535,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"baee6b5aca357e27b65fe72f90c5237b","sha1":"28c1d9bd4d4c703f64afe11fb90232c2872f112e","sha256":"9ea9c40df9b668637771d2e42a5ec9b00286febb333d561ce73dfd6faa9ca649","sha512":"44a06ea2c1241e2a78166c3994707818e21ac9bbd8ba542e98a1e8f3c175209b7cd57bfb7308f47b9bd3c1c6dc59910dc734ca01ac48da40051c05841b151431","ssdeep":"","tlshash":"0cd0959d5083338b081215503dc111c2274813f6743d81f87d85e447535863dccda2cd","first_seen":"2026-09-11T10:05:14.031298Z","last_seen":"2026-09-11T10:06:46.803659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/download.html","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:06:07.991Z","timestamp":1789121167991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/download.html HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: text/html\r\ncontent-length: 2225\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Mon, 31 Aug 2026 07:46:34 GMT\r\netag: \"1c7a-65a5300543f1c-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: MISS from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7290,"size_decoded":2631,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"b0342a9c88c32e69845a9ac200987255","sha1":"a9486892d8c283ab4a4a3cc90b1e2f85b2cd61ec","sha256":"8c69269bb14b5256355659575c275c42df1b24b7d860bebd80c806f18e56e7bb","sha512":"2a4bc79af988dac7b9a0f4195f375235391428ac751ae48420ec946569979e2d0df69b201a2b33f64a50691783526289c8cc24e11ccdac61ee775a0fe565d7b4","ssdeep":"96:qBgGrEeKusuQMtgiSO6Utb77q5XVcSv1BlFgFWmB0SHCyc:qKiEefVQMtSXsMXVvvPAWy0SHCyc","tlshash":"64e1742154f1e14711c2b3a06a752f1a7ed2a2838a1a1d0936fc4fc69fe3e8dcd97295","first_seen":"2026-09-11T09:02:04.662917Z","last_seen":"2026-09-11T10:06:46.804396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":284,"connect":20,"send":0,"wait":366,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/app-store.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.966Z","timestamp":1789121168966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/app-store.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6387\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"3c0e-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15374,"size_decoded":6796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73c01ebb817309577fda320ef883b314","sha1":"8710d9e56382cd3843a325fa6a27291cb4f7b650","sha256":"e46d534b92668b873cdc56c1be524b4036d684b041ee6a0c1a551a0f9c4eacd7","sha512":"3074367dccb809b609a76371dd3f0378d1b220539bd069f307a815855744a988266113cc327e62774f4ff13ccc45103a8b88976084362dc5db96194a153d911d","ssdeep":"384:MSvYloIaCS2ktNLmso+5SCVZvM2s/iuVS/yOeA9uHrAgjT:MuNYC31k1VShnwT","tlshash":"e86295df679863e4e082f3f8ca1251727f4f68fa7a21cb6c83da7d85661205c9448cd5","first_seen":"2023-06-02T21:11:30Z","last_seen":"2026-09-11T10:06:46.805131Z","times_seen":672,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/guard.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.976Z","timestamp":1789121168976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/guard.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2572\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"1840-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6208,"size_decoded":2981,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de8e725ec7f9672cce0ea59e946bad04","sha1":"4eddacbb97c2fff93b8ad1b78de767859fd1b4a6","sha256":"7a170b2275e8afef43e8ddc1483d8884d3d841c8842a0e0c79d7dc9046ff1b3d","sha512":"be75d91b9c69a75ffb4f34ea089a7b1bbd487ab39fa25f3c08897f84cf4138b525b97fd01c3ea0267377536b4275007d2a68cd6f06cc545297cd84a3424f8d4a","ssdeep":"96:PTe1F7b769gjKat20cdvhY33Qm5Knd4EqRDsnfRmaNR/tYJPO062ukbzX:PTeP//Oa1cdvhGANniRsRmaRqdRueL","tlshash":"04d151c43738cbbcf81196bcc71376713c022a9797a29194cbb26e21b94511d9e7ece9","first_seen":"2025-04-09T11:05:04.880458Z","last_seen":"2026-09-11T10:06:46.805661Z","times_seen":27,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/applogo.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.964Z","timestamp":1789121168964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/applogo.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 829\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"607-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1543,"size_decoded":1236,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97de14617b6333937bec630d20668d96","sha1":"07fb5b9e921d5966e6a6dc429953523c639ea6f9","sha256":"824c927d027be86073328c19e911cf9e65b3b995d6603262260f2c3b99b7a953","sha512":"5e31688485ec2fee70d72f918a9eaddf4be87e62ac5626da38b611c2fd88d0737fe8c8116f54c3b3db03f24065bedc7b1234ef2265ce060b388e7e59fa3ef9e6","ssdeep":"","tlshash":"b33187c74774d9749485a726df38c410fe1264f68f834185b61eeb202b827866a429d8","first_seen":"2023-06-11T00:54:28Z","last_seen":"2026-09-11T10:06:46.81937Z","times_seen":126,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/apk-en.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.969Z","timestamp":1789121168969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/apk-en.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4553\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"2c3a-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11322,"size_decoded":4962,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"487eaf3fa3671f4797fe2db370cadbc9","sha1":"463fdf7f68c7170ecc262b75775440ea8788ff01","sha256":"83600fc84800611cb852de1fa0df61228db080c65e1539c5ed3a3c67da710d73","sha512":"a3f508125c1619200744a29460811bd25bb892164e141408cf96e2fea5f4502642785ca63b60c6160f22733d945b9f522e933ec1358bc3b9ecae5b7ccef17193","ssdeep":"192:oXTfvY4wFUYfPTJ1r4uZO1gOdVGBBoymaVg+0aRvN2gDEx/vH+JY/9N/2M2:MfvY7UYfn4uZKgOWxg+0aZE+i/veQ2M2","tlshash":"3f3274d9b7b9e3d4e546f7f8c32210b1371b28f72b12cf58c79a9d58979180c84a58ca","first_seen":"2023-06-10T12:56:46Z","last_seen":"2026-09-11T10:06:46.820493Z","times_seen":126,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/202210161951112124902369.png","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.974Z","timestamp":1789121168974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/202210161951112124902369.png HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 548\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"224-64e7736ef6f80\"\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":899,"mime_type":"image/png","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-09-11T13:35:13.287548Z","times_seen":21276,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/market.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.983Z","timestamp":1789121168983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/market.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 334\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"301-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":769,"size_decoded":741,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"887895a974e06f78927bb0c5fe2e8d92","sha1":"ff82f8b6fc72266e11fb4611efaa9b52fbc82252","sha256":"e1919e3aa39d79812fc4e721f98e59349d2df73206f8f6040047daed62313c57","sha512":"458e6bc84b1a21b1a7c7b3b303799ed993a657e2af0baa9eacd85d47cd7adb0474b7f772374eb1ac5a14f44043e6287a62b0fc4a1cceb4154620d9eebcc6f451","ssdeep":"","tlshash":"1b01284663040c3cb6334728df557770512625533e456150ca7319770a96a4d7d3fee4","first_seen":"2024-07-13T18:58:35Z","last_seen":"2026-09-11T10:06:46.822181Z","times_seen":35,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/tokenfans(1).svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.988Z","timestamp":1789121168988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/tokenfans(1).svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 881\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"680-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1664,"size_decoded":1288,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e04f06c03173fda09427b277300b06a","sha1":"6929723c8522f86632090ca657e45e132f1ede02","sha256":"2ffb6220e64d52868c4ac80421efeb49c990bac0af584b00987e76a541b23e6a","sha512":"e0c48c1e1c87021253d76c1562388f172dc06cae679009c6cfa21fa236c056ce57dc39c0d1345c3698a078487adacdc970032b0e4e79630c9c490322f4bba566","ssdeep":"","tlshash":"863144e2e3c962d05607dff5d63419e1a9df18f73ba5cb980265174c9e8020c494cca4","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-11T10:06:46.823848Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/css/style.css","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.951Z","timestamp":1789121168951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/css/style.css HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 7841\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"e927-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59687,"size_decoded":8245,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f13c365a0865fed6f9a9c5c8f91d5ca1","sha1":"4ad080e0672749f9e1c7aa3b5ba8f5bf192cb8f6","sha256":"cf190325ef1370a426ac7f7421738a517a37c875b7046c7318e781bc8f6b0e91","sha512":"34610a61103a5fa6021c5dc03e8e3501b2127e6176a1f56047e39559947a02559339553f6dacf06cdb95595568951874ee04719e1dd57a78897879a9290826e3","ssdeep":"768:unUYdNmH8DswKsgO0b1Nr2g0jT/JzWBMroQOlbd5qo:FfB","tlshash":"89431e24b61e500d976a40e8bbb42fb2ed71c44bd35782f6f1a35e14d1c812c2bb6bd6","first_seen":"2024-06-03T06:59:21Z","last_seen":"2026-09-11T10:06:46.824954Z","times_seen":26,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/wallet2.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.982Z","timestamp":1789121168982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/wallet2.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 380\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"2f5-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":757,"size_decoded":787,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6915c49cca71038b14b965419caa13fb","sha1":"b725c16bca9bd7eb0467133e71e5486d90038f15","sha256":"5673afdd5a58ebd58ecc915b793502cbb417f308fd00dddd107c117e010bab4f","sha512":"f6111148dd2a57e66d5df3f53bb8863817ec2c71d6e4bc811404f3bdae15062154873d7e7e58c97a5c550b69e233ae41acb61bcb5ab7056e567851383704904f","ssdeep":"","tlshash":"6501155563e869bc74314634d79e3335427f24c63522482789b21c79856995d6c3f5f0","first_seen":"2024-02-20T02:17:37Z","last_seen":"2026-09-11T10:06:46.825942Z","times_seen":233,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/twitter.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.985Z","timestamp":1789121168985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/twitter.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 390\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"257-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599,"size_decoded":797,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9dbc7890b4c52dff09e7203babc8369a","sha1":"3da674aa07c53f903cbc779b97f571f9c561f9e0","sha256":"c3d38f32d68b9dc80f5c549c9cdacc274539b890ea894fccad065d4808e23bfe","sha512":"b63f78778bcaab70433ea07ade2f2a1be2213198bd7d9fa1ed8cae7c89ad62407b6d1f9c42b4d2c505718b5713617be25e497f0dec0d5cdaa7b60a5cae2374ab","ssdeep":"","tlshash":"3cf0e1594a9e2ad4861fdfda9637117a701b78f11bb5c2ce81a0b65164a4cfd4c1cd20","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-11T10:06:46.826628Z","times_seen":1199,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/github.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.990Z","timestamp":1789121168990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/github.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 409\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"2b8-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":696,"size_decoded":816,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4149501d6f5d8ca92ce457bf972ddd58","sha1":"914af4392becba78bf750a49b9bf2cdf50d3bbb4","sha256":"77932b8662117bf991a79571d25775103f60a7625edfe9d7151a880144332e0b","sha512":"cb22ae17f8af457b86808495f50f875ad060f9f6941759760788efbccaada24ce42a5fcf05e46cff7b94f44e3b36d96072f3934bc3b2902d39155fca5ca56b43","ssdeep":"","tlshash":"b2017bac63e073606d46d76cd0a974b0b28734b72fa9c5a4e145e843a1158dfa8d8910","first_seen":"2023-05-10T10:24:22Z","last_seen":"2026-09-11T10:06:46.828266Z","times_seen":1193,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/img/subscribe.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.994Z","timestamp":1789121168994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/img/subscribe.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 258\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: nginx\r\nx-cache-status: MISS from L1:1119\r\nvia: L1:1119\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":535,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"baee6b5aca357e27b65fe72f90c5237b","sha1":"28c1d9bd4d4c703f64afe11fb90232c2872f112e","sha256":"9ea9c40df9b668637771d2e42a5ec9b00286febb333d561ce73dfd6faa9ca649","sha512":"44a06ea2c1241e2a78166c3994707818e21ac9bbd8ba542e98a1e8f3c175209b7cd57bfb7308f47b9bd3c1c6dc59910dc734ca01ac48da40051c05841b151431","ssdeep":"","tlshash":"0cd0959d5083338b081215503dc111c2274813f6743d81f87d85e447535863dccda2cd","first_seen":"2026-09-11T10:05:14.031298Z","last_seen":"2026-09-11T10:06:46.803659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/imtokenlogo.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.961Z","timestamp":1789121168961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/imtokenlogo.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2008\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"113f-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4415,"size_decoded":2417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"156126cea74bc189655a009df8a24e21","sha1":"16465dbb16b2967573f9f8d8c14102fb4a7c5190","sha256":"f91dc624abb33ff7ecb6b25cc7844f02128c097973db0f80213aed0720e08797","sha512":"b5814605ced50768bb3fc173229d03da53f0a1b7342a23eb3714746297f44bce064d40bdf9d4248a70be427f797cb8af28c83b4a2e439abe5cb42c8d40e2327d","ssdeep":"96:lQN6Y2Wrkc/uSDvTy0SEqbMl5A3QdBKUsRdK:W0Y2PoTyJEq2kQXKf7K","tlshash":"3891eed53268914ca99ba72ecf3fe8c4170e30e3ba51819477de971cb74b542e50b8e4","first_seen":"2023-05-07T16:57:14Z","last_seen":"2026-09-11T10:06:46.829101Z","times_seen":741,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"imtouken.com/english/skin/picture/google-play.svg","fqdn":"imtouken.com","domain":"imtouken.com","tld":"com"},"ip":{"addr":"94.154.43.130","port":443,"asn":208485,"as":"Moon Dc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtouken.com/english/download.html","date":"2026-09-11T10:06:08.968Z","timestamp":1789121168968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.imtouken.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 14:40:45 GMT","end":"Thu, 22 Oct 2026 14:40:44 GMT"},"fingerprint":{"sha1":"86:D0:59:66:DE:FB:1B:47:08:E4:FD:96:6F:29:D5:D9:F8:31:DB:43","sha256":"A8:C4:C9:00:E7:BE:F4:79:59:ED:EB:5B:C2:1B:E6:C9:6B:D6:09:6B:41:CE:05:9E:E4:0D:95:CD:C6:DB:3A:D1"}}},"request":{"raw":"GET /english/skin/picture/google-play.svg HTTP/1.1\r\nHost: imtouken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://imtouken.com/english/download.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:06:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5759\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 02 Apr 2026 09:56:30 GMT\r\netag: \"3ec2-64e7736ef6f80-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: nginx\r\nx-cache-status: HIT from L1:1119\r\nvia: L1:1119\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16066,"size_decoded":6168,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"becb0d416ef4faaf949277774370c6de","sha1":"39c146d5e506e06137711485d25bc5cc48356138","sha256":"ab11f2d077c5dd5688c32e8012d1bf51308fd46f7350208e5e609fe89d8149ee","sha512":"526cf84685216c194a872aa05974f6b94139e974cd00ecafb7556489a31ee0e7d7a9d39298b7244a84b55ac98041868883ce3827e72d341a0d1b864a1e2aeb87","ssdeep":"384:ExH3JhLkiRRl9bPvCH4rg0iMHZf5h70C1XUld9kTXCNC:EFLIClQIgAfvxUq","tlshash":"7472b6eab7a8e3e4d406d3f8d61148763a6e2cfa7b75c3c483926d0ab5640dc485cde1","first_seen":"2023-06-02T21:11:30Z","last_seen":"2026-09-11T10:06:46.830266Z","times_seen":478,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"imtouken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"imtouken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}