{"report_id":"f56bf79d-c0e5-48c8-bf64-8d9e5e3973f2","version":6,"status":"done","tags":[],"date":"2026-02-03T21:56:51Z","url":{"schema":"https","addr":"imtoken.fakegucci.shop/","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"title":"正在执行转账操作","dom":{"size":13999,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"af17eba115e23a04fb4f092a53eb347c","sha1":"4fe3d2d38af41fa3f2530d2cb47aeb742571a91c","sha256":"b361f98feb41c3bfc9afabaecb286627523d2f9e69035a6ea358a69a71a6479d","sha512":"b19689868c658a2a5588cb8591d3d1321bb9286299570a9ff69afa8689931cdf68987dcad4e07ea827e3fa56eb047fc96e71411046643eab8a424f2b4dbd0506","ssdeep":"192:Jyi5cG4k9YiwpsqF0wNfKF0w+FlVHT6w6M6wEwbIAw66/1s6wxs6wmgw8+jw9tni:JyRFkFOFCvAVRMQpSi9JD280q","tlshash":"2852dc9199e31113744391a45bb69b4bbba0d103ca0bda553aec5bec8fcbe448d63b4c","dom_hash":"domhashac71ad5056389ed85ebe61fe30db63a5","first_seen":"2026-02-03T21:56:57.013089Z","last_seen":"2026-02-03T21:56:57.013089Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":0,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T21:56:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"imtoken.fakegucci.shop","ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-03T21:56:51.754239Z","last_seen":"2026-02-03T21:56:51.754239Z","alert_count":0,"request_count":8,"received_data":1168052,"sent_data":3660,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/js/TronWeb.js","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce87ba35edcbf65508df4e0b624de083","sha1":"482a62a1845a34eca07ddbde9a4cde8ddfd531ac","sha256":"2209f323878300790e330fe5e65f60668a2bbc7f5f5ddfce78870c05745fd586","sha512":"b7e02dd0ea84bead947b3b094a0937ac0491ada38a5dd1dbe86cbd01da824857259c0947984aaecf7f7e32e515d28a71824c252606018f4678905ea5f3255eab","ssdeep":"192:EGbAkhuR2oy428ceng9inA1uVDdyIxeURmHj6R1hv:EY62oy78cen5jQ6mqPv","tlshash":"e212637639a0672cab871dff221b33c5d86864693d8d5c4ab10cbd4438a2a27ffd1634","size":9389,"data":"","first_seen":"2026-02-03T21:56:57.016852Z","last_seen":"2026-02-03T21:56:57.016852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bfe71bf8a84c33efee0da31ca9921eb","sha1":"84f8305e2e5bbbe9b4443cf2745c19cb04355edc","sha256":"450b1d1bb7c85e1b0d337245ca75dca7e1da91b97b191aef7b22ba7280362f69","sha512":"43d49ea492a4df8159bc21b40159f555f72390ed0cf1a23cc378f2c44a51bbc55311a035f29a39aebcd6e658093b76ef4a9d973183f1b9098909339656968294","ssdeep":"","tlshash":"b4b0122dd174a2071d813b44cbd3062b9415718b640aa8747e8ed3075fc3069c81b16c","size":121,"data":"","first_seen":"2026-02-03T21:56:57.032987Z","last_seen":"2026-02-03T21:56:57.032987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T21:56:29.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 15 Oct 2025 15:02:06 GMT\r\netag: \"36bd-64133c8ae4428-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3416\r\ncontent-type: text/html\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14013,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"99b69198dc9771d13c01b2edc843f75d","sha1":"ddd92d498fdb51fc88f7ae6038da90998bf5764b","sha256":"04d503f7d739f2f7f9664bca271858dc06a242522edf44cfd0dc22476f29b477","sha512":"89a6d586382a6d63f48d6753a8ab904ddd0202c0735dfde372028cc4c439c1c069a0d4e3c22be3cb6767d441975e76763ee4a075166a405962b952638defb82f","ssdeep":"192:/Ni5cG4k9YiwpsqF0wNfKF0w+FlVHT6w6M6wEwbIAw66/1s6wxs6wmgw8+jw9tnS:/NRFkFOFCvAVAMQpSi9JD2t0Y","tlshash":"5252dd9199e31213744391a45bb65b4bbba0d103ca0bda553aec5bec8fcbe44cd63b4c","first_seen":"2026-02-03T21:56:57.01435Z","last_seen":"2026-02-03T21:56:57.01435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":417,"dns":50,"connect":182,"send":0,"wait":183,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/images/waring.png","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /images/waring.png HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:02 GMT\r\netag: \"1518-63b33b7249549\"\r\naccept-ranges: bytes\r\ncontent-length: 5400\r\ncontent-type: image/png\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"82ad2edd64f899eb3f1b3698c976f679","sha1":"7c570f4762a7c365d633b60c315895816d36cc22","sha256":"b02cf3eac2fbd806744b8020e436fc2fc6d538991ec4eaccb3097b7cd29a0cb2","sha512":"23ffb82ec87913b66dd3afa155edb7d785aa89ce35aca103aade7270030b4d74a8d6a9c128a45ef84919144ed0356550c1c29487323a87999b6c13ccd2655c22","ssdeep":"96:N/disN99v1LczRthaSrInCd+Sb88kZX0+eDsgE+jjeAGljTGNRk4hpU7bIg:NSRnEnCw1kigP8jTGNRzhpU7n","tlshash":"b5b17d5bb260ba3cb5c4f81a22ca9f77c631457fa631d5dc1984256103acd80ecd3660","first_seen":"2024-07-24T00:05:59Z","last_seen":"2026-02-03T21:56:57.015621Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/js/TronWeb.js","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /js/TronWeb.js HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:01 GMT\r\netag: \"24ad-63b33b71aa659-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3278\r\ncontent-type: text/javascript\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9389,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9183), with no line terminators","md5":"ce87ba35edcbf65508df4e0b624de083","sha1":"482a62a1845a34eca07ddbde9a4cde8ddfd531ac","sha256":"2209f323878300790e330fe5e65f60668a2bbc7f5f5ddfce78870c05745fd586","sha512":"b7e02dd0ea84bead947b3b094a0937ac0491ada38a5dd1dbe86cbd01da824857259c0947984aaecf7f7e32e515d28a71824c252606018f4678905ea5f3255eab","ssdeep":"192:EGbAkhuR2oy428ceng9inA1uVDdyIxeURmHj6R1hv:EY62oy78cen5jQ6mqPv","tlshash":"e212637639a0672cab871dff221b33c5d86864693d8d5c4ab10cbd4438a2a27ffd1634","first_seen":"2026-02-03T21:56:57.016852Z","last_seen":"2026-02-03T21:56:57.016852Z","times_seen":1,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/css/favicon.ico","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:31.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /css/favicon.ico HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:25:59 GMT\r\netag: \"3a5c-63b33b701a416-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4795\r\ncontent-type: image/x-icon\r\ndate: Tue, 03 Feb 2026 21:56:31 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14940,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"53e3b25f587b4e5e89f2822898bf2359","sha1":"bf836666e283c090602b0d39660b3cd64860d322","sha256":"23c881e91bbf6b9986b0464b8a7480115d76e5e2ff3d6ef32bde912b4eff4278","sha512":"5d97564ace967c2b48925b4e07cab3afae747453b1b2d7d9d12a61edbac73cef898d5cb68e87c61e32cda9d0b21d3d22a58d1ae5bbe0eb4c9d481b0003c53753","ssdeep":"384:c0ethhOGu4yzdtxexNXa+uBBVcD87P/YQ:Shhcp+Xad6DeN","tlshash":"1d62a15014c0ed66d33282b514b5db29fc42aef2c6da650836ec36e76fb3d437427199","first_seen":"2024-12-27T17:08:31.712379Z","last_seen":"2026-02-03T21:56:57.018416Z","times_seen":7,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/css/index.css","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /css/index.css HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:00 GMT\r\netag: \"10abb9-63b33b70a7daf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1092537,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (60196), with no line terminators","md5":"ce3da8d852d4aaea53a64ad820662db2","sha1":"056c1243ec466b3a6eb7726a5e46dac83e170cba","sha256":"e72c63b94d233c6909749b634b2b1b55e6285bcbfd5de6227ae981119b0a8385","sha512":"fe991d3973ed719b9aca15cb56272d81e58498c3b2b14f3a3d37211752cb85e796afe48add6a45b4880811a7e303657c24d836cdf074f4a9d5f6d48e062a262e","ssdeep":"6144:SWXnbbQNLhcB0B6eizktlPbyJv/V+pr5UrHIN89+6+9ZEkZtqMvyWXnbbAWXnbbj:53bbJB0BlvZ3bb33bbH3bbC3bbUVh","tlshash":"d635ac60a62f25456346c94ab7d36708f36cf635a00a4d58fb4abf8cd7c6354d2a23ce","first_seen":"2026-02-03T21:56:57.028911Z","last_seen":"2026-02-03T21:56:57.028911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/images/favicon.ico","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:01 GMT\r\netag: \"3a5c-63b33b71fab7d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4795\r\ncontent-type: image/x-icon\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14940,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"53e3b25f587b4e5e89f2822898bf2359","sha1":"bf836666e283c090602b0d39660b3cd64860d322","sha256":"23c881e91bbf6b9986b0464b8a7480115d76e5e2ff3d6ef32bde912b4eff4278","sha512":"5d97564ace967c2b48925b4e07cab3afae747453b1b2d7d9d12a61edbac73cef898d5cb68e87c61e32cda9d0b21d3d22a58d1ae5bbe0eb4c9d481b0003c53753","ssdeep":"384:c0ethhOGu4yzdtxexNXa+uBBVcD87P/YQ:Shhcp+Xad6DeN","tlshash":"1d62a15014c0ed66d33282b514b5db29fc42aef2c6da650836ec36e76fb3d437427199","first_seen":"2024-12-27T17:08:31.712379Z","last_seen":"2026-02-03T21:56:57.018416Z","times_seen":7,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/images/right-f.png","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /images/right-f.png HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:02 GMT\r\netag: \"1dd9-63b33b7220123\"\r\naccept-ranges: bytes\r\ncontent-length: 7641\r\ncontent-type: image/png\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"94530749be7dceaa17beb6e7e4abb7fc","sha1":"d1b69bdd35ca0ae28aade1a5e7f77fc12b33ce8a","sha256":"279ceba34dcb672b93f7c5a6bbbf38ca497769c5bd79c637ad76b3be48c00969","sha512":"b60f6337cc35a11bd4b8fd6d3054b14dbb7dd15fbaac2ae14571e8283f92e6dca843f26d6be1916a3c6aebf600fbea9546a825fd01a2c379251459a6c90dac46","ssdeep":"96:/5B/+9+Wxhhs/+GBlHmF6btTRZYjuim8csfXL369C+dqi93NELO9TBgWr2BNBduW:OrhgHGbRBfuXoidGLODN2D2ZXYepP8","tlshash":"c6f1bfa564be0b6fa8a25c83315de597a51def3f3e348f5deed42128de1200d6f20146","first_seen":"2024-07-24T00:05:59Z","last_seen":"2026-02-03T21:56:57.030578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imtoken.fakegucci.shop/images/close-circle.png","fqdn":"imtoken.fakegucci.shop","domain":"fakegucci.shop","tld":"shop"},"ip":{"addr":"52.128.227.170","port":443,"asn":45753,"as":"Netsec Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://imtoken.fakegucci.shop/","date":"2026-02-03T21:56:30.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imtoken.fakegucci.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 19:33:42 GMT","end":"Fri, 13 Mar 2026 19:33:41 GMT"},"fingerprint":{"sha1":"22:B0:C8:2F:E4:81:97:D2:C6:68:A1:3C:88:74:64:C7:4D:BF:DD:41","sha256":"BF:D9:A1:BA:5F:4E:2A:64:C8:53:F4:70:85:D7:EB:D2:B2:26:77:C3:CE:AE:2D:2B:97:7B:18:35:77:E2:66:FB"}}},"request":{"raw":"GET /images/close-circle.png HTTP/1.1\r\nHost: imtoken.fakegucci.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://imtoken.fakegucci.shop/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 31 Jul 2025 06:26:01 GMT\r\netag: \"1ba5-63b33b71d2ec7\"\r\naccept-ranges: bytes\r\ncontent-length: 7077\r\ncontent-type: image/png\r\ndate: Tue, 03 Feb 2026 21:56:30 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"cceed359a07e1bc8ac29e6c6f11a187e","sha1":"87c752d4fa8389f100182cfe8748dba802980f58","sha256":"04c182384147939e962e99ca0c99d0c730880bdb8da97b64fd22b36dbf3c1746","sha512":"97e938c555616c3dc510db92524191429729679de0251150150eea59fcf8e3fc57af40f6cb826fa0d0527552034c61676c553dbbf8f9c6505cc487e09880551c","ssdeep":"192:cEzgivvgvnX9wcA1IAMIaPd1Ct6x16FGn9qQ:cEztngfxRIa3+FGn9qQ","tlshash":"5fe19febfd6d42a715af1ce1acb413d21dbcd791b685085d78b1c721a757d8800bc0ea","first_seen":"2024-07-24T00:05:59Z","last_seen":"2026-02-03T21:56:57.031912Z","times_seen":3,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}