{"report_id":"22dd90cc-c3ca-46ee-9ddb-ba02d6776a0a","version":6,"status":"done","tags":[],"date":"2026-01-14T20:49:14Z","url":{"schema":"https","addr":"gptai-fx.com","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"gptai-fx.com/ok/#/pages/userPages/wallet","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"title":"gptai-fx.com/ok/#/pages/userPages/wallet","dom":{"size":119332,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40058)","md5":"cbdcbd0a734360e9216648461574ee13","sha1":"9dcfa743f458fe3306b2d4d0f4292994a69562aa","sha256":"3c43166bf7272a8814524d2b60d0de995d6eda1fc14348a976b562acb3f1fd15","sha512":"3d1b4a00fb6e363093997d7c8c87d7896594d755e215270ce1a87514b682a1012559fcbfb99717f817e1d6be75a33bc937e89315bf03417e62b5dea754a02fe6","ssdeep":"3072:Nsp0NVr7fnaM/51fuPlIHGvXNWPf1f4yH9sUnbauJ9BxEuMa8Qc1tblK1mklU5QD:Vrr7fnFl","tlshash":"34c33293b6dd148cae2bcd85d199b3bcba7f69a183528cc7e71137398f806c3225161d","dom_hash":"domhash6d11decf942cb28b191786f331cf7860","first_seen":"2025-11-15T17:57:49.878611Z","last_seen":"2026-01-14T20:49:29.644423Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gptai-fx.com","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":0,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-18T20:49:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-14T20:48:50Z","timestamp":1768423730,"ip_dst":{"addr":"Client IP","port":41266,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 1","source":"{\"timestamp\":\"2026-01-14T20:48:50.268903+0000\",\"flow_id\":694161224325417,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"14.128.51.181\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":41266,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400000,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 1\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-01-14T20:48:49.940329+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gptai-fx.com","ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-10-28","domain_rank":0,"first_seen":"2026-01-14T20:49:22.814998Z","last_seen":"2026-01-14T20:49:22.814998Z","alert_count":35,"request_count":35,"received_data":17102922,"sent_data":15761,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.12.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"api.daumzt.top","ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2025-10-26","domain_rank":0,"first_seen":"2025-10-29T21:34:30.516155Z","last_seen":"2025-11-15T17:57:34.953154Z","alert_count":9,"request_count":9,"received_data":1088432,"sent_data":4374,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-01-14T11:37:09.481821Z","alert_count":0,"request_count":1,"received_data":579,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6578939d972214d28dbfa6337d266981","sha1":"7ff9421214de9f7c312813f2c033fe4ca1d79998","sha256":"d9d1333e25e3a06fe02ca0ae4bc845289267c8c81cd57dc60ebd05e963afbe7c","sha512":"8bb7508d4f99ce1cc5d12368d3cfa4d7b8d5c795caf8e840e541598dfa97492a3cdff4f3d3949f5f6e77e861bad082ed88b4762c60dfeffc31decc76783237d5","ssdeep":"","tlshash":"a2b09219025a0a00508600fe198931216a329002e15cab147a5d82923fc520dab90f4e","size":117,"data":"","first_seen":"2025-07-13T10:39:08.767722Z","last_seen":"2026-01-14T20:49:29.702615Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/jquery/1.12.3/jquery.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c07f2267a050732b752cc3e7a06850ac","sha1":"220dad6750fba4898e10b8d9b78ca46f4f774544","sha256":"69a3831c082fc105b56c53865cc797fa90b83d920fb2f9f6875b00ad83a18174","sha512":"9b1d0bf71b3e4798c543a3a805b4bda0e7dd3f2ca6417b2b4808c9f2b9dcb82c40f453cfae5ac2c6bafc5f0a3e376e3a8ce807b483c1474785eb5390b8f4a80e","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9s:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrV","tlshash":"b293d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97180,"data":"","first_seen":"2023-03-07T01:29:55Z","last_seen":"2026-08-09T16:09:10.935406Z","times_seen":3959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3model.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d8d0cbb879d72194540ffbe67c0eae","sha1":"5a8caee12923f199e56dcdccdf3beb75dc0d1df4","sha256":"9da6c11b7e00aeb518ec71457f12ba7bca8e17f0722608b346f729ae7483883e","sha512":"b69c0813f95c1feee7eaed0a638c2fac8c9c116a80200e8a758ab0dd28de7dc87477147be13b74081b8dcd483de160c8a85a99678f4027132bfc1c835255d05f","ssdeep":"6144:5k8vb8tmGZq2PcCX5f01A2jz0Fm1HmeBbehEZDtZ+bmQ88Mz3FNo8vqqjepa/:68vbP+507ziXeYhElD+iQ8zz1N8qje4","tlshash":"a7a45bb573c67a358656f1729c8f9c88ba3c6909039c8096a70cc8b5a478578c77fdec","size":472096,"data":"","first_seen":"2025-07-12T08:20:30.010611Z","last_seen":"2026-01-14T20:49:29.696152Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-coin-detail9~pages-qbapp-walletDetail.3baf85c8.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"39e4fb2f77a8301614ba71d640e72dd6","sha1":"9dc7cdbf1752e3d344d838ae466256dfec71fe49","sha256":"fdffc5e84b86f4dc965d54c2b697c8b65eca4f7689c78de169c2c0c18ec0bb88","sha512":"635de825f44249f50f7c606b4ad6d90116f8d17ef08e4207ef3eaa21110524c532ddecf0c1b40e311059c2594a09f9bf95f87494a79194e3d24c7e6192a3f4b7","ssdeep":"384:DXkigdCLxDCx/R/2mRBwRYYxU1ABGbscGTU:DXkdcDCxJ2mHwRLxU1ABGbKo","tlshash":"e372f988f0c2f855069361b2813f8709513bad9d7117669cb7b9eaf64e68a4c2353f3c","size":16506,"data":"","first_seen":"2025-07-12T08:20:30.020574Z","last_seen":"2026-01-14T20:49:29.700182Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/#/pages/userPages/wallet","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"93368157fb131b56a45d6f60f8b40342","sha1":"ea2a25edb7b00c3e0a06650f02fded5bd87dfa20","sha256":"c48d4859bc082aa591168f7d7230bef438ecc2b3074e707c83864e11ec1a891f","sha512":"366c90d022f7fd6718d76460de51a154cf6cf8bf8e3aefa2e0e736cbba24ec53506485331abd3c3c2a7e6ae00c9a3b957a9aa675ecdd389afca7863ad8365908","ssdeep":"","tlshash":"c8e068c260a6294c02208016304ac1031bb608729ec149613c4c67a58fb9f4bc46e859","size":352,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-08-10T18:31:10.528148Z","times_seen":7169,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/pages-tabbarPages-coinDetail-index~pages-tabbarPages-home-index~pages-userPages-wallet.2784da84.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"85a877d7f5b3b10532b4ed7af75bde33","sha1":"5686de921e2f2a7f176b82f175b24ecaa68b9426","sha256":"a915f1493e7f0ca7244eafefcbafa2d31e36ad83ad54170d332742ade5d3ecd2","sha512":"930ed10b36bf9fc0a7eaff2e7228ecdf03caef45bde0f7409a4ec107ad5d27e37669e967dc0d55d99396a7fef7308cf0d513d1b2a0862c87d9f4141fc6639de7","ssdeep":"384:KrvgAcNp28jsmr5aUrCEYI5RU7dkbpr045dQrg0G3v9Az904iNKvzXUnuVeQPnTf:+vgAcNprXr5aUrCEYrRkNrTdQrgt3v9s","tlshash":"c8b29384b6d6b01907a26585045b540ff279ee68b84c18a4f715e4e278f8dcec8bff78","size":23403,"data":"","first_seen":"2025-07-13T10:39:08.752819Z","last_seen":"2026-01-14T20:49:29.690577Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"4632174f16e51e5663107786dd62211b","sha1":"d9bdb81462473a3597d8a2299b083c6b401ee412","sha256":"fa2f1f16278c0cbae07080842996843bf68d98ace56b9ae813df993edf84bd01","sha512":"412a24c16920feffd7b5dd033c3de93813a4fadf0189e7986f30e3fc8f8a00c078351c930192b5d5af01481e088fb093b3cee5aa389fe5b9011575f99789a84f","ssdeep":"","tlshash":"69e0c0c360b63d4c02208016304bc1031bb60872dfc14d611c4877b5cef9f4bc46ec59","size":344,"data":"","first_seen":"2023-03-07T18:13:21Z","last_seen":"2026-07-24T17:20:08.151549Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/layer/3.5.1/layer.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d39fc6c1db94e8d211313805a70c24b","sha1":"021fdc67c0acd11655fa605cb26ffd1b19ab243a","sha256":"be5b759996d0b5b388dc5922f99d18d5f3feb0ffb3b1a9d5b73b8c0a427ab8d4","sha512":"d221bfc9a753cff96d629f1f6f3cd9789aa9eee6f46b43bca3704550a942a9483b1bbd8e48cd8048b89a85e45f7a4e4f968eaf2785afece0636273db3aec0ed7","ssdeep":"384:sseNGhG5ql45QlESAJDVwJZY+WxeJwCj+jC6Tb2u:slkmqlHlESAJDVwJZYJxau","tlshash":"1aa2a56a215035a72223c199e14fbe0b31b21d25d7074128f16af4bd4ebcda9a277f4f","size":22256,"data":"","first_seen":"2023-03-07T12:58:08Z","last_seen":"2026-08-10T03:14:39.191087Z","times_seen":7287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/bignumber.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","size":18565,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-10T18:21:08.37864Z","times_seen":822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f1bcb9c0aa4d630f4ff2e62cdfb047d","sha1":"10fae0c1307b6a9327eebb38a912d859ec47b6fe","sha256":"60a0ba32f065882dfe43edd1566b07094d1046ad5b75035076097aeb13a1ccbe","sha512":"5f28efca112d068ab6ec52fc2148d1a6e30c67554153717fb9a357b19a3c949444aa06c3cc9e57982d381820d58311f3a318ea8f801823f5cd068cf9a24144db","ssdeep":"24576:BOL4Nx5YLN/4mxVV+qkVVjhZjRoVCUxhRHfM2x5EfJtp9TzhOhJHto5EomFROn7y:BOL4Nx5YLN/4mxVV+qkVVjhZjRoVCaHN","tlshash":"9d55c7546bde3536c24af0a14cdfdd49e7bcec6c068c404d661ce6e6987c5288b3acad","size":1361752,"data":"","first_seen":"2025-07-12T08:20:30.014829Z","last_seen":"2026-01-14T20:49:29.706169Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/fortmatic.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1cfce4b7b733e65b8ec2ec6886fd154","sha1":"5be481f17d14c6b0a857367bc510d053ba7ac769","sha256":"962839c26764376bfb94b7dbd5905ec14e59ddc06511d3aa2af0f148828f318a","sha512":"7a011c1f0b49bebd377ed688d8d0d10a9bd0c9006c9a40aa50141d1dd442d7b25ac77fa2ba90a2cdf64223c061687f7b791be53df7787d8725b2380d3e0be6ac","ssdeep":"768:dV480CB/jRuCNe842HtQVojtjFjZijR1oXplo6g:dlcF1o3g","tlshash":"47f2e8ccbac5f411436365b9803f540be33a7d19782c48a6b658dad1bc7854ea227fbc","size":36066,"data":"","first_seen":"2023-03-26T03:21:15Z","last_seen":"2026-08-10T18:21:08.385777Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/chunk-vendors.6132d5df.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"70e2c5aa63692057ec9b51924739dcb6","sha1":"f9bddc457c8ebed4bfebc97fe008625493e3f986","sha256":"ce28b7d7802f4961153b6018ebd3d21cf55abd0390a808db19a3b7804673123a","sha512":"258f4e309e034a8b3de79ffba8672a188cecde4fb05c62e398d584873b53f4fa1e1748229a7b2f4c8ed1a0d3c04244ceb67cbf167be31e51e6d0a9f8cccbef1c","ssdeep":"49152:MXVxXpMAyuPCpvZlmoE7q61et7s35AiGYr9tPEg4Jg1lCa1BN01n8LdVdJ3x0lfz:MUa9O","tlshash":"2966314a6ae62465d203f078496f9d05b234945b0d4dbd183e4c92e88f1d83c9bfafed","size":6721764,"data":"","first_seen":"2025-07-12T08:20:30.038901Z","last_seen":"2026-01-14T20:49:29.709301Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/uni_modules-components-home_chart-index_bar.8d24234e.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea091ce952170b9e6338bd556c65f551","sha1":"413c9ca787dfc6d0d7bc3a6b1bba967189d0f873","sha256":"f878a3f221dbc7ad6327beb688a72c4ba814599d69445b723bccc91d5cc102cc","sha512":"f12cd6c8e1dbd61eb38e5200b5c8dfd5739cb68e550f2a1fd02362bdc0fdf8a928d5d1e107294271d9f373d95c5997c601bc0d789f23f16b6bfad7102de9a843","ssdeep":"384:pL/mPwAhh4/CZPsoRUEuHARyVpwxAkg4nUt3:pLeYx/CS4UPgRhCr4nUt3","tlshash":"1df2530e39f6a012da17b035072f9815b030654b5a0eed553e5de3648f2d83f66babec","size":36542,"data":"","first_seen":"2025-10-29T21:34:44.098607Z","last_seen":"2026-01-14T20:49:29.653124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/evmchain.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","size":22657,"data":"","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-08-10T18:21:08.421397Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/TronWeb.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bc6f380bf50f2bb53a9bb6bc8b95ba2","sha1":"bea292da845e5bf9358f3f9e2aff7e1b47df4513","sha256":"fa54adf0ea182f47e0f086003f4a12f22746da35e5e28f12e01eb1474d22545d","sha512":"3588617f356b1aed38c277afeaf4e5aac785a87b4eadd878319a399f562a53bc97f48c2f420f1f71df6a602e60aa3b61e28a8b7a0fe8c7623f91126b7a4e55a6","ssdeep":"24576:03XtEN17LCrc4ENKC1M20SmX6FFavQOMhNOD3cywXh4E5r1mYin:03XtEN1f2c4ENKC1M20SmX6FFavQOMhw","tlshash":"1b05e75973d57136864bf0a05c9fcc4af738a91c1289944db70cd9f2a828938db7edb8","size":836526,"data":"","first_seen":"2025-07-12T08:20:30.031628Z","last_seen":"2026-01-14T20:49:29.649962Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/index.5c657796.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac235b5eda39d027b2b0d79bebc69fb","sha1":"4296ecea1b8610477f799e5019ddfdab323351fc","sha256":"99f8340d23ab514b4ac207317b1214c9ca1954e4979e851cbd6748ac2a80324a","sha512":"b8b7e2b656e657f63bf685eca18c1b93d69ee9ed5ad627b71020d6f77b46b5c0e5e59f1bf3d40913b64ac37943ba601640861bb2ad69a5ef2417583537e349ed","ssdeep":"12288:oUqc3AVkkRvVZaW4qsGKUn8Q2Z7ceSEpXDDdIAaaDpH:oLceDVGQc1","tlshash":"3cd45b2ed2c11eaf2113e505d68eb949a0549923ef117eb8bb9c422d4f9f90f41b274e","size":646041,"data":"","first_seen":"2025-10-29T21:34:44.13507Z","last_seen":"2026-01-14T20:49:29.710043Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-addBank~pages-qbapp-arbitrage~pages-qbapp-arbitra~0bd94b87.08680bb4.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"79a68ab52c7b7bac0c042d494115cbb8","sha1":"8579236d1059bf768da882e5a3fd0a533b192ad8","sha256":"41bb7dad869176c6b373f1202a562e810d2043bbf710c77789e99ad9ac16fc4c","sha512":"aac80d1a1ff5209f167bec20c86651b6b1cf90666e16421496423fcb6365861818a3bd8cfa6e26fddae4c6623ef3c4af8ec6c85c87cbbd74077bf6f6edec219f","ssdeep":"192:S0u9cnkUa5ECdSzwycDDGXEy1lUnU66qkFqA8TkJcYyqn5SxK5TgeaaBVZ+iQo:Jlnxa5E5zw/GXHBqQcY15T5PVZ+s","tlshash":"78d2bc8ac64c19d83fbbd10f658c7a6f11493bd2c44d2cf8aca6d34d5ddee622a40369","size":29766,"data":"","first_seen":"2025-07-12T08:20:30.032545Z","last_seen":"2026-01-14T20:49:29.667284Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-coin-detail9~uni_modules-components-home_chart-coin_chart.2068a219.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9e623fe5dc4a974453acedce7710f11","sha1":"e2873fcc791106c8c6f22c63beac3b931d928bd7","sha256":"73b3f12675e07dbbb6468e7ef7f175d7ef02e345e2c7e3913c160f9a8fab1751","sha512":"96ffc7ad3a24849bd69ea1c1bb71710e4f4f623896fc554ad764de6f8197bb47e91a388048c5c7bd33525a826013b11ecf18b1dfda30b9cca0edf811809ce3e0","ssdeep":"6144:QHBP3BRk6Tw0WLjwOGoOtNiJ6cNDt+Tak7B/:Qp3Bm6TWAOGpPiJRNDt+Tak7B/","tlshash":"0b84094eb3c53a2ac64bf1206c5ecc09a2396a1d53856c5e771cd5e4982482ca77effc","size":378878,"data":"","first_seen":"2025-07-13T10:39:08.766917Z","last_seen":"2026-01-14T20:49:29.681333Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1.6bae5f8f.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"45c40d18e32a7a7de6bbd2051f11b05c","sha1":"c4e40c8614cfdcf8deee533d3cf8409fb1dce8fa","sha256":"b7a42db4d9a75270fb5c8c3c9f3eefd2b569da514475948fe177f66ade2bd89b","sha512":"66064111bfa4d0648799ccbed48f3af1771d4160855428db13c68a461bed4e39ab4df0592d742ace8b90f89309e347d970007f79ba1fd1d188070742ad732cb3","ssdeep":"1536:/P8mYLVtdelkxCmZAB/1BfPV9JU1j3PuK7C:/P8mYJ3elJWg","tlshash":"4bf3836bb6c89198e237cb115bd45ed48120e3b384014d97b60f29299fcb79733b672e","size":157783,"data":"","first_seen":"2025-07-13T10:39:08.746266Z","last_seen":"2026-01-14T20:49:29.656227Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/index.372063e5.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7177816c7076c5936756ce7a03f263e7","sha1":"d004a14ef8c43718bf15105eddf218a6db15acb4","sha256":"62d55f4771328865ddd0e79b8560d71d18d3c29c3606eccd9982a2a47e8859c6","sha512":"50e3676867c21970e181fb3f199b7473e542e6a8dfccb9269552c3a4324b575acedabaa5cae1f702ab5de349a91e8a72b2d605c61239ae9bfb804ebc75187be5","ssdeep":"12288:a0FyuSbcsx1iCamsVPMz7/JZams24E9AHUk:a05sx1iCSMz7xZV/9Ax","tlshash":"f97509c47691b095c3936aa1402f900ae37ebd652c4c4069fb57edf31cb9a895227f3e","size":1658120,"data":"","first_seen":"2025-10-29T21:34:44.130924Z","last_seen":"2026-01-14T20:49:29.711545Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"973e831379b94d060af9b2e9bc78f49e","sha1":"83448e2204ac7f3afafeb07ffa3d2b92a7e31ce2","sha256":"814148cbc3bea44c7786594a53ca13a6326ad08dfd73abbb11e82c285a15109b","sha512":"45e6d9b25a24e2c9a1c34173df38587cad6d7d85753f8211d4e0dff58e73be9e4cb99724024ead994c6cef70aaa958f9f15fb628bc9d83a52b39ca44844f8080","ssdeep":"","tlshash":"5c90027528c2201060173256547658e601308030d4588d51010498a1985543156065ac","size":49,"data":"","first_seen":"2023-04-11T21:45:58Z","last_seen":"2026-08-11T03:23:50.344213Z","times_seen":37813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3provider.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"79247c22859cdc418b9360a446bd3d4e","sha1":"773661fe536ad567cbc563299a0292e9b4b161bb","sha256":"32d78f9cb8a751d057fc3233f5ce9ec1a33d87db8a0817a830cbedce126b0c71","sha512":"f20f7e87f7a419f27defb1aa76f648aef8e977d899584e040ddec9c3e0fecfe991d6be567351e414192569f65df5ca508dfbaadaeb0e888d94992807cfe55177","ssdeep":"24576:7KKwTksCLyD97Fwlae+u3iKcjYjzU66cOv3w1NMarTboZ5PxfbF1oIPX0aNagQRc:7KKwTksCLyD97Fwlae+u3iKcjYjzU66d","tlshash":"2335814473e57239c34bf0a19c9fdc4ae778f9ac178a404d6a0cd4f4a8694688b7ddac","size":1128265,"data":"","first_seen":"2025-07-12T08:20:30.017225Z","last_seen":"2026-01-14T20:49:29.713563Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/chunk-vendors.2bb2291f.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4afedceadd25be1c6d5a39c4f3c8c5f","sha1":"fc957d0432d4d7d68d410f23bf5a9e807bc0dd17","sha256":"9881f6156b3946dd8e1374b344119b6ba3b084eb2468b913272a7c79371767e1","sha512":"5be73ff99ae75be3a9d1120b3c44ffe3aef86f0b82e9ac0cbf10dadb159d7f8503ea7723c742d45a63b3e573d8c5b36db99721f0d014fec2999319cf47a665ba","ssdeep":"6144:8rr7fnFKfCHzbVZA+mI2IBT12B8GvvtwTfFvLb/fflvYNT8/Y3vm79ta/hm39v4J:8r3n/Z1h8v1wTdXfdYt1wtnv4zqdFzU","tlshash":"b025088cf286b0b61be760b5403f220bb2376969b40ac4d5f675e4d4ad7894e1227f3d","size":999018,"data":"","first_seen":"2025-07-13T10:39:08.765042Z","last_seen":"2026-01-14T20:49:29.692781Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/#/pages/userPages/wallet","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-11T04:51:45.933763Z","times_seen":741550,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/pages-userPages-wallet.090e72d5.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"6749bffa65c4eeec51943a9d25384010","sha1":"9cd3242e68bf7f61dc9b7870a617d808c6faac0f","sha256":"2fa47e8ed7f3f034c054b09e0e76575125070636d147fea5fd570ec2b7a1f2c5","sha512":"afe55a809c050814147e362706c04dcccbef0db3625c8243ee7d1f0a70d90a1c6de4d6fc5b0aca4c8bc65b0b585bf857f5075e1f6b438dce6eb12a9617a8f97c","ssdeep":"24576:tP8akBFCN2bbRyvrNXc2Xr25ORQTTU1j3:6/C2bbMv725ORQTT67","tlshash":"8a75098876c6f1a6439220e0143f600fb27eae5cd44c9555f364e8e27db8d9a963bf34","size":1609002,"data":"","first_seen":"2025-07-13T10:39:08.753988Z","last_seen":"2026-01-14T20:49:29.714828Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"3d5272693eb411e5b8b13a243f76c720","sha1":"6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c","sha256":"9582f31f9eb892b8823a780e579d464d54e26d97d65dc327d2b2bdd92d47c4b8","sha512":"03fc5614f48fc9a2e3c4a30626fdbacde74c1fda09ffa9d1cde0393d31cd5fe1588e270c241f4cedb473c6e5cc224ff16c141468a29519ea6159accf3e3a18f1","ssdeep":"","tlshash":"a4c08c8350e2080c8210861b848880050b8808b04f9308a22cd85b7ecc9ae88c8f804c","size":148,"data":"","first_seen":"2023-03-07T01:10:06Z","last_seen":"2026-06-07T08:18:02.151537Z","times_seen":15899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/evmchain.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/evmchain.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-5881\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22655), with no line terminators","md5":"103cf7a3766e010c9499d24721aaf984","sha1":"ca4e27f04aa5be91c32e0942583f39bca5277a1f","sha256":"d93c05813c158faf533a332c1b49f2a9f0432e0454fdefd1a2c9f11428b7a4e9","sha512":"373140cc684cfd8e2aaaf34a7da1e0a5f4bffd39a86c6979203068f9e2991f33be45968c05076b2d06042de30952e9076eb054c27bae0d4d5c91f94db5923b67","ssdeep":"384:3LyedkdCfFDM33MPH0mz7Cb4h/iUJbstZ4xWXZrTOHnf+RJvDqvGKifPauiy1Bes:SCtC8bh9gWe3FptN9Ra6SAzjQiKTsDn","tlshash":"daa2d9f3d354a98e8b7990cc1ce93719c1078c89c45e41feea964aded8f6067a119f23","first_seen":"2023-03-07T01:24:55Z","last_seen":"2026-08-10T18:21:08.421397Z","times_seen":724,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/TronWeb.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/TronWeb.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jul 2024 09:54:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a0cf5b-cc3ae\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":836526,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65270), with CRLF line terminators","md5":"3bc6f380bf50f2bb53a9bb6bc8b95ba2","sha1":"bea292da845e5bf9358f3f9e2aff7e1b47df4513","sha256":"fa54adf0ea182f47e0f086003f4a12f22746da35e5e28f12e01eb1474d22545d","sha512":"3588617f356b1aed38c277afeaf4e5aac785a87b4eadd878319a399f562a53bc97f48c2f420f1f71df6a602e60aa3b61e28a8b7a0fe8c7623f91126b7a4e55a6","ssdeep":"24576:03XtEN17LCrc4ENKC1M20SmX6FFavQOMhNOD3cywXh4E5r1mYin:03XtEN1f2c4ENKC1M20SmX6FFavQOMhw","tlshash":"1b05e75973d57136864bf0a05c9fcc4af738a91c1289944db70cd9f2a828938db7edb8","first_seen":"2025-07-12T08:20:30.031628Z","last_seen":"2026-01-14T20:49:29.649962Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/uni_modules-components-home_chart-index_bar.8d24234e.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/uni_modules-components-home_chart-index_bar.8d24234e.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Oct 2025 02:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fedda2-8ebe\"\r\nexpires: Thu, 15 Jan 2026 08:48:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36542,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5337)","md5":"ea091ce952170b9e6338bd556c65f551","sha1":"413c9ca787dfc6d0d7bc3a6b1bba967189d0f873","sha256":"f878a3f221dbc7ad6327beb688a72c4ba814599d69445b723bccc91d5cc102cc","sha512":"f12cd6c8e1dbd61eb38e5200b5c8dfd5739cb68e550f2a1fd02362bdc0fdf8a928d5d1e107294271d9f373d95c5997c601bc0d789f23f16b6bfad7102de9a843","ssdeep":"384:pL/mPwAhh4/CZPsoRUEuHARyVpwxAkg4nUt3:pLeYx/CS4UPgRhCr4nUt3","tlshash":"1df2530e39f6a012da17b035072f9815b030654b5a0eed553e5de3648f2d83f66babec","first_seen":"2025-10-29T21:34:44.098607Z","last_seen":"2026-01-14T20:49:29.653124Z","times_seen":3,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1.6bae5f8f.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/pages-index-index1.6bae5f8f.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Jul 2025 08:58:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687223ad-26857\"\r\nexpires: Thu, 15 Jan 2026 08:48:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":157783,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (47442)","md5":"45c40d18e32a7a7de6bbd2051f11b05c","sha1":"c4e40c8614cfdcf8deee533d3cf8409fb1dce8fa","sha256":"b7a42db4d9a75270fb5c8c3c9f3eefd2b569da514475948fe177f66ade2bd89b","sha512":"66064111bfa4d0648799ccbed48f3af1771d4160855428db13c68a461bed4e39ab4df0592d742ace8b90f89309e347d970007f79ba1fd1d188070742ad732cb3","ssdeep":"1536:/P8mYLVtdelkxCmZAB/1BfPV9JU1j3PuK7C:/P8mYJ3elJWg","tlshash":"4bf3836bb6c89198e237cb115bd45ed48120e3b384014d97b60f29299fcb79733b672e","first_seen":"2025-07-13T10:39:08.746266Z","last_seen":"2026-01-14T20:49:29.656227Z","times_seen":8,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/kline/getAllProduct","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"OPTIONS /api/kline/getAllProduct HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://gptai-fx.com/\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\nallow: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-request-headers: *\r\nset-cookie: client_lang=en-us; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/img/invite.088437d2.088437d2.png","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/img/invite.088437d2.088437d2.png HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-1d95a\"\r\nexpires: Fri, 13 Feb 2026 20:48:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 746 x 396, 8-bit/color RGBA, non-interlaced","md5":"088437d2ad9a0b93aaa8e62ea1c495c8","sha1":"0ee0f22be652bbde4e6fea496edd688f8e40a4e4","sha256":"7f5b5951a5fe5659a3003bb834df6fe6e8041eab6918b5c0352dd91b01f31798","sha512":"037af5be2f10b9a6798512aa11841527c74936e860fa12599a3aed8538d58936cd1997b019f1b8da6a9eaa4f1baf146503a122e71ff3e81278e1e56eeff9b541","ssdeep":"3072:w7W0ltvcSweB4IghhxGloorkJpt71OLBR1AkI0z:2BKSZB74x2DSQ","tlshash":"51c312f9c5667c6e4193db11accd06a48d880f0817bb228f5f479d9f290df299782607","first_seen":"2025-07-12T08:20:30.036657Z","last_seen":"2026-06-05T13:12:44.539279Z","times_seen":15,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/kline/getAllProduct","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:59.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"GET /api/kline/getAllProduct HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: client_lang=en-us; path=/\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-request-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1074679,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ac8e4ee81ac89c689c646b65561d8a36","sha1":"01727b2fe58a0dd302b0b572515101a04c5c88a7","sha256":"c764ac4d8467e439c715e3afd0c27c5a8eabd26d77a1422e9093d3e1473945b2","sha512":"92bf7292601985ada6d3d0fdd253e6019b8ce001fe20aca6b9d7777ac670a26e885d6940da65f732a5e407c719a70334b82137b0009e724e02c97cf9564cbf53","ssdeep":"3072:KqgbfhN0APoWKod5tczbl2l8c0rUKNqbs5+3GBacJQRc+Qy4MsBwOtuVPdD04xJt:I","tlshash":"28254279036896fb6ebe478214e465b61474757fbc946c8cfbcbdc26ac25db38063802","first_seen":"2026-01-14T20:49:29.659966Z","last_seen":"2026-01-14T20:49:29.659966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/user/userinfo","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:59.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"GET /api/user/userinfo HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-request-headers: *\r\nset-cookie: client_lang=en-us; path=/\nlang=en; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a4de19c808ed70606b41d2925543b767","sha1":"a1e1e9d514dc58b37930d12cc404f33405562377","sha256":"997f414f1c2faf090d240620d24a153ceab2ba5530a857a2e12afa4fa26d1aef","sha512":"2236b339a4ccb33ecaf8ff6618d0b1e98f539fce99af53ee4ab7bdf980cf3f7ac50a6deb85a962ae68dbad06bb88389ecbb568cedcdd364f3761c9042f8e51c6","ssdeep":"","tlshash":"1890040c140f41771c35c1d4000c535c515554c4001407140c4ff13cc01d45d3057534","first_seen":"2025-04-29T18:51:18.811566Z","last_seen":"2026-08-10T18:21:08.413667Z","times_seen":41,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":975,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/jquery/1.12.3/jquery.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /jquery/1.12.3/jquery.min.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 27 Jul 2025 14:56:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68863e00-17b9c\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97180,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32029)","md5":"c07f2267a050732b752cc3e7a06850ac","sha1":"220dad6750fba4898e10b8d9b78ca46f4f774544","sha256":"69a3831c082fc105b56c53865cc797fa90b83d920fb2f9f6875b00ad83a18174","sha512":"9b1d0bf71b3e4798c543a3a805b4bda0e7dd3f2ca6417b2b4808c9f2b9dcb82c40f453cfae5ac2c6bafc5f0a3e376e3a8ce807b483c1474785eb5390b8f4a80e","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOa99TwkEb7/Jp9s:P4J+R3jL5TCOaLTwkEFdnCVQwNa98HrV","tlshash":"b293d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:29:55Z","last_seen":"2026-08-09T16:09:10.935406Z","times_seen":3959,"resource_available":true,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/bignumber.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/bignumber.min.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-4885\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18565,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18564), with no line terminators","md5":"220b87873ab81287f915af82e3ba9a33","sha1":"ced2ebc27d644716effa64115643dd1770ba04eb","sha256":"266103c2cedfaf94d60f5a638555639fb2b86f2b66386660fd3d057715ebf463","sha512":"ddd12920edadffa6de43bed4fda62056a26999291cbd6b9314ee1684242b4a2dad49057753e938a65c122a554ec4a89bb2777a67fd1ebe60a5b0c9782d567b22","ssdeep":"384:W/NxaJsOM+a9fxrSZwieoa+gPIbMPzvP22niiXuB/CeTa4pLG950/GrVh:0xdxcZ9epPzP2/VlTDiX0/6","tlshash":"e582fcd875e3f09d62ff20e100e75443e17a9f0ba84c1976a2509496b831ddba2aff35","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-08-10T18:21:08.37864Z","times_seen":822,"resource_available":true,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":997,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/fortmatic.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/fortmatic.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-8ce2\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36066), with no line terminators","md5":"f1cfce4b7b733e65b8ec2ec6886fd154","sha1":"5be481f17d14c6b0a857367bc510d053ba7ac769","sha256":"962839c26764376bfb94b7dbd5905ec14e59ddc06511d3aa2af0f148828f318a","sha512":"7a011c1f0b49bebd377ed688d8d0d10a9bd0c9006c9a40aa50141d1dd442d7b25ac77fa2ba90a2cdf64223c061687f7b791be53df7787d8725b2380d3e0be6ac","ssdeep":"768:dV480CB/jRuCNe842HtQVojtjFjZijR1oXplo6g:dlcF1o3g","tlshash":"47f2e8ccbac5f411436365b9803f540be33a7d19782c48a6b658dad1bc7854ea227fbc","first_seen":"2023-03-26T03:21:15Z","last_seen":"2026-08-10T18:21:08.385777Z","times_seen":45,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-addBank~pages-qbapp-arbitrage~pages-qbapp-arbitra~0bd94b87.08680bb4.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-addBank~pages-qbapp-arbitrage~pages-qbapp-arbitra~0bd94b87.08680bb4.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-75fa\"\r\nexpires: Thu, 15 Jan 2026 08:48:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29490), with no line terminators","md5":"79a68ab52c7b7bac0c042d494115cbb8","sha1":"8579236d1059bf768da882e5a3fd0a533b192ad8","sha256":"41bb7dad869176c6b373f1202a562e810d2043bbf710c77789e99ad9ac16fc4c","sha512":"aac80d1a1ff5209f167bec20c86651b6b1cf90666e16421496423fcb6365861818a3bd8cfa6e26fddae4c6623ef3c4af8ec6c85c87cbbd74077bf6f6edec219f","ssdeep":"192:S0u9cnkUa5ECdSzwycDDGXEy1lUnU66qkFqA8TkJcYyqn5SxK5TgeaaBVZ+iQo:Jlnxa5E5zw/GXHBqQcY15T5PVZ+s","tlshash":"78d2bc8ac64c19d83fbbd10f658c7a6f11493bd2c44d2cf8aca6d34d5ddee622a40369","first_seen":"2025-07-12T08:20:30.032545Z","last_seen":"2026-01-14T20:49:29.667284Z","times_seen":10,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/img/ai.7877ad0e.7877ad0e.png","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/img/ai.7877ad0e.7877ad0e.png HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-252a1\"\r\nexpires: Fri, 13 Feb 2026 20:48:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1107 x 495, 8-bit/color RGBA, non-interlaced","md5":"7877ad0ea5379cfa35a34a8598553d32","sha1":"8bb18fc398b4012d7621cb1295b36b5ff507986e","sha256":"301c7a5d6fe1d8a8e683a426014c82d6af06d9b1f6665509560b24e585c47755","sha512":"805fc76dc8fe5615f76ed72c07fe1ee9d7d7ab28eae483ac789762a77a509f9da6ed3c8c4a5742a92a812324b8b03d25a6852866e691221a5cdb7cb58e9f9785","ssdeep":"3072:14l9XJah40ESsHGUVsCQWCcNb+kA/lLBzMBSO7j+8dh:yazVsHCHJ/lLlMBS+dh","tlshash":"dde3025dc9f501870a9514b8e6ab2df2e37cb41f8ed0385a14a9b0c84cabcbd93d015f","first_seen":"2024-12-22T05:51:59.147849Z","last_seen":"2026-06-05T13:12:44.551745Z","times_seen":21,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/favicon.ico","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:04.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:04 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Sun, 17 Mar 2024 08:39:50 GMT\r\netag: \"65f6ac56-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"5eb8fe81bfd9e5a6088e45f9dbf8b80d","sha1":"a03a70078033bf1e2910495e4fc66b03a4338945","sha256":"ec4defa90aa12347abdd4a67b47203ff28d43feb61128f9f55e72ea8a65733b5","sha512":"496469402955d9a396a94f289931e571a46c7fe85d00dc1cad2b39fc451e175d0843115691dd75673196d59d75bbf39afde90169fdbfe2c7e8241cf103667b2c","ssdeep":"24:91e/KjHDgjLZ6lx1xR8QLLqqgQPHWst9eD4qUX50YPtaaTaT+lQapF8:9kCg56r36ykQ+sfeMqEG+o8aTYn","tlshash":"151238f3aa5559a4de05477c677bed2e167faf71fa71e1689001b0710f731e15004a13","first_seen":"2025-07-13T10:39:08.730993Z","last_seen":"2026-01-14T20:49:29.670305Z","times_seen":9,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":652,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/index/walletconfig","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"OPTIONS /api/index/walletconfig HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://gptai-fx.com/\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\nallow: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-request-headers: *\r\nset-cookie: client_lang=en-us; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":333,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/index.372063e5.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:01.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/js/index.372063e5.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Oct 2025 02:49:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fedda1-194d08\"\r\nexpires: Thu, 15 Jan 2026 08:49:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1658120,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64652), with no line terminators","md5":"914ba4093477bb4b3eeee1c446e8c057","sha1":"aab7b1d405c7418301282c4328f71c397ed4dea8","sha256":"bb6cb1473cad38a55728d9bbc437b29ba7efeeb4251bb9b7b73f206f92dd4214","sha512":"ff66b6ce0c621958dd4d27ed44e59d0feebbaf88f8b04d5416746d1ca51966f51e1213e346817903b054ff768f1bb7275247bcbe3ec95c38bb507661c25c3e7f","ssdeep":"6144:MSIraJeBqoxgiRvYTxevVBgctKEgdyuSbEkH6jG+imegVkFXyXuwXRCCNvmse2f2:a0FyuSbcsx1iCamsVPMzF","tlshash":"02252b84b7d1b0a5839365a4402f600ff27bbd29284c4468f790edf66dbd9896633f39","first_seen":"2025-10-29T21:34:44.093938Z","last_seen":"2026-01-14T20:49:29.671684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/index.2da1efab.css","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/index.2da1efab.css HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Jul 2024 11:48:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a63006-1b513\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111891,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6246)","md5":"c580713343ea3b36726defbb41d548fa","sha1":"fae77138b9d0f9ff51d48389175ed53f6d29cf10","sha256":"1a8549b2012a68815d408bd520f5215a83ca7ba9f268ee6c73bafdc011a29d35","sha512":"ff4553595977cf7ce8b9a465241f6fb05b21ef4bd281ce4f478ad0b9f3d5f08dc7ebaf49667766da398d4d74e9dbfe720a150f07969e3e7b14f0e3461c9f37fd","ssdeep":"3072:2UT4lpuKbhmVKyJqMZKjgS7V0xABZatzybi96i:2UT4lp1bhmVKyJqMZKjgSCxABZatzoih","tlshash":"75b3a6b61a251e04a92fc51936822f256f719073510bcebcbbf2344c8fcfac855a7796","first_seen":"2025-07-12T08:20:30.011595Z","last_seen":"2026-01-14T20:49:29.67292Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T20:48:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 27 Jul 2025 15:08:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688640f3-63a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.12.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1594,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"873f246e90bee670c5f441a7b7ba9a66","sha1":"ad9b40c02434bf1d2d3f3a048228d95a56a0bc15","sha256":"5cc447d84b949a0f8b25b7615d9fdbc1c26637306285497877722042eca1cfde","sha512":"abcb23ece4cebe13e3098bd035527086feaea4c222d50b4f7ffd8fbfd7e0510817a4b5dc3c88a16c6e64235e22bdd9daa00e665beb6b9fa064b64233546c4580","ssdeep":"","tlshash":"d531d14adc45cd4d5410c44b2475f41cade9d45cb1a8ed68b4dd9d388b963cc8e5bc18","first_seen":"2025-08-03T23:57:17.620544Z","last_seen":"2026-01-14T20:49:29.673525Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1751,"timings":{"blocked":709,"dns":48,"connect":329,"send":0,"wait":329,"receive":0,"ssl":334},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/img/icon_bell.e5af381c.e5af381c.svg","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/img/icon_bell.e5af381c.e5af381c.svg HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 530\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\netag: \"65f717e8-212\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5af381c5c5b321ac66cd803130710fa","sha1":"1c1d5888c38a0edf5e1ef8b541125f3434ee5cbc","sha256":"5a465696dcb341003de0a7b98580f42ef062743fbf576a9e686232577f6570a9","sha512":"1945f56467204a1a92390b315bfb31a3faf26aa4375eb70466d9f3c3af53940d76931d266c2bfd77ce32a1dd49f699ac4bf423ca157cc72411377172a8e92295","ssdeep":"","tlshash":"60f0c09db66083d0980fb77dd83955a8719924f28f45e6cf82806a93f4d68d92498c2c","first_seen":"2025-07-12T08:20:30.03445Z","last_seen":"2026-08-10T18:21:08.376648Z","times_seen":25,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":331,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/img/title.d39bf9c1.d39bf9c1.png","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/img/title.d39bf9c1.d39bf9c1.png HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 10 Oct 2024 07:26:03 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6707818b-23d84\"\r\nexpires: Fri, 13 Feb 2026 20:48:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 770 x 406, 8-bit/color RGBA, non-interlaced","md5":"ca88c1df216266e67e185063cf4d9cbc","sha1":"246e6d9db5af3b154f6844e9995cd9777b8c7692","sha256":"83349d2875c8ae125eb0233362c10f4c360a786acf6e403df702b0221b8ba44e","sha512":"d27e8a90e1f296b02694a423f81219b382b9a1e5a0cac4035b1aa094be03f592a0fd5148fff74404733d63b8e49118fb780e572bf16185fc91a3fe80e33b09c0","ssdeep":"3072:xMy/t/4xfQgAv91dTdGT/7iK36mJlEomtyUAGUQuZywJdTfM:+yWrAvTdcyC0omtyUAPrZywM","tlshash":"86e31280e2c71291f37afef810bf21841e61c7f6e789a26a50e2f76229560e50d5e735","first_seen":"2025-07-12T08:20:30.012422Z","last_seen":"2026-01-14T20:49:29.676651Z","times_seen":10,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/index.5c657796.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/index.5c657796.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 27 Oct 2025 02:49:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fedda2-9db99\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":646041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19629)","md5":"5daf9d62def11d0a4d4f76a91ca1f759","sha1":"c386e1437f241346ae65df0c70f82ee5023618a8","sha256":"7ba892b2055bbd8ba7fa13e4293c0a5cbea212ad89638e70763e9367a6223ec7","sha512":"797e8d75a4e5da194536ef4b4c33fe1f75139b1658df42e755f3249165234426c410d2835c88974970d2fecbf8c66a10b7e64abd224bb90b5c35943a5402e14e","ssdeep":"12288:oUqc3A9nh6NyEgff02K44uOZaW4lPi5W42Z7cyEEpXDDdIAaaHdRr:oLcDIkqT","tlshash":"b9f4080ae3d34f9b569790a0684976c05830d5938e9c7dab732c82ac4fbf55f027b68d","first_seen":"2026-01-14T20:49:29.67892Z","last_seen":"2026-01-14T20:49:29.67892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-coin-detail9~uni_modules-components-home_chart-coin_chart.2068a219.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/pages-index-index1~pages-qbapp-coin-detail9~uni_modules-components-home_chart-coin_chart.2068a219.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 12 Jul 2025 08:58:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687223ae-5c7fe\"\r\nexpires: Thu, 15 Jan 2026 08:48:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":378878,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65104), with no line terminators","md5":"e9e623fe5dc4a974453acedce7710f11","sha1":"e2873fcc791106c8c6f22c63beac3b931d928bd7","sha256":"73b3f12675e07dbbb6468e7ef7f175d7ef02e345e2c7e3913c160f9a8fab1751","sha512":"96ffc7ad3a24849bd69ea1c1bb71710e4f4f623896fc554ad764de6f8197bb47e91a388048c5c7bd33525a826013b11ecf18b1dfda30b9cca0edf811809ce3e0","ssdeep":"6144:QHBP3BRk6Tw0WLjwOGoOtNiJ6cNDt+Tak7B/:Qp3Bm6TWAOGpPiJRNDt+Tak7B/","tlshash":"0b84094eb3c53a2ac64bf1206c5ecc09a2396a1d53856c5e771cd5e4982482ca77effc","first_seen":"2025-07-13T10:39:08.766917Z","last_seen":"2026-01-14T20:49:29.681333Z","times_seen":8,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"106.54.228.253","port":443,"asn":45090,"as":"Shenzhen Tencent Computer Systems Company Limited","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Thu, 15 Jan 2026 15:48:58 GMT\r\ncache-control: max-age=68400\r\nset-cookie: __uni__uid=rBEQg2loATqORawKA1efAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-10T18:54:13.738025Z","times_seen":20195,"resource_available":false,"data":null}},"time_used":1399,"timings":{"blocked":579,"dns":42,"connect":240,"send":0,"wait":240,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/index/walletconfig","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:59.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"GET /api/index/walletconfig HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: client_lang=en-us; path=/\nlang=en; path=/\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-request-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d585d96b1267a41b1684af6cb50601ca","sha1":"6e52072d51f6ac90d1417e75ffc774b793c6fb41","sha256":"8bee0281934666fe03868475c3708d7788358f6db1a885844f759b75dc334d03","sha512":"be35fcb27a0be1cc698b8c375894dcca3d191822c65e15ed95090750a84f4c9afe880cc9313ccf915fc1c1ea4c7664ec32e4faef6d2cea1e77872b09e8a9de27","ssdeep":"96:epVBuMNd6IBuw7bIBuw7SIBuw7mIBuwDIthIBuw7cwBR78wBRgeBRhwBRAwBRbwv:YzbX6iXbiXSiXmiPGhiXcKN8Ke87KiK6","tlshash":"5aa1d199602efd51c4820e1d6b7b9d33a5cad4f300ef89814344cfabc59a838c9e975e","first_seen":"2026-01-14T20:49:29.682658Z","last_seen":"2026-01-14T20:49:29.682658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/index.2da1efab.css","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:01.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/index.2da1efab.css HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a389d-178f9\"\r\nexpires: Thu, 15 Jan 2026 08:49:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96505,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73ae6c583d02d78f81e3f18860a2899a","sha1":"07df9233fc11dddc34fbf519b891d40b2ac29c0f","sha256":"e97de9a247807f12d74101e9f736250b2410be4e1ed3d17ed875e4b08cf66c83","sha512":"da54ba9dbe06d8d763f3cfd64cf5babb54e761e3208c7a2f23e845290c48db8c115bb86c24262cd6c9a96ff2e51674c6d86439e1814baf2de7980f5c06349921","ssdeep":"1536:OlIApuK7hmVmb2RS1Wu3xdynGJ7eh/nKhlvbc:VApuK7hmVrS1Wu3iG41nKPI","tlshash":"1893f73719012e39e52bcd26b6c1ab5a1e61c033e15307adfba47628cbcf9c9167b345","first_seen":"2024-01-02T00:07:11Z","last_seen":"2026-08-10T18:21:08.401289Z","times_seen":6424,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/chunk-vendors.6132d5df.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/chunk-vendors.6132d5df.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 05 Oct 2024 16:41:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67016c4b-6690e4\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6721764,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1295)","md5":"82ef5aa1f3b0486252d9e1bc49ee65d4","sha1":"f1e6ed95a30b131a471627395640036d18c92471","sha256":"179035c6e53b96d3562ba20fea3b18243c780d3a5aa338e1adb9f749a407e7e8","sha512":"64bda483f763434067cbc4f0d054fe2395167ea2207f62cbd5f8fc42d084f9efe6474856e9aab445bf7ec7cf44c28ca6e1feb87123753e16ee240e75de8ae30e","ssdeep":"24576:MXVxXpMAyuPCpvZlmoE7q61eht17s35AiGYr9tPEg4Jg1lCJ:MXVxXpMAyuPCpvZlmoE7q61et7s35Ai+","tlshash":"f0250e4aaaf620649217f0b84e2f99067234541b0d49fd183e4c92e99f1d83d5bf9fec","first_seen":"2025-08-03T23:57:17.608404Z","last_seen":"2026-01-14T20:49:29.684521Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/layer/3.5.1/layer.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /layer/3.5.1/layer.min.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 27 Jul 2025 14:53:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68863d7b-56f0\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22256,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22256), with no line terminators","md5":"5d39fc6c1db94e8d211313805a70c24b","sha1":"021fdc67c0acd11655fa605cb26ffd1b19ab243a","sha256":"be5b759996d0b5b388dc5922f99d18d5f3feb0ffb3b1a9d5b73b8c0a427ab8d4","sha512":"d221bfc9a753cff96d629f1f6f3cd9789aa9eee6f46b43bca3704550a942a9483b1bbd8e48cd8048b89a85e45f7a4e4f968eaf2785afece0636273db3aec0ed7","ssdeep":"384:sseNGhG5ql45QlESAJDVwJZY+WxeJwCj+jC6Tb2u:slkmqlHlESAJDVwJZYJxau","tlshash":"1aa2a56a215035a72223c199e14fbe0b31b21d25d7074128f16af4bd4ebcda9a277f4f","first_seen":"2023-03-07T12:58:08Z","last_seen":"2026-08-10T03:14:39.191087Z","times_seen":7287,"resource_available":true,"data":null}},"time_used":687,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/web3.min.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jul 2024 09:54:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a0cf5a-14c758\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1361752,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38996), with CRLF line terminators","md5":"1d11eb80a94c6abe0ca46d87d08b5b89","sha1":"48718e4a58425fbe2b4b660091962c6707fc2d00","sha256":"5987f73a7eebffde1082c27c07748facaf6d2271e216c735a5eb32f1a87bce2d","sha512":"635e89b430c22f22683b2065e61f18d2995948558daa8694ca58915f629de3a57bf213640f3fd622be027eaa9eb259f463bd30106a3fc677d544046019ab49ad","ssdeep":"24576:BOL4Nx5YLN/4mxVV+qkVVjhZjRoVCUxhRHfM2x5EfJtp9TzhOhR:BOL4Nx5YLN/4mxVV+qkVVjhZjRoVCaHz","tlshash":"3d25a4542bde3526c24af0a14cdfde49e6bcec6c068d414d661cf6e5983c5288b3bcad","first_seen":"2025-11-15T17:57:49.889455Z","last_seen":"2026-01-14T20:49:29.686806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1011,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/user/userinfo","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"OPTIONS /api/user/userinfo HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://gptai-fx.com/\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:59 GMT\r\nallow: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-request-headers: *\r\nset-cookie: client_lang=en-us; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":2082,"timings":{"blocked":464,"dns":364,"connect":330,"send":0,"wait":334,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/index/walletconfig","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:59.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"GET /api/index/walletconfig HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: client_lang=en-us; path=/\nlang=en; path=/\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-request-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4869,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f61fb41e78963e5cd4c8c7c232da2f82","sha1":"d95f496772d825ff5ab546cdca3b33c8536daabb","sha256":"8e3231306af4c2890c9b158eeb5e88f74a1808cb29e19570669ba2ab35162ef9","sha512":"22db1d6b725b0cb05db8b3131c077ef6968f4d7038fcc233c81dad6837345255bb7ecf243dd87687138b6ef6326410ad41f49f41c1aeb8edc24a835bf5b102ea","ssdeep":"96:epVBuMNd6IBuw7bIBuw7SIBuw7mIBuwDIthIBuw7cwBR78wBRgeBRhwBRAwBRbws:YzbX6iXbiXSiXmiPGhiXcKN8Ke87KiKl","tlshash":"15a1d299602efd51c4820e1d6b7a9d33a5cad4f300ef89814344cfabc59a838c9e875e","first_seen":"2026-01-14T20:49:29.688392Z","last_seen":"2026-01-14T20:49:29.688392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/#/pages/userPages/wallet","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-14T20:49:01.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/ HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 789\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\netag: \"680a389d-315\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":789,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (509)","md5":"796d038704b603d4dfe4c201dd5f5e27","sha1":"5f0aaa93686a558e3b6b8a4532c8136803124d48","sha256":"e5131314bdbeed02aa906236818c7e751dc065d1f0bf1b2d10895ccc44ca2b4a","sha512":"3bf35a3d372878f3c6020ffa9e1550b851639ad0f744ce3bb6e110035fa8cf1fd038ab6baef0c024bcd54a51620cced1a02e38ce1d72e6defabd57b212e9c903","ssdeep":"","tlshash":"8a01b1d22c60e54d0710865174b6e61e8d664ab8ad51dd607cdc2afc8bd4b8ace2f814","first_seen":"2025-07-13T10:39:08.719208Z","last_seen":"2026-01-14T20:49:29.689459Z","times_seen":9,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/pages-tabbarPages-coinDetail-index~pages-tabbarPages-home-index~pages-userPages-wallet.2784da84.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:03.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/js/pages-tabbarPages-coinDetail-index~pages-tabbarPages-home-index~pages-userPages-wallet.2784da84.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a389d-5b6b\"\r\nexpires: Thu, 15 Jan 2026 08:49:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20665)","md5":"85a877d7f5b3b10532b4ed7af75bde33","sha1":"5686de921e2f2a7f176b82f175b24ecaa68b9426","sha256":"a915f1493e7f0ca7244eafefcbafa2d31e36ad83ad54170d332742ade5d3ecd2","sha512":"930ed10b36bf9fc0a7eaff2e7228ecdf03caef45bde0f7409a4ec107ad5d27e37669e967dc0d55d99396a7fef7308cf0d513d1b2a0862c87d9f4141fc6639de7","ssdeep":"384:KrvgAcNp28jsmr5aUrCEYI5RU7dkbpr045dQrg0G3v9Az904iNKvzXUnuVeQPnTf:+vgAcNprXr5aUrCEYrRkNrTdQrgt3v9s","tlshash":"c8b29384b6d6b01907a26585045b540ff279ee68b84c18a4f715e4e278f8dcec8bff78","first_seen":"2025-07-13T10:39:08.752819Z","last_seen":"2026-01-14T20:49:29.690577Z","times_seen":9,"resource_available":true,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/main.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 0\r\nlast-modified: Mon, 30 Sep 2024 17:08:48 GMT\r\netag: \"66fadb20-0\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1037,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/img/chat.76e16474.76e16474.png","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/img/chat.76e16474.76e16474.png HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-4020\"\r\nexpires: Fri, 13 Feb 2026 20:48:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 174, 8-bit/color RGBA, non-interlaced","md5":"76e16474c5f2439b3f54328de7f23dd9","sha1":"4b27f1a6fe0a28069d4ffa9f116d4d5013c1a51d","sha256":"4f24d044422e51b75d7483b01b88833417527330795467a3910e16ead71d952b","sha512":"0618e46431a2e55e523e2a6d4c7c76f1fd01a72370a25d3fb3c7976f109f9d746fff54d1f4080714e99b55ddecf2673f5aa519cf6305da02a22d3003abc651e0","ssdeep":"384:B1Ug5kZ1mqkREmuz7iGXfRa0aZEID07j8Opz/8bMWGvKc/zMKbU:B1UyWkFGXfKEm0P8m/8bLGvKN","tlshash":"b772c02ecb6b5a450379a9b96e1f1fc009e3d668c4430b5b45eb44cf2416f88467ed74","first_seen":"2023-05-25T15:51:41Z","last_seen":"2026-06-05T13:12:44.538021Z","times_seen":22,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/chunk-vendors.2bb2291f.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:01.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/js/chunk-vendors.2bb2291f.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a389d-f3e6a\"\r\nexpires: Thu, 15 Jan 2026 08:49:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":999018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64462), with no line terminators","md5":"f4afedceadd25be1c6d5a39c4f3c8c5f","sha1":"fc957d0432d4d7d68d410f23bf5a9e807bc0dd17","sha256":"9881f6156b3946dd8e1374b344119b6ba3b084eb2468b913272a7c79371767e1","sha512":"5be73ff99ae75be3a9d1120b3c44ffe3aef86f0b82e9ac0cbf10dadb159d7f8503ea7723c742d45a63b3e573d8c5b36db99721f0d014fec2999319cf47a665ba","ssdeep":"6144:8rr7fnFKfCHzbVZA+mI2IBT12B8GvvtwTfFvLb/fflvYNT8/Y3vm79ta/hm39v4J:8r3n/Z1h8v1wTdXfdYt1wtnv4zqdFzU","tlshash":"b025088cf286b0b61be760b5403f220bb2376969b40ac4d5f675e4d4ad7894e1227f3d","first_seen":"2025-07-13T10:39:08.765042Z","last_seen":"2026-01-14T20:49:29.692781Z","times_seen":9,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/js/pages-userPages-wallet.090e72d5.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:03.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/js/pages-userPages-wallet.090e72d5.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a389d-188d2a\"\r\nexpires: Thu, 15 Jan 2026 08:49:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1609002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"533f4d62fc9485d6ba4acea9dfdd296a","sha1":"2ca1af1d454075844e47b3e2b8f30b6782a4e06e","sha256":"cdfc6900821842042bf72060972a955a674a5e72636f04c0ffe68a33db6ea12b","sha512":"d66066d96834cfd4efe5c39d36dd10fff565a3634e63efeb7846bd339c40c6e0cfcf0250099227501ce5982d02d49d39a6738d3551dd3b8bb16e65a9fffdef81","ssdeep":"6144:kKP8+5kq9SqCpw+wL7313U4btJoAm8aNbbcyj3LQUTNXV2vCRsyzNSsgKM5rwV06:tP8akJbFCN2bbciTGvG0iKIug","tlshash":"3a25088876d6f166439220e0153f640fb23eab5cc45c9295f368d4e27df89da872bb34","first_seen":"2025-08-03T23:57:17.572376Z","last_seen":"2026-01-14T20:49:29.694045Z","times_seen":6,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/ok/static/img/wallet.133aeaee.svg","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/ok/#/pages/userPages/wallet","date":"2026-01-14T20:49:05.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /ok/static/img/wallet.133aeaee.svg HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/ok/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:49:05 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 24 Apr 2025 13:11:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"680a389d-17b9\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6073,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133aeaeec9927fd4c79b761c9a9ece45","sha1":"eddfe13974ecef507ff537917590fbb917d5a93c","sha256":"4c2c33554135a0cc3350aad487e20edc0f559e25ceb5ac10695f263de88c7218","sha512":"06f89e23016ac8812ff6343c0a7b1de3907b0e0d5ddc723d9b9230590367c609ff4be7721449c30a9781eb2530adf67574f81543ec9551ed246f809d9f604168","ssdeep":"48:5+HfkXG39xLYiUSXGMkhtb6W/wzkoQLpH5NnNF/Rkz6rw476dEXAoCnR6pE5iYev:GW5NwILxzgo+5icK9z","tlshash":"3fc15b8e67880ebcbb728a7ce3093375502a45d76a497254cd33213a115a35dbe7fec8","first_seen":"2025-07-13T10:39:08.750413Z","last_seen":"2026-08-09T04:41:08.14775Z","times_seen":82,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3model.min.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/web3model.min.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jul 2024 09:54:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a0cf58-73420\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":472096,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47459), with CRLF line terminators","md5":"b0d8d0cbb879d72194540ffbe67c0eae","sha1":"5a8caee12923f199e56dcdccdf3beb75dc0d1df4","sha256":"9da6c11b7e00aeb518ec71457f12ba7bca8e17f0722608b346f729ae7483883e","sha512":"b69c0813f95c1feee7eaed0a638c2fac8c9c116a80200e8a758ab0dd28de7dc87477147be13b74081b8dcd483de160c8a85a99678f4027132bfc1c835255d05f","ssdeep":"6144:5k8vb8tmGZq2PcCX5f01A2jz0Fm1HmeBbehEZDtZ+bmQ88Mz3FNo8vqqjepa/:68vbP+507ziXeYhElD+iQ8zz1N8qje4","tlshash":"a7a45bb573c67a358656f1729c8f9c88ba3c6909039c8096a70cc8b5a478578c77fdec","first_seen":"2025-07-12T08:20:30.010611Z","last_seen":"2026-01-14T20:49:29.696152Z","times_seen":10,"resource_available":true,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/web3/web3provider.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/web3/web3provider.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jul 2024 09:54:33 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a0cf59-113749\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1128265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39402), with CRLF line terminators","md5":"80849cce1fb0e24583e0ac27c630e3a8","sha1":"173434cf3fa5989b924bda7efbe5f8b640b25bc7","sha256":"7d1dc966641aef28897c4fde8fda5a140429e17044efc4092d5f21b667c3adcc","sha512":"8636aa2979fbc5725632990a9380e57e624a181ed71e0a574976d022224a4c5c4c7fed1c8175e05b77b01ece3a2531943656a95744673a16d3b9efca9eca1d5f","ssdeep":"24576:7KKwTksCLyD97Fwlae+u3iKcjYjzU66cOv3w1NMarTboZ5PxfbF1oIPX0aNagQRI:7KKwTksCLyD97Fwlae+u3iKcjYjzU669","tlshash":"6725724473e57239c34bf0a19c8fdc4aa778f9ac1b8a404d6a0cd4f4a869468877ddbd","first_seen":"2025-08-03T23:57:17.569121Z","last_seen":"2026-01-14T20:49:29.697284Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/layer/3.5.1/theme/default/layer.css?v=3.5.1","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:51.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /layer/3.5.1/theme/default/layer.css?v=3.5.1 HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 May 2021 16:11:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"60a7db9d-37bf\"\r\nexpires: Thu, 15 Jan 2026 08:48:51 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14271), with no line terminators","md5":"c234eb06d5f32055092294e78957f17d","sha1":"f15ee0bcb9694f32f5e1d524f2653aa0dd043402","sha256":"5cdf3edb27b0c9f8e48918c486e9ae65a9e5beab806b64c4a7bc5bac53c0f540","sha512":"3f06b51116d7f8026d81c7eb6a3c4d871462d09fe0a5b8cc8b7feaf20cbc88b0b6a545f0ec7cbc17566a9ff609405f58fad6eddfb3a8b3f6d530ede8fa3fad5c","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXi0nMLPD2OtLzAyPHL/LztJDzyv2OQ7KGx1j9d2/nWUU:1ELr2Otzrzzt42OQ7KGx1j8WUq4S3cU","tlshash":"f75242e144911299b0278721d6dc7eba32f88d43e5630caef2573c1f874c6dba2b6647","first_seen":"2023-03-10T11:40:20Z","last_seen":"2026-08-10T22:16:56.279096Z","times_seen":57320,"resource_available":false,"data":null}},"time_used":951,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":951,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/favicon.ico","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:56.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:56 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nlast-modified: Sun, 17 Mar 2024 08:39:50 GMT\r\netag: \"65f6ac56-25be\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"5eb8fe81bfd9e5a6088e45f9dbf8b80d","sha1":"a03a70078033bf1e2910495e4fc66b03a4338945","sha256":"ec4defa90aa12347abdd4a67b47203ff28d43feb61128f9f55e72ea8a65733b5","sha512":"496469402955d9a396a94f289931e571a46c7fe85d00dc1cad2b39fc451e175d0843115691dd75673196d59d75bbf39afde90169fdbfe2c7e8241cf103667b2c","ssdeep":"24:91e/KjHDgjLZ6lx1xR8QLLqqgQPHWst9eD4qUX50YPtaaTaT+lQapF8:9kCg56r36ykQ+sfeMqEG+o8aTYn","tlshash":"151238f3aa5559a4de05477c677bed2e167faf71fa71e1689001b0710f731e15004a13","first_seen":"2025-07-13T10:39:08.730993Z","last_seen":"2026-01-14T20:49:29.670305Z","times_seen":9,"resource_available":false,"data":null}},"time_used":641,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":638,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/kline/getxiaoshu","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"GET /api/kline/getxiaoshu HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gptai-fx.com/\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nset-cookie: client_lang=en-us; path=/\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-request-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f5e8d27e79b917e90b78946d4f1e61e","sha1":"c877bcb365330cbdd80b2c01a4214259b606078a","sha256":"11510b5d8405782d5ff8429fb564cf72e96f954a315566bbaf0f72b6249e6297","sha512":"e9f8a87bfc1d38199d61c961dce1421ac5530eb9192033d963301f1aec1dbe721f2a717a1e79ab70b7a71a6e47a2b2e6110462cef123215a30587f4f4d558eca","ssdeep":"","tlshash":"b7d05e684f6f4ca8a405110084e43af4c73d238eede2e9435dd18a35e16345ae939d14","first_seen":"2025-07-13T10:39:08.732507Z","last_seen":"2026-01-14T20:49:29.699541Z","times_seen":8,"resource_available":false,"data":null}},"time_used":2397,"timings":{"blocked":1027,"dns":364,"connect":330,"send":0,"wait":341,"receive":0,"ssl":331},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-coin-detail9~pages-qbapp-walletDetail.3baf85c8.js","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:57.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/js/pages-index-index1~pages-qbapp-account~pages-qbapp-coin-detail9~pages-qbapp-walletDetail.3baf85c8.js HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-4284\"\r\nexpires: Thu, 15 Jan 2026 08:48:57 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17028,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15992), with no line terminators","md5":"39e4fb2f77a8301614ba71d640e72dd6","sha1":"9dc7cdbf1752e3d344d838ae466256dfec71fe49","sha256":"fdffc5e84b86f4dc965d54c2b697c8b65eca4f7689c78de169c2c0c18ec0bb88","sha512":"635de825f44249f50f7c606b4ad6d90116f8d17ef08e4207ef3eaa21110524c532ddecf0c1b40e311059c2594a09f9bf95f87494a79194e3d24c7e6192a3f4b7","ssdeep":"384:DXkigdCLxDCx/R/2mRBwRYYxU1ABGbscGTU:DXkdcDCxJ2mHwRLxU1ABGbKo","tlshash":"e372f988f0c2f855069361b2813f8709513bad9d7117669cb7b9eaf64e68a4c2353f3c","first_seen":"2025-07-12T08:20:30.020574Z","last_seen":"2026-01-14T20:49:29.700182Z","times_seen":10,"resource_available":true,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gptai-fx.com/static/headerBg.d1cc19b7.png","fqdn":"gptai-fx.com","domain":"gptai-fx.com","tld":"com"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 17:50:41 GMT","end":"Thu, 02 Apr 2026 17:50:40 GMT"},"fingerprint":{"sha1":"4F:79:5B:C2:F2:FD:30:E5:EA:01:37:E7:59:9D:99:65:40:B5:FA:70","sha256":"1B:F5:48:07:AE:AF:8F:1A:08:AE:2C:BF:80:49:75:B5:44:5C:6A:E5:81:83:C2:27:C6:EF:90:47:B5:B2:61:C1"}}},"request":{"raw":"GET /static/headerBg.d1cc19b7.png HTTP/1.1\r\nHost: gptai-fx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gptai-fx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 17 Mar 2024 16:18:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65f717e8-1fc6c\"\r\nexpires: Fri, 13 Feb 2026 20:48:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 470, 8-bit/color RGBA, non-interlaced","md5":"d1cc19b7fb4ac6a45adda976532eab18","sha1":"da4191b308258c1b315f45bcbc1fabd95a11836c","sha256":"af1606dfc684db741f7c9d2f6583f0702370324803665664b8ef77a08ca0eba7","sha512":"830622a98d85c7b1eb5e201854ae50099728c8dd99a738c5796d0f5ca077cb5312ac0e94ccc9436999371bd5cb9e83ce89d86dcc94bdc5201bddbfc05e71bc2b","ssdeep":"3072:WyG/nbTKKk1euY3LcMUNFTaqduxtYXkYEoC1iHTOq+zPxRsP5:TG/ber47wT/duxE1EoC1zqgjsR","tlshash":"2ad312454409b9afff8ace3f245f904229ba3970af5f5f80668175440097aa4b236b7f","first_seen":"2024-08-19T21:32:31.24227Z","last_seen":"2026-06-05T13:12:44.565888Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1005,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"gptai-fx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.daumzt.top/api/index/walletconfig","fqdn":"api.daumzt.top","domain":"daumzt.top","tld":"top"},"ip":{"addr":"14.128.51.181","port":443,"asn":152194,"as":"CTG Server Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gptai-fx.com/","date":"2026-01-14T20:48:58.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.daumzt.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 29 Dec 2025 04:00:32 GMT","end":"Sun, 29 Mar 2026 04:00:31 GMT"},"fingerprint":{"sha1":"9C:B3:E1:4D:31:D0:A7:67:7B:86:45:BA:43:66:D2:A6:C1:EF:89:02","sha256":"9D:36:1D:62:E3:DC:68:66:EF:44:FA:96:6F:00:18:55:E2:D6:2D:3E:68:94:69:9A:6F:04:F5:E7:70:7E:63:56"}}},"request":{"raw":"OPTIONS /api/index/walletconfig HTTP/1.1\r\nHost: api.daumzt.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://gptai-fx.com/\r\nOrigin: https://gptai-fx.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Wed, 14 Jan 2026 20:48:58 GMT\r\nallow: *\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-origin: *\r\naccess-control-request-headers: *\r\nset-cookie: client_lang=en-us; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T04:57:21.506886Z","times_seen":17830408,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-14","alert":"Sinkholed","trigger":"api.daumzt.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
