{"report_id":"5275c6c0-134f-492a-a142-65d6256d7fa7","version":0,"status":"done","tags":[],"date":"2026-09-09T18:51:52Z","url":{"schema":"http","addr":"gnlgroup.net/","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":0,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"gnlgroup.net/","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"title":"Global Navigation Line || We Deliver on Time, Every Time","dom":{"size":64561,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5978)","md5":"0cd3b7c2bd995cd2a4738c3fcfaaa97b","sha1":"eb4b4bb720e29cd45f18d0a4f195ba52367f97fe","sha256":"1847f4469a0d42b2fd9ad29040de621b3db740bbe4c76f5dc2bd6df010d8b2df","sha512":"f29c5631c21160fb89ad7d04f3da423886f5f19e8258fbff61b352b5111998fd76edfa97e4e882b97901054678ca3f97b2a6c220d8bebaa9cc0723da25005cf1","ssdeep":"1536:tr6JuA4lr+HduRVsiL1aHnauleWQQjM6FEYJHwwGeoNos9RHIdzensPQyWVnI2eP:tr6JJuRGK/is9RHIdzensPQyWVnI2e9F","tlshash":"f253012098f19037029391e656796b2b6fd2d74bd90b5a1432fd0fe82fc7e85ce07269","dom_hash":"domhashe8e2feba5182ccf0d3aba5820178abbb","first_seen":"2026-09-09T18:52:01.878695Z","last_seen":"2026-09-09T18:52:01.878695Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gnlgroup.net/","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":0,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T18:51:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"gnlgroup.net","ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"domain_registered":"2017-12-09","domain_rank":0,"first_seen":"2026-06-04T16:52:05.652463Z","last_seen":"2026-08-15T23:48:57.548572Z","alert_count":357,"request_count":119,"received_data":6917974,"sent_data":57734,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"spin.js","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"jQuery:1.3.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":18219,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":255645,"sent_data":2770,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/bootstrap-select.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"be1c76aa7d12f6e14a88f393ae1ef4b2","sha1":"91cc4c7ced3071c21dee144b33e2037f72705002","sha256":"c3db02cb30ca400f272a2b71e4e53dbfb883a624d23afc740998d080457ebf90","sha512":"0c6435362f742b51e4638e7209b736a65bf518006ae588640286cd7d959d101c576d37549031e3055c374b13e91273af0dd5940e30b08d4139e3f1a85578ebd6","ssdeep":"768:tl69HYU9f4ab3Y6t2E5CBiWiQrFxTlMcjIzi8BJvMu+YotPxf1gYFAU0klGWH3U3:ts94Up4abI6t2E0rFxTlMcMVjlotpfel","tlshash":"ea23c64e72122a3652ff10965c2f959a7133a77cec03c05874fd8aee666cd44a0f7a36","size":47706,"data":"","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T16:10:17.624598Z","times_seen":440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.paroller.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"01785ef621a5fe452c87448fb659c3d1","sha1":"47a4567cfffe9a282317b4b109994ce4263a7a71","sha256":"dce18e13367b749ca9dd1e552ad631b88ee2ba1ba5aeab8d9d7582e36e019e51","sha512":"e4d5febdc4d214a719b7d635904621e0a72d33d64173fe3fd8a18ca7c85f37ffd32156d69471876bd8b832d958b37e9c55ba306abb1931b87d57eb91460b5b55","ssdeep":"","tlshash":"9d51025938a0b064f3539a9a82dfc911f03dd5a1290d0999e25edced2dda8cd82f3b07","size":2796,"data":"","first_seen":"2023-03-12T06:08:05Z","last_seen":"2026-10-11T16:10:17.724764Z","times_seen":526,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/owl.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","size":89992,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-11T18:00:20.158155Z","times_seen":13989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/slick.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"656b552160c2f9b03ef0b483b26fd8ff","sha1":"60c8fc0721b201a2376b3105f48dd38e4780805b","sha256":"556a5e2ef0fa7f3cf1080bef772f2d6fe55fcd4fcfe2d92cd8079598e246b0e1","sha512":"84daa2cb1053154e4e558ced192b12e2c9719059113692cf36792f3f65d506ff7f2ddd0f3683adf23dfdd9fe4aac4f038a35bfac3ceff298cdbd1025c5260f45","ssdeep":"1536:nOBYMpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6i7:nOBYMpbDRTtwn7158/HVqg8dxMuY+7","tlshash":"eb83028f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","size":86934,"data":"","first_seen":"2026-06-05T06:51:04.960749Z","last_seen":"2026-09-09T18:52:02.036919Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/scrollbar.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","size":40547,"data":"","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-10-11T19:10:37.80385Z","times_seen":4482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.fancybox.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","size":154104,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:51:34.177011Z","times_seen":3907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.mixitup.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"0850ae304b0eb839c556c01fba3b3982","sha1":"2666b6f895685e3c7b3f97e56e3f995b84243f36","sha256":"a7b4cb3db2cf3d417e8e69528fde70b5ed09686cbf54cb06e5dd993dfa452670","sha512":"b283d1fe308ffe8084c6069abac2d8a55bff6b39f19fc62c9e9ec7b87df1986f7f8ad85402c1ef9e27839810a78fbab0ca273c56f790700ec0c97f4bc3b4c25d","ssdeep":"768:PbVEg7ZYHQY4KeCWTNkx/vzGUv8U4n4w/s4:z6N4K7WTNK/vzGQ8U4n4t4","tlshash":"62d2f781335834b1160313f36eff5a0ab43bb1a5a505c864f935c4ea1aab945b273b3b","size":28935,"data":"","first_seen":"2023-03-07T12:11:44Z","last_seen":"2026-10-11T07:02:12.494009Z","times_seen":1281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/appear.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","size":4379,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:10:37.686808Z","times_seen":4480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/nouislider.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0964221867ece5328baf1985f9f1a43","sha1":"3092a4ac5064b35b5865db3cc5962e256178db7f","sha256":"16129cf19ca1cabbc5a4d454651bbb475d55923f7026f4890afb9aa9cb5ee5d2","sha512":"35fdc1d61f1629151d15a542f63fb4b832f8956e033e1d6926805132e674c6ddde495c88eeb13f08560c36a67d5aa0756a94fc34104afa237a40b1fade800efa","ssdeep":"192:b0d4YXuU0v8kt95Z+yTZcuyVw7jYX290xnDdaspJ+2CR8i223xk+JShg/kn9ZsFL:Yd4YeH8kj5L/V7jYGOxnBacivCrtA","tlshash":"3452d5d835a2b136432324b2a0af850bf1769d90b50c196095a4d2d17e78ffca7bbf5c","size":13675,"data":"","first_seen":"2023-03-07T01:38:14Z","last_seen":"2026-10-11T07:02:12.432877Z","times_seen":382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.tinyscrollbar.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b76e99ab5c6b8c74ee53c4e5bb51b51","sha1":"d072bb29292dd5a532594781d9ac9c0104921579","sha256":"39b0bd03285290da64e5d8f6275444307e7c4179eeb8833a8914cdcd96aedd94","sha512":"76ec7b608f3ad71f9d19c7e72ec0dd941b6f95d4b6fb6ec93a78049c46280e88ee1a7363aaa9b694ce1acbb89dd433baa9d2a1bb4c2aff11f19f4bd179d46fce","ssdeep":"192:z9YjhYofCCIqi4w2+mUH2lmZtIbmSnO/DxNSVNlNH4majdijT3Zw7NWK6agc5rC0:xCAS0ZxNS7lR6G09kW3iRdtUj","tlshash":"db42425826e912914167f23c87db3281a035d60f561d6d9c39ac9bf84fc7f3053e2ea8","size":12500,"data":"","first_seen":"2023-03-11T13:45:51Z","last_seen":"2026-09-09T18:52:01.969693Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/isotope.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","size":37779,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T16:10:17.631488Z","times_seen":3489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.magnific-popup.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T20:36:10.025868Z","times_seen":77948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.bxslider.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"697d69a48e5356f7106e38c09f7f19e0","sha1":"b57160771fa597a5b56c5b12756c693e4829be07","sha256":"bb9e7dc822c6b7b95a6329932885c72ff2caf74b243fc1c40aca0e858123b83e","sha512":"898b8be9b092ac7dcd1efe0381db28fb8ed0555419cdaf40bf739edfb7945f8e301a95e6392677b2564b1f5838a560e6f309394cc46b1bd7b570b6f9312b90e1","ssdeep":"192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9392541b713436fe46b632b5b299cf487276908ac537f8f861b5d85819e8cc4301badb","size":19359,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-10-11T17:27:21.197199Z","times_seen":7618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery-ui.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ec0db1cb8ed2395c5df4e11be0d86e9","sha1":"d91e3c65e262d7e0021a926d228b9f6ad9aef4a9","sha256":"97bca2a8204372f21c29bc2d6ceeb192eab0719f1d154e1073f04acd8d2f0064","sha512":"0bbe5fd8a7991d8f0bb43a0dff3bc1130f5e2514524fcca9dc4662815155644d44a550ba2ffd92e86177c024d28319dc28a39d007c01bfde6bdbfe3d429c8f71","ssdeep":"12288:BEebHeg/md/AHhsncaL8ata+3XIdCgTf9kDUUB:EoHhsncaL8ata+3XIBf9kDUUB","tlshash":"66b4c7d5334f226f86ea3359983a9289e63dc075d202807d789d58dd25a8c2843b7ffd","size":539425,"data":"","first_seen":"2023-03-07T12:02:47Z","last_seen":"2026-10-11T19:10:37.72327Z","times_seen":1359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/parallax.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dbee040c8d4fb731bd44936b2efc99a","sha1":"0a7ac970f67b7fa08738a5be55233e9e741ad267","sha256":"bf4d20b28de8c7f77428b24325ec3afb39b6f7e277f6b61666f3a0a17cc3b42b","sha512":"ffa4d93831a360beccf2a6fb3fa49f94907f9d3184efd79dd517c993775f9bf21be89c024f8fad39faebb1e1078719088701bc8c297e8a8e9e6a258b4bf517d7","ssdeep":"192:d0KW9KgqL4+UaWCjVYTY2tPtt5uM+FjgpfMiXuwv8S/X8/VUVTJTsjNn1SF:mKVWCynJduMpfMAuwESP8/m3Ton1SF","tlshash":"0e7296d97322b421657b622721afc70e713175261980809cf538c8db6eb9d4a736ffb8","size":17314,"data":"","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-10-11T16:20:13.296424Z","times_seen":2306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/aos.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-10-11T17:15:33.734764Z","times_seen":12621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.bootstrap-touchspin.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7db50d8aa22669b78518dd81a4c031d","sha1":"6dc6fa7afbdc414f66bec16571a8f03ee949b48d","sha256":"2a2ce11b132ac26b3525e6dc64aad585ad802929feaf1c049122aa06c6b0aa95","sha512":"3d0008dd6feecd3781de499dd41fce486ffe7ed41c220a035ce3356ba2ce8e3c8f97958dd7936ef31940628cf220ba64c2a454ed74c21c634074fcb0e6c07f4d","ssdeep":"384:1otTxb2qwGuGsQfUsnWgOy4jD/eanMO0QAsbpdLzoc4Qo6anoeWy:1STkqOGsQfUXnyqD/eanMO0QAsbpdLzO","tlshash":"f392e95936e720b51067b2bd97df4701326788075469eea07dbd06c02fd1dbca3b2aac","size":19540,"data":"","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-10-11T16:10:17.763621Z","times_seen":849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.countdown.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5687ff37986e9a4fc169c299087eb2bc","sha1":"e6a1be605a384a94fbdba0484a0c721f07b22e63","sha256":"3f25abc862001a9c86a15f2703935b1d1ce661a7eb2d1ff1b49ddaca6ca19b10","sha512":"c70d676afd257790b9c09c9a7a9c8950b6e508d850f61efb15d8f73676c78e1d5d1417cbd6685a1806f5015dc1f36f21899ebc01d72d0667171473050302e8ac","ssdeep":"96:MbG5QHArNxeRFMWiM3ySohdy0v/2bBqz2e/xMxHxqxAxKx3xDx17qD2Ycw9NYy:3QHAMpqh2Bqzt/xMxHxqxAxKx3xDx1Wb","tlshash":"cca1c4ce73b2239908a552b101ae1546617bf25af4d6002cb4fceac87a76c6d607fd78","size":5057,"data":"","first_seen":"2023-03-07T12:41:42Z","last_seen":"2026-10-11T20:43:02.050777Z","times_seen":2554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.easing.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eac3c72434a0945b92dd4a01f7b6b4e","sha1":"7767b356530e39cd76ec259320b0b2774b4097a8","sha256":"ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b","sha512":"6a199264a0294c335dde056ea8be534373014e3f2d2f9a76b58574e57c7371fbbafde72fb750348fab5fb9d486055bad792a1344ca8c9636df754d20d9e0cd50","ssdeep":"96:uBm7aaOr8uroJzDV6u3R3zd4j6zp4tSZCHjuwE9nCDTVpWR:p+aOr8ur83V33R3hq6+uwLvy","tlshash":"f1b1108a71f17719539133f011ba205b729dace5260e5804e8b9a9897c7b27c87bbc6c","size":5555,"data":"","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-10-11T21:03:22.530457Z","times_seen":6700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.enllax.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d872916f5a2372af67add38abc5b90","sha1":"fb2227e3ee74249dd164909cb407cc6942c1a337","sha256":"49130cc0b2b7d1ee5e3a13eb8f378e223e578dedecdad0ee1a6857dca03f58fb","sha512":"601029ab6e2667d53a6c576415b608edd851f56edbe616ad9dd024e0c04f903d26efe741593dd3ffca6c8592f86c3b13d85d5f12864d05a8ecdc91306138e519","ssdeep":"","tlshash":"b131b15d14b090d8bb27473b82d76f98412ec07b10148ceef68d5dfe2aee85811eea17","size":1564,"data":"","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T16:10:17.879842Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/wow.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","size":6300,"data":"","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:10:37.718214Z","times_seen":5897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/validation.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","size":36153,"data":"","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-10-11T15:32:48.097366Z","times_seen":1262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/lazyload.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf8ac4ac2ca82499efb266472e0ad291","sha1":"ff689e70ff65eb5a20aa4abd7a87c9ef1f92a72d","sha256":"8ab6a22e0e8694d7181b5e67ad23c92c73873b97c7e6abd9bdb8762e64beb2bd","sha512":"e9551fb41940197f18b5e44053b1a6494e542005069562dd6621aac1cff1adb2178787141c3bd1d7b8031e53e782a8d1c0ee7be9ef84513667b350b209fdbbe3","ssdeep":"384:n6LtCrpOaCs45VIar3eKE1Y+GiVhewdSDT+qVWV86lHM+r7+l1br+lJ8pirLq+25:gtCrfkjeKE1YziVhJk/+qVWV8+H+zbrL","tlshash":"b062ed0e3bb6216d586fb03b57afa20e36298447441cca50bc7cc7985f71ca936e5acd","size":15295,"data":"","first_seen":"2023-03-07T01:33:06Z","last_seen":"2026-10-11T07:02:12.451579Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jQuery.style.switcher.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa65fb15d3b19f50d706d5419f1d1e22","sha1":"98ad9345b42c6938f8eb9aa84678541e324472a1","sha256":"2d75935b4147dff5207a04e938b974b49219bc4d80d3e5ce5dee417537afcc8e","sha512":"898da905e592b4bdb5e8435f86c799180442f60e921336bdcfa0c39914dc6f105eeeb8c13366fc31cf0bb6dc4fd89c0d336750557083d833d8ed7cd945ae1fbb","ssdeep":"","tlshash":"5a51860b70c0f46e03963368121f207a756abf69a455d93cf829f4e1ab7454a0a73fb9","size":2765,"data":"","first_seen":"2023-03-07T12:57:51Z","last_seen":"2026-10-11T20:58:28.493007Z","times_seen":543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/custom.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b05ce3a1837d76d9996ec9fd705b08f","sha1":"7a240f52f079e952a509cc3301143727310e5659","sha256":"7f7a0136a3681db1c7d01c2b778976c7aa7ae88277886166922a3c2db4b827e2","sha512":"8bcf87b813cd08f53f1dda03bb6c5e2f7eb8bbda6ba934217b38b1d129ef25e837a35fc529e083b42e9d1526c07e3007360e4be29c442c307bc27c67c88710f0","ssdeep":"384:LzC+gCNK6qGCivuD4Eoj4wXFZXeosliU1WNBUsz9j:/Cgq34pXUWzJ","tlshash":"d2d22f4d71230c7606bb336587ba8bc8ebaa011bc0008652bdfd37941f7d59975aaf9c","size":30089,"data":"","first_seen":"2026-06-05T06:51:05.053528Z","last_seen":"2026-09-09T18:52:01.902202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb2d334dabf4902825df4fe6c2298b4b","sha1":"433836da7e015f2eb3fc386817de88b78248f6ef","sha256":"430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575","sha512":"8cac69ec91c437aa5e126ce683a6bb5c904e44d4c1d084c3d8f8bee85524735e8f09a340257d9a859d5e8e7d69d6e637ecfc728ab9ffd0e30d65b2136c48378f","ssdeep":"6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC","tlshash":"e754a4d8f78d112e4232316aad2f52cdbb7cd1b1561054aebd8d497c24a083d42faf7a","size":293430,"data":"","first_seen":"2023-03-07T01:16:13Z","last_seen":"2026-10-11T17:27:33.373605Z","times_seen":4555,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/bootstrap.bundle.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c723f3a80b935e5e37ec46940bad17f","sha1":"2fddaeb8c5996f0bf7eee5c1b8ba30882f056609","sha256":"3126158d682bafa50bffd7907d0bcecadebf82cc5be9da70235cea3390db2c2b","sha512":"ba8d010cae55f7bda38e3a3c674be884e6ba58e4c83da4463c8fcf83718bcc4adc7ce2bc6e46696376877c6d56c12dae67a709e8672b4623b89910898c658e85","ssdeep":"768:tTYD4yp1HVeg3ZehUp0N4LnUXI5bkqTGAdQ+fZMQndVwkqUNF6JUhz+lcy+f9uBT:tTdimqTvZPzf4Fi7L8JPMU","tlshash":"3073c549b240b8b2069fa066807f460fb33b68daa50b815cb55dd8dd2d7cd89316bf7c","size":76308,"data":"","first_seen":"2023-03-07T12:03:55Z","last_seen":"2026-10-11T16:10:17.878214Z","times_seen":1230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/tilt.jquery.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bb2cb86f33d82a9778dbc59d3783577","sha1":"b26d3761ee9e4b9b24088f8fef1d6638d0f93fc9","sha256":"5416ba46bb8efd4527ceada4cb0dc677c5ab9e750688b2d43a86d4ffb6299216","sha512":"12934cad09d2e061d3d4333a8041b3c1575b841e9cffb51caa22e3fc3b1c6759463493940d38ab91988b0a4b253b1a7dc222a1a855e252c59f0a4bc79d37defb","ssdeep":"192:DqDxmNgkCJrncEHng+TaXESuoz3S4zhfNJUN2RyYtbiOXQKFmDLV///EWL67:2DwK3ZHgo2zlfDUN2RyAbnKL0","tlshash":"66322e4939fa211a44eb736adbcf1144627ad00b1902e57c3d5c47e88fd669842b2ffd","size":11789,"data":"","first_seen":"2023-03-11T13:45:51Z","last_seen":"2026-10-11T16:10:17.823035Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.countTo.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac11c01ea3885061ce1d564f6a4f7ad","sha1":"7c84e8385d0a002034af9700cd382e8f0f4a2e7b","sha256":"65800a729f583f1366785a9890e856396f4563f7b1b2d3b8ea4e275950a65d5e","sha512":"2fe757a0ade65de9718fd5470db991683e3e80ece2d5970c85442eff8e4ac1b3d9aa900709d54847726a2b1c77eea498ce8a6c760570842bd1df908cf2d96b43","ssdeep":"","tlshash":"43615e09bbab2211955b20dd5f5f114c3274932b184b8548799d93c08fa6c39e69bfbc","size":3466,"data":"","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-10-11T16:10:17.641125Z","times_seen":2121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/map-script.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"26b98f8d8e285619068cd0c042c47876","sha1":"6c78eb73c234c101ebc842e15d9c98973f151bf7","sha256":"844f0ba1bb02baec601536b3ae5e941dac5b4dc0db0bcfcd96fd04271de58c3b","sha512":"1c53e24dcc4be9e4a7338b946a7d3f211f157674b79046f1a844b92f531517285a4ad42c04d076e3bb90ca2edfcbb552bedd14d68e0c85b82bf1e42504b03f75","ssdeep":"48:yZ9qbl9UcBjmau3ka3Rs2l56jOwXq2+JEnrWdYFu4h:y6p9ULau0aDl7BoFuE","tlshash":"8fc1fd6afc24556741bbf3b69aaa8240f4b0e23f424041177a3c56dc5fb0a74b19dfac","size":5655,"data":"","first_seen":"2023-03-08T02:32:05Z","last_seen":"2026-10-11T15:32:47.952813Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/timePicker.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e91877ef599f935cda6bdb97aa30a851","sha1":"89f4c7a0945b9e30528923bf2295dede7814c6bd","sha256":"c0b1950c24f059ab7fe9c2f6321dcf8b8148b01156e09f8424982c4bcf5a1d21","sha512":"f4367b2bc6cda33433221e6f0ddb58a7b78c985190d5e2ded1a22295bff8cada1808ef8592fc5ecf60099ac68f5e540a5cb4a978e03267e067639b4a286e3f8d","ssdeep":"384:hV80uAFfxUS9CBClqKYVuZXFuSpMUcD9nvvneJ:hBuAhxUdBClJmuZEYfUnvmJ","tlshash":"43b2533e28c25276d237a37bd2bea2bcf6e1621f52022d4c749d057d1ff0b914216ab5","size":24909,"data":"","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T20:58:28.578033Z","times_seen":829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/blog-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.302Z","timestamp":1788979877302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/blog-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1032\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5831,"size_decoded":1352,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"94b1f0ab576462b61039c569efbb2a27","sha1":"3368a1327945881a5039d5b80e4b6f15edc4a099","sha256":"84ab02907d00ecb50afa1ee85eaf99224b27e3046324166b1fdcc1eef33547c9","sha512":"64c4848d444512cc78c9bc8ec73906dcd833414226e8622320d27ffcad58dce24eb2b964e4f51520337bd2a4e90b3c8a167f9dcd4297e59f5c0ec7970a8446ff","ssdeep":"96:3sPdDbxlBtRzx+bwAVSY6DktwSBdKmwHZLPwHb68M6M/Tr0kCWip3g6gpwAVpQ4X:3sPdDbxlBTz0tVSY6enBdKmQZLPMb68Y","tlshash":"69c18e58ea0b1240d537d6a89fd51b89da3c1043ee0300e8fbe262365f767bc41d6e9e","first_seen":"2026-06-05T06:51:05.060641Z","last_seen":"2026-09-09T18:52:01.881741Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/brand/1.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.967Z","timestamp":1788979876967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/brand/1.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11081\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11081,"size_decoded":11366,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 142x75, components 3","md5":"4358961339cb4e5833b9ae3899aa042e","sha1":"ce2fbc19ac9e56b95a1237dc623b447fc02b367f","sha256":"989bf8c4af37b92f4355b1a346e4d1a00cebd5d58c593271f359904e300d1de1","sha512":"b8fd3e4e0f3dc1e686cd9a035a62168f991effe8cbcf40ef2b4f2064a8257a00152587c0a40c7399b0e0d1af191a231930edb78f0e9c8c21fe38143d53db832b","ssdeep":"192:bohMIetmLhUKVewYpDodjyo0dhvNJYAAtViPxtw2SIn79QjL48:bo/hCDoduomtNJHAtqMI+w8","tlshash":"3832ae1ff05790c2c44881310aa25dd6182d8b6c7fa3b189b85ae749f2b02a716f52fe","first_seen":"2026-06-05T06:51:04.959111Z","last_seen":"2026-09-09T18:52:01.883619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1972,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1952,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/bootstrap-select.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.920Z","timestamp":1788979876920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/bootstrap-select.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13287\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47706,"size_decoded":13622,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (47413), with CRLF line terminators","md5":"be1c76aa7d12f6e14a88f393ae1ef4b2","sha1":"91cc4c7ced3071c21dee144b33e2037f72705002","sha256":"c3db02cb30ca400f272a2b71e4e53dbfb883a624d23afc740998d080457ebf90","sha512":"0c6435362f742b51e4638e7209b736a65bf518006ae588640286cd7d959d101c576d37549031e3055c374b13e91273af0dd5940e30b08d4139e3f1a85578ebd6","ssdeep":"768:tl69HYU9f4ab3Y6t2E5CBiWiQrFxTlMcjIzi8BJvMu+YotPxf1gYFAU0klGWH3U3:ts94Up4abI6t2E0rFxTlMcMVjlotpfel","tlshash":"ea23c64e72122a3652ff10965c2f959a7133a77cec03c05874fd8aee666cd44a0f7a36","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T16:10:17.624598Z","times_seen":440,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.enllax.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.927Z","timestamp":1788979876927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.enllax.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 491\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1564,"size_decoded":824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1432)","md5":"69d872916f5a2372af67add38abc5b90","sha1":"fb2227e3ee74249dd164909cb407cc6942c1a337","sha256":"49130cc0b2b7d1ee5e3a13eb8f378e223e578dedecdad0ee1a6857dca03f58fb","sha512":"601029ab6e2667d53a6c576415b608edd851f56edbe616ad9dd024e0c04f903d26efe741593dd3ffca6c8592f86c3b13d85d5f12864d05a8ecdc91306138e519","ssdeep":"","tlshash":"b131b15d14b090d8bb27473b82d76f98412ec07b10148ceef68d5dfe2aee85811eea17","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T16:10:17.879842Z","times_seen":225,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/icon/air.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.980Z","timestamp":1788979876980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/icon/air.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:21:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4746\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4746,"size_decoded":5029,"mime_type":"image/png","magic":"PNG image data, 104 x 116, 8-bit/color RGBA, non-interlaced","md5":"c2f8764c41c21fa0a273f2a52edd8a52","sha1":"7a049b9b56f1358b263c968e20ff378d7083de3a","sha256":"0854fd8a4f3bd93c4f2b84c378d5a84f18fa4a40bf2bed627cf2c2220fdb569b","sha512":"8bd1c0819d3d104f98075086808b432a555cd90a3fd571fb388cc3841dead908ce7168272cc8df6d57162c432d2f9fa6715761d807b88fbc0ab2fe7c33ed6ec6","ssdeep":"96:0Y2fy41hjFCO6vuEgrSBtda9zLk1XmsPwJ56ST00FElQovxv/M5/:0S41hZv0vWT5hI0urxXi","tlshash":"62a18ef79611b84be2a8e9d0e0f891269519c052ddc2b75bbcc9881136b96e2c41c5f7","first_seen":"2026-06-05T06:51:05.04017Z","last_seen":"2026-09-09T18:52:01.887867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/discover-1.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.992Z","timestamp":1788979876992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/discover-1.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 97810\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97810,"size_decoded":98095,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3","md5":"30c946b5823884982a9ba1fb662d543d","sha1":"82cb1835fe4bb12882adbbd6a17e4d09e8435b06","sha256":"40dd02972dc2b35d98aab4566a94fedcec62d75f04a55d0004e891dec4c6ca28","sha512":"d4d7573ad28c1d358d571224386b2a38469de5cb6b1313c82cf984ca11e9f6a482b6b5be34976ccf3a674c644f068cca17f38b9b51fd3fcdbb78cfd7a791a8f1","ssdeep":"1536:JOXwdNDLo5VmX2dJOf4DwEhPj9TTSkcWK5W9W9PkxlNW/f8yxHRKNJiWWjqmzojf:wXwXLozJOf471j9TTZPKNkPLy3zjq5BX","tlshash":"49a302c1c3eff24af2744d1b113fd8464fbc864d6d9ec15962ac0a23deb917212625d9","first_seen":"2026-06-05T06:51:04.990509Z","last_seen":"2026-09-09T18:52:01.889535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-6.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.987Z","timestamp":1788979876987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-6.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 107893\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":107893,"size_decoded":108179,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"e4a5ce7d17262195dcd714690908626d","sha1":"41896e7a3437badd3099e5ff88852724c583882f","sha256":"5833ae73f8b9c0c8c54258a1ce3f1141a40155c59a3a17ef4a363061ec7fefd7","sha512":"26476762e7fa17016fed070115d2047b2ea885b5f380317b85e2108bca9aaa03ee2f92b4fc72ca4343c2efed0d15ea956956d5029e1fdbc1f3e170c5c243f5ff","ssdeep":"3072:WB2i28RBvp8gfsynbPTre2RW0wycviDJ3zPkQnu:WvNp8gfsebPTre27wy4sc0u","tlshash":"fab31203a223ebf7d3454e434e4d935dee250f5afbb48196888fee2a74b6f65504b002","first_seen":"2026-06-05T06:51:05.079409Z","last_seen":"2026-09-09T18:52:01.891284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1952,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/team-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.310Z","timestamp":1788979877310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/team-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 888\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5225,"size_decoded":1207,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a5a75d5a2f2a27c47dc038fee96ed61f","sha1":"fb6a2aa5c63acde9b89eb5329a97bc1281e68f46","sha256":"382810b102dbc4a473e035d8b529d16ebb4ca647558737dfb524757a3cd73af8","sha512":"a8fcdd1398811505df4c6f32dabb0b337a6f227e5ec5168c6d07d7c4084fbef10447cce5135dc5c4f76053da4d19746b741ae730fb022a5ebda2d3cd79e517b3","ssdeep":"96:bWm+07XVjbgETt1MpCytlKsfBEZEwuTLZu9TsOsrws92Q9Olqst8wEZLxwsrlqX/:bWm+07XVjbgETt1MpdtlKwBdfTLZu4pO","tlshash":"30b18e18aa11160099335768a7f24b4efa3c4183bd5304adf395210b9fb6b7c5367e7b","first_seen":"2025-04-12T15:14:13.070319Z","last_seen":"2026-09-09T18:52:01.892443Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/pattern/fact-counter-area-bg.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.408Z","timestamp":1788979877408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/pattern/fact-counter-area-bg.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150081\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150081,"size_decoded":150366,"mime_type":"image/png","magic":"PNG image data, 1170 x 286, 8-bit/color RGBA, non-interlaced","md5":"df7a4d414dd9b1a7c06dc2c01cac7da6","sha1":"9d4543ebf0e6fcebf0341899c1c11acc7dbe6eb6","sha256":"94315476c75f7c8f838358d212b5e0e278e13c95a1bec3542a2c8e18af034dd8","sha512":"c443dca8749938669c9442c2c4308854ed9d10a5d2bd8cb322a8e53a74c677f96f457b4ff1144c475ae9b67ca1f745c6a4f323fe5d60eb6db6b7eaed847c92b2","ssdeep":"3072:Vun1FBUaUOFzeNI/rCEYeQIOPH2PzHb0YYp36AOdrN/:gH1xMI/9/kqHWpqXdJ","tlshash":"73e312417c612ae1f60cd9665fd33cd3769a40d8ef6484e07376e287012abe5482bbde","first_seen":"2026-06-05T06:51:04.973422Z","last_seen":"2026-09-09T18:52:01.893808Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/fonts/fontawesome-webfont.woff2?v=4.5.0","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.462Z","timestamp":1788979877462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 03 Aug 2026 09:21:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66624\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66624,"size_decoded":66909,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-10-11T20:54:34.018713Z","times_seen":35603,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/hiddenbar.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.904Z","timestamp":1788979876904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/hiddenbar.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 828\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3968,"size_decoded":1147,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1658021a48ede0c742d369403a1b86ef","sha1":"d32b2580367815c6d153159e517bb3f3c3fe170e","sha256":"c4fc6bc0bb4f1b3962f313a221384df18791d84ebe49da2e867e0c1f40ff2dd2","sha512":"24b7679459b43c0e4463c50412583e43ac6e942163528aab915674be83cb46e0b8c3ea35d19fb414f6ba98cd976d5ba96f6c1599012cccf5e6b858054a8a794b","ssdeep":"","tlshash":"e8819b4fc7103d4da13b6b886be2524cde1d1183aa03415cf796a2548f7a35c8f22eed","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-09-09T18:52:01.898555Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/scrollbar.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.943Z","timestamp":1788979876943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/scrollbar.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11725\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40547,"size_decoded":12060,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32009)","md5":"71951b246c4726520dce912a5ac7f03c","sha1":"56906b9b9f41df67063091b7a66c8584d87d748f","sha256":"dd3bda90c210c66fd618bb0c35f4b21f871ce1dae7396053cb4b3a90b3ec51b0","sha512":"ff0b38e4e02096dedcc6fb1a0899a7f8924a89e9b25bb8d712f5ffb01414641b009da55c45241ddea6440eecb7ebff11ea93318aea46ff3ff71a2e22670cb48d","ssdeep":"768:nAGHgQl8dA0unnTUOxZ5ynGi65vqjSDHR17JayK:nAGHUSnTUOxZqxjv","tlshash":"7a03f9e9370534fb12db6f5e441b010963365956a70b8870387d8cb82fb1ea622b7b6d","first_seen":"2023-03-07T12:05:43Z","last_seen":"2026-10-11T19:10:37.80385Z","times_seen":4482,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/custom.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.950Z","timestamp":1788979876950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5904\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30089,"size_decoded":6238,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (548), with CRLF line terminators","md5":"7b05ce3a1837d76d9996ec9fd705b08f","sha1":"7a240f52f079e952a509cc3301143727310e5659","sha256":"7f7a0136a3681db1c7d01c2b778976c7aa7ae88277886166922a3c2db4b827e2","sha512":"8bcf87b813cd08f53f1dda03bb6c5e2f7eb8bbda6ba934217b38b1d129ef25e837a35fc529e083b42e9d1526c07e3007360e4be29c442c307bc27c67c88710f0","ssdeep":"384:LzC+gCNK6qGCivuD4Eoj4wXFZXeosliU1WNBUsz9j:/Cgq34pXUWzJ","tlshash":"d2d22f4d71230c7606bb336587ba8bc8ebaa011bc0008652bdfd37941f7d59975aaf9c","first_seen":"2026-06-05T06:51:05.053528Z","last_seen":"2026-09-09T18:52:01.902202Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1967,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/featured-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.296Z","timestamp":1788979877296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/featured-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 966\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4958,"size_decoded":1285,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"63611a98a2dd69d1e3ced61f28ca906a","sha1":"369847fb5f0af4e4dd86535559fba2bb70288699","sha256":"1e4cd996f9337758e39f66dd8e8ed700f29d31140ce3cabef4db88ff452f5a19","sha512":"95b03f2fd8aa797d0a9615eb3295e3b38cafb88fa0cbb448ddb415a4a11e4a52d83a54dcb5cc449c0fcd61d418daaa3680abeca5487fb88123ef2c1191755c5c","ssdeep":"96:fd/opBvDIamkiE0jci9cknCKeS+jnUlQ3gje+Y9ynYY4Hjs:fd/opBvDIamkiE0jci9cknCKn+jnUl20","tlshash":"98a1005ce6026540b6339af86bd11744ce6c40c3eb1704a8bb94e6349ff67bc81b6e9d","first_seen":"2026-06-05T06:51:05.013619Z","last_seen":"2026-09-09T18:52:01.903899Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/color.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.905Z","timestamp":1788979876905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/color.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.countTo.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.925Z","timestamp":1788979876925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.countTo.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 925\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3466,"size_decoded":1258,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5ac11c01ea3885061ce1d564f6a4f7ad","sha1":"7c84e8385d0a002034af9700cd382e8f0f4a2e7b","sha256":"65800a729f583f1366785a9890e856396f4563f7b1b2d3b8ea4e275950a65d5e","sha512":"2fe757a0ade65de9718fd5470db991683e3e80ece2d5970c85442eff8e4ac1b3d9aa900709d54847726a2b1c77eea498ce8a6c760570842bd1df908cf2d96b43","ssdeep":"","tlshash":"43615e09bbab2211955b20dd5f5f114c3274932b184b8548799d93c08fa6c39e69bfbc","first_seen":"2023-03-07T01:10:19Z","last_seen":"2026-10-11T16:10:17.641125Z","times_seen":2121,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/jquery.bootstrap-touchspin.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.279Z","timestamp":1788979877279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/jquery.bootstrap-touchspin.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 258\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":772,"size_decoded":577,"mime_type":"text/css","magic":"ASCII text","md5":"c82a1dde47ad0956ce4a8a71761cc87e","sha1":"2b59a1bc66421246f642c1b866a4fea07210075b","sha256":"ea40d450aba1b968363c725912b035222155046a64acc60f14829a3e53e2006c","sha512":"f86dd414f7e06eb2961a1eb7d2759e38a807d9ff81ec1f2abd3e3c6dae0edf37340ed0eed499e305b9b0b5aeec959af389ded5739a0dc6c56eea896410d88567","ssdeep":"","tlshash":"8301499b3b93a960ec4ae174255443c7796a1292beb7c10403ea31246f899ff0b33a05","first_seen":"2023-04-05T08:09:08Z","last_seen":"2026-10-11T20:34:55.936913Z","times_seen":2074,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/twentytwenty.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.291Z","timestamp":1788979877291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/twentytwenty.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 981\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6720,"size_decoded":1300,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b23631092b0da97d726bfd4aabe6cce0","sha1":"fc4c98febeb93e28d95af085ca90bc850dc37508","sha256":"1c80e442eb6cf6cbb211d40edb948e24c4cefd1d885f3591c3231202a59d135f","sha512":"5644ec068e4051ffe43b2d5ae78798fafca0ddeddbe4c063095db176b775fdb9d0531504b0c79ad686d4fdb18451b64c6963f3a7c05ea0f1b36d3e9bdf7cc4ef","ssdeep":"192:UI5yKCIvybY80iT0EeXPKe5gOd1VdA+XCsAi4gblQL/Adzx:UI5yKCIvyCiT079FCsAGQL/Adzx","tlshash":"c8d14bb747060121e7769228d733ea32eb62017efd82157db7e6d80583d2d64c0c2b9b","first_seen":"2023-04-13T12:45:17Z","last_seen":"2026-09-20T14:50:25.12508Z","times_seen":360,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/date-picker.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.293Z","timestamp":1788979877293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/date-picker.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 535\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2073,"size_decoded":854,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0ea46dd61b6e2ecfd3e558d4dae0777a","sha1":"fec44e54582d72962e42f991eb9558fcedc1834b","sha256":"d7966f9b7388b0d0aafc9f5fd07dfb7a8e686eb6fc1933e32d79c5b576ed1f69","sha512":"1766878490eec3ec5e28fba8d4a42c0ef9ebfc68e06706e252e23e0551dbed72841ade3edc0105f581fa8bf6e5120b1a48d05a85ed5d830a53c4522d938b4269","ssdeep":"","tlshash":"0b413631f506080b713386a037157afaeb1f168b9512c93f7ad062210fbd76a06a9985","first_seen":"2025-04-07T01:42:41.976213Z","last_seen":"2026-10-11T18:04:43.809991Z","times_seen":46,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/testimonial-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.303Z","timestamp":1788979877303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/testimonial-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 690\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3129,"size_decoded":1009,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"edc40d0f730fe2d5e2c045922a3b27be","sha1":"3719db9bef3e2ed37e134a55d0c835d3712c925a","sha256":"2d7848d6a2ee37da6ebf0b6113f919e49847edc87e8537bf5c64b30936ba056a","sha512":"ae0779cb407a27ee44786d3e5e15479bf7caee6dc4b4ae309db022e6ccf4c4f6d2c2ce12c8d5b846c78798c98effda9f3500c5901ec5bf02d6afa609f7771ae1","ssdeep":"","tlshash":"9451e18c93270102553bb6b8ebd16384cb3440476f020aa47b51a126efbdb7cd577eae","first_seen":"2026-06-05T06:51:05.051105Z","last_seen":"2026-09-09T18:52:01.910581Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T18:51:16.490Z","timestamp":1788979876490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 03 Aug 2026 09:21:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6049\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"parallax.js","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"spin.js","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]},{"name":"Mixitup","description":"A CSS3 and jQuery Filter \u0026 Sort Plugin.","website":"https://www.kunkalabs.com/mixitup/","common_platform_enumeration":"","icon":"kunkalabs.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"FancyBox","description":"FancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.","website":"https://fancyapps.com/fancybox","common_platform_enumeration":"","icon":"FancyBox.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]}],"data":{"size":47948,"size_decoded":6489,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (303)","md5":"dc09439425526047057a14162195684c","sha1":"6a27b70eef2e0eb29ee88013323841f35e8eda24","sha256":"cd8a9794103c550369ebae302d62961c15395e90b1ae55bf8281fc0e84c90c04","sha512":"a1fd508e0ce3770104a6da53e20da5657da857423469699ae5e9133b440d6f59760ae7e1c2b9ecb6915dd32d416cc8dcf0290d952203fda72ac4d88746324762","ssdeep":"768:V1GQZ9ZNr2/zZqJRVxtUX+24SskRHIdzensPQyWVnI2e9rF0kyxNP7qx:3rZNOzZuRVxtE+24SskRHIdzensPQyW6","tlshash":"c123cb21a8f1a027019394e52a756f2bafd2e707c91b5a5032bd4fe85fc3e86cd03659","first_seen":"2026-06-05T06:51:05.045281Z","last_seen":"2026-09-09T18:52:01.911734Z","times_seen":3,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":25,"connect":20,"send":0,"wait":23,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/font-awesome.min.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.899Z","timestamp":1788979876899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/font-awesome.min.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5878\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27466,"size_decoded":6198,"mime_type":"text/css","magic":"ASCII text, with very long lines (27303)","md5":"4fbd15cb6047af93373f4f895639c8bf","sha1":"12d6861075de8e293265ff6ff03b1f3adcb44c76","sha256":"ddd92f10ad162c7449eff0acaf40598c05b1111739587edb75e5326b6697c5d5","sha512":"f8be32cba15170319b5c9f663c6f0c4ffdd4083cf047d80f7b214d302b489eca25fbee66ddb9366d758a7598efc9b9a886b02c9f751ae71f207cb9db1356243a","ssdeep":"384:Qi5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/8c:Dlr+Klk3YlKfwYUf8l8yQ/T","tlshash":"3bc230f8e54c01d66731c48bff81b36862b6f73dd5814d99f01f690c29d22a522c5bba","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-10-11T20:03:44.142831Z","times_seen":43394,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/owl.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.935Z","timestamp":1788979876935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/owl.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 19365\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89992,"size_decoded":19700,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (360)","md5":"ccdf893e7d8b26933af0c336bcc3943e","sha1":"ac575ba3377f95ef22bad865ec35b0b3dcb0dfe0","sha256":"db9d6cf3c1c4b047c62f646e7d9991c06a212931c362bf53f9a2406b30f09466","sha512":"818db99c2eb775d1342dc2cf871509185c5ad86a08c80e452f29b8509a870c43078e9f11113e999ff487a35b25b6ddd6b95b6a7f2c4408fdfcfdd69473f59510","ssdeep":"1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv","tlshash":"bf9393c5f36c261b422631785eae23ce723d402ad911186f7ca8e9dc29d546c436eff9","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-10-11T18:00:20.158155Z","times_seen":13989,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/material-1.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.973Z","timestamp":1788979876973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/material-1.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54558\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54558,"size_decoded":54842,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit/color RGB, non-interlaced","md5":"0b9efed2065f537f01642238dd009ed0","sha1":"242b78f83a07f6b78fdaca9a1a6843bbe5367acb","sha256":"e25a0fb12cd4270cca3ba7e47ba8b79e5f067ffc46de7de8a38106540cb975d4","sha512":"497bae27beb5bbf461bbb93d0f2999fbef0dad29ee2762c650fbace096ea3f3b330f8ec6b8bc23fea63a70e8c04071763fce72d371d166967b9b7582200bf725","ssdeep":"1536:LIyyzIWL1hAjMCbeKUrcKVKBH6/yjEN6j+jw7e3Hjm:EykIWLUDbeKUrHEs8ENucK","tlshash":"d233f14b2545aa5306e9c4dcd4f425a3ca75fab43c87f14d992df78f68f00b1a4ba9c0","first_seen":"2026-06-05T06:51:05.055812Z","last_seen":"2026-09-09T18:52:01.916542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1949,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-7.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.988Z","timestamp":1788979876988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-7.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74080\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74080,"size_decoded":74365,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"ab602b47828c9f6bcbf51efc599b8b48","sha1":"0a7dac6b50a83143fcd87045cc532dad261a408d","sha256":"416fb55a998628a1655261327eb51fcbbce9337d666957722a3fd9e698d46ee0","sha512":"909ef90205a93fb05c696b0af8735e92b3d105d70ee71e4d819d2f3e802a58694f3cc714c9307433454a67b612d2984cb3af30cd107a68a2d3c5060a96d74174","ssdeep":"1536:DTrA9TpRbpunU6HtJVht1RKSIOk/o1T+a9PTxqquVOYIwmWG/wtm8vwO:v0TpGnU65t10SIOEo1ya9PTLMOYIiJ","tlshash":"e07302059a534f2c6868359dc85a782bdfd5076f4e9fa4ec07f39226ff0079544781a2","first_seen":"2026-06-05T06:51:05.049569Z","last_seen":"2026-09-09T18:52:01.919199Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1951,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/nouislider.pips.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.283Z","timestamp":1788979877283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/nouislider.pips.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 405\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1421,"size_decoded":724,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"11647a79997936a6c883dcd0691d7c2e","sha1":"79c5158c4d1d989d8c2a6ccc27cb47dbc2b8e9ef","sha256":"6eeae6b2e8b618cfd938ad2c054bd11e27c4d0914a99c606cb600ef4e6279cdc","sha512":"8ac28e8aa5943292c1cb3b4b77261f3ba67598f61509636a84f2304fba74169bc633e6ae164fba6d73156f794b3f9e614b041113bc7cdce7474d50b2144e705e","ssdeep":"","tlshash":"a7215e64a5b322186b41abbc57701fb7fd0c46bd5f0b389fb8a46551a983c0c18768d8","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-10-11T20:58:28.464319Z","times_seen":1371,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Work+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.271Z","timestamp":1788979877271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Work+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 18:51:17 GMT\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17535,"size_decoded":1404,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f3e3743b013e7899417f5a8d4703ec1c","sha1":"49fad712cb674ca6b6693d30bc00c2103e8b55bf","sha256":"4fc6a535275d2ed56b0a7c602486dc19e1af4cdd3b773959c7a0691b93d778d6","sha512":"37e241a17f4c82fc77178b7fdde59eaab5dcd9f993ab7e755d3b860b1d8c58af9ff17cbc8a98a01084f91f2c03f4ce44320cf2a2bb9d73f45d275ecfd760848d","ssdeep":"384:cm9EamwdHmf6AmSLFmRQumUZ7mD206tQ7uRv:t","tlshash":"ed72ce51047aa154da431dd673df3e36ae9ea1907044c578affe2888ecaec2a637570c","first_seen":"2025-10-01T06:03:53.61023Z","last_seen":"2026-10-04T02:41:21.570922Z","times_seen":75,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":38,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/jquery.fancybox.min.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.279Z","timestamp":1788979877279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/jquery.fancybox.min.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2933\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13744,"size_decoded":3253,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (13743), with no line terminators","md5":"2ddb7837c04fba75f3231324e65407b4","sha1":"deaf6f021fc1e315fdb016a6c1b4deecabf1e4bd","sha256":"7eb9743e8c6d15e01880aeefb3bcd934e45a7c504aefe6942a810e1e3718352e","sha512":"3ce5c464f5d5f99a0c400360d651ed61923a56b9de339a902e725876ae4cf4c47197d9859d7e99c874fdf7c8c7f6af14526d519e76ef081822f624df87f7fb3e","ssdeep":"96:VGA07/mPQRZa6f3sNGzssDH7jGSWWf8+WDJT53RjRuCicfMAJpEbyZh5fN2WdZ:VVQfXcVa7KWdMT539MCeAL55fJ","tlshash":"81524e63a140311c903bce21d7df8948e279d55266221affe68cf919cbc7be912d62c6","first_seen":"2023-05-15T08:02:37Z","last_seen":"2026-10-11T18:04:43.968956Z","times_seen":300,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/timePicker.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.286Z","timestamp":1788979877286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/timePicker.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-11T20:34:56.689609Z","times_seen":158824,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/fonts/icomoon.ttf?vdw2jk","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.465Z","timestamp":1788979877465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/fonts/icomoon.ttf?vdw2jk HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/icomoon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Mon, 03 Aug 2026 09:21:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20676\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34276,"size_decoded":20997,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"bafa547ca072b9a14e0a24dc7b62a394","sha1":"39c5bd6aaf42c5310560fe3186ae143d520769ca","sha256":"957150c8f30fc2d317b63484a3933a0055a551a84ad38ea5c7ace3cbc45296c1","sha512":"1b516a077eb3e7816482291bcf9479a2e9f06095ae5a2866edbac191fb0bca325ba390c707f65e1f7ac9c5e90d9d037d47e3668a1e416f682000d52e6ae3256e","ssdeep":"768:bKKc0oaBTyW0fIHqG9NjIIci4iJcz5npF:waBH0fMd9NcIciAtnp","tlshash":"90f2295ff79bef4ed81788ba0e5191220df5ea21923ff3fa69855c20d0098f4892465e","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-10-11T07:02:12.427309Z","times_seen":12,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/rtl.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.908Z","timestamp":1788979876908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/rtl.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2419\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15554,"size_decoded":2739,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"60b4419de14b9b1fe377b6f66339cc14","sha1":"59d7002e13339ef858e48545f8300111a9a0a688","sha256":"e39a5ae1d185d98c46713e42342d8572008b7fa65328b13929ca1d66dec307ab","sha512":"e690eaad9aa56bca795da7bc84d1da706ec2c3e29d1762e415b7ad85db0070584826a6a885f41751df084a7001ce6d8ff359ad5a8e95e0aa69bc0d7f68815bd2","ssdeep":"192:oMTDfoDg6mQvAIA7YtilUT9EPcEYWIC3dG4Xy1yKW1LcD:pPNF9Sd","tlshash":"c162598cc95b130c4335e6f7c75c29b1ea8505ab8fc75080f8a2112eaf7b7694951edd","first_seen":"2025-04-12T15:14:13.02147Z","last_seen":"2026-09-09T18:52:01.929575Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.easing.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.926Z","timestamp":1788979876926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.easing.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1786\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5555,"size_decoded":2120,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (3601)","md5":"3eac3c72434a0945b92dd4a01f7b6b4e","sha1":"7767b356530e39cd76ec259320b0b2774b4097a8","sha256":"ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b","sha512":"6a199264a0294c335dde056ea8be534373014e3f2d2f9a76b58574e57c7371fbbafde72fb750348fab5fb9d486055bad792a1344ca8c9636df754d20d9e0cd50","ssdeep":"96:uBm7aaOr8uroJzDV6u3R3zd4j6zp4tSZCHjuwE9nCDTVpWR:p+aOr8ur83V33R3hq6+uwLvy","tlshash":"f1b1108a71f17719539133f011ba205b729dace5260e5804e8b9a9897c7b27c87bbc6c","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-10-11T21:03:22.530457Z","times_seen":6700,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.paroller.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.930Z","timestamp":1788979876930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.paroller.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 839\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2796,"size_decoded":1172,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2796), with no line terminators","md5":"01785ef621a5fe452c87448fb659c3d1","sha1":"47a4567cfffe9a282317b4b109994ce4263a7a71","sha256":"dce18e13367b749ca9dd1e552ad631b88ee2ba1ba5aeab8d9d7582e36e019e51","sha512":"e4d5febdc4d214a719b7d635904621e0a72d33d64173fe3fd8a18ca7c85f37ffd32156d69471876bd8b832d958b37e9c55ba306abb1931b87d57eb91460b5b55","ssdeep":"","tlshash":"9d51025938a0b064f3539a9a82dfc911f03dd5a1290d0999e25edced2dda8cd82f3b07","first_seen":"2023-03-12T06:08:05Z","last_seen":"2026-10-11T16:10:17.724764Z","times_seen":526,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/welcome-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.307Z","timestamp":1788979877307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/welcome-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 629\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3062,"size_decoded":948,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bf3eeb5f000144aa8402e887a1cfccc6","sha1":"90ecaccab3f0bac88f2178cd58f738ed7b293f96","sha256":"741fb05630be33510c87b1d26e75618cb58cc0852c9b21ef63ae164c2c43204b","sha512":"26253b14e836a58d6da35dc78ce82e9cb5f47ce853324698e43b41bbd61e5d57d34a05dc19a153c8a5856fb2bb9d4da33f108b60ffbc772398be1b706b6562e5","ssdeep":"","tlshash":"de5157abd51505099377ea80ab5c3289dd2810d383423198ffd153388ffe76ca557eae","first_seen":"2025-04-12T15:14:13.036013Z","last_seen":"2026-09-09T18:52:01.933158Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/flaticon.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.898Z","timestamp":1788979876898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/flaticon.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 852\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4262,"size_decoded":1171,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"cc79520f580c2508435ea5d1b49bc4cb","sha1":"00ef9aaf16e63cacfb955fbb565662d75e457301","sha256":"3032fee7ca5140817fdfad29ac33086b59149ceadaf130a12e925ce37029eff7","sha512":"fced85ec73885f0bef49fefad3f1774fde9c4c270723b06d54554f53e9b38fc83471d220f5adccc6c8bf9ea32e4da062f5eea725d1a2bfe3bb86d50e9a965ab6","ssdeep":"48:NKrXNcPdApKDGZFaDw1CRoCxF0ClBU1mDTk6b8lG/9lD6cW5GH:6NVZkN30ClBU0Dg6b8U/RWe","tlshash":"a79127f6912f11c04713eb41e6abe6909f58b06cd9c09c59e0666e8df6f1e1a87823dc","first_seen":"2026-06-05T06:51:04.964948Z","last_seen":"2026-09-09T18:52:01.935764Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/magnific-popup.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.901Z","timestamp":1788979876901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/magnific-popup.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1721\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7178,"size_decoded":2041,"mime_type":"text/css","magic":"ASCII text","md5":"348bb93c99cd5fd6d5f6bd584fc0522b","sha1":"1cce6bf100b95c2c5a9fecdbe112354ca2c9adaa","sha256":"17f23119aa83750c490cf613bbc7bb6189cf5c707bcac925578830a160149897","sha512":"5719503da1f5d932396502ed6096dca66a0cf007a1a33c23d7453f27560df57119418ce23d1b5f91c545bf698f05deca7557d921b9fc2443e279491fe83a242a","ssdeep":"192:hRQ4fS5bzRyIk++mcS3n2s96/LEpeXHFykgxe:A3x3pSFh","tlshash":"4fe12cd39fb22301e425e9a8a657ab5963120013e70fcc6bbfd12448df8d6c942a2b85","first_seen":"2023-05-15T08:02:37Z","last_seen":"2026-10-11T18:04:43.534894Z","times_seen":212,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.916Z","timestamp":1788979876916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 84634\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":293430,"size_decoded":84969,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fb2d334dabf4902825df4fe6c2298b4b","sha1":"433836da7e015f2eb3fc386817de88b78248f6ef","sha256":"430f36f9b5f21aae8cc9dca6a81c4d3d84da5175eaedcf2fdc2c226302cb3575","sha512":"8cac69ec91c437aa5e126ce683a6bb5c904e44d4c1d084c3d8f8bee85524735e8f09a340257d9a859d5e8e7d69d6e637ecfc728ab9ffd0e30d65b2136c48378f","ssdeep":"6144:pCLfh6nicf8Z5wPTdpM4mDoz1EsnFyyyHh3zOxPnS8kVLkIVfzYAK6k1PC:pfw4mDiTFyA6TVfMAKNZC","tlshash":"e754a4d8f78d112e4232316aad2f52cdbb7cd1b1561054aebd8d497c24a083d42faf7a","first_seen":"2023-03-07T01:16:13Z","last_seen":"2026-10-11T17:27:33.373605Z","times_seen":4555,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.polyglot.language.switcher.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.932Z","timestamp":1788979876932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.polyglot.language.switcher.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-11T20:34:56.689609Z","times_seen":158824,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/wow.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.938Z","timestamp":1788979876938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/wow.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2037\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6300,"size_decoded":2371,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6269), with CRLF line terminators","md5":"11ac4d7173a68c50169addca2ef1b827","sha1":"621284d032a248c41753e995680fc30089bd374c","sha256":"dd90fdb6538987fe7975bd43803b1c7d8d62912a371c788caec32d016e09dca8","sha512":"658888b9d89577b55798fc56451f9458ba9b4885573a96480fd9bd480cb59854769964da9a5f54feba19ba66fa6df44c79203d35f1d6d9cafd84886c58e233a4","ssdeep":"96:3GqKWTAKHF/suCdaOVEE1FnePgJqg4SImYad6Q:y30suCYOVEE7ne4JqgpIwdh","tlshash":"bbd175c9b7467036d79ba1f6873f0145a23a19acb008047cb7e984e57d348699237f38","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:10:37.718214Z","times_seen":5897,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jQuery.style.switcher.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.950Z","timestamp":1788979876950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jQuery.style.switcher.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1054\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2765,"size_decoded":1388,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2765), with no line terminators","md5":"aa65fb15d3b19f50d706d5419f1d1e22","sha1":"98ad9345b42c6938f8eb9aa84678541e324472a1","sha256":"2d75935b4147dff5207a04e938b974b49219bc4d80d3e5ce5dee417537afcc8e","sha512":"898da905e592b4bdb5e8435f86c799180442f60e921336bdcfa0c39914dc6f105eeeb8c13366fc31cf0bb6dc4fd89c0d336750557083d833d8ed7cd945ae1fbb","ssdeep":"","tlshash":"5a51860b70c0f46e03963368121f207a756abf69a455d93cf829f4e1ab7454a0a73fb9","first_seen":"2023-03-07T12:57:51Z","last_seen":"2026-10-11T20:58:28.493007Z","times_seen":543,"resource_available":true,"data":null}},"time_used":1988,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1988,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/footer-shape-2.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.994Z","timestamp":1788979876994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/footer-shape-2.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6237\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6237,"size_decoded":6520,"mime_type":"image/png","magic":"PNG image data, 192 x 185, 8-bit/color RGBA, non-interlaced","md5":"fe527ae04f3e837eea66843a10ca3412","sha1":"cd609a37ea38bef9179e70c7c4c64fb05d553d46","sha256":"2d3e61b020f354fa32cf71fe4f1906b19dee24c06ec6a031058917b72e478149","sha512":"a7f94c724e9e2ef4f99347e6a0dcadbd4d52c44b16db0a55433c9408072170fa184238ffd4280233890873c10fe07bd4c3d59dc09e4659d65824e7f65b1ccaa0","ssdeep":"192:UD6PAy65ZVT9GzRLWe13OQnVXa1CkDjypKEDgT:UOYyw3JUdDVXazD2wpT","tlshash":"6ed18d84e228aa61f29c5592b1dea2038e562c98f7d0b6945cedf41bde750ab430dcf1","first_seen":"2025-04-12T15:14:13.015228Z","last_seen":"2026-09-09T18:52:01.941686Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/aos.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.889Z","timestamp":1788979876889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/aos.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1539\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":2037,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-10-11T20:43:58.826561Z","times_seen":47451,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery-ui.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.946Z","timestamp":1788979876946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery-ui.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 122544\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":539425,"size_decoded":122880,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1002), with CRLF line terminators","md5":"8ec0db1cb8ed2395c5df4e11be0d86e9","sha1":"d91e3c65e262d7e0021a926d228b9f6ad9aef4a9","sha256":"97bca2a8204372f21c29bc2d6ceeb192eab0719f1d154e1073f04acd8d2f0064","sha512":"0bbe5fd8a7991d8f0bb43a0dff3bc1130f5e2514524fcca9dc4662815155644d44a550ba2ffd92e86177c024d28319dc28a39d007c01bfde6bdbfe3d429c8f71","ssdeep":"12288:BEebHeg/md/AHhsncaL8ata+3XIdCgTf9kDUUB:EoHhsncaL8ata+3XIBf9kDUUB","tlshash":"66b4c7d5334f226f86ea3359983a9289e63dc075d202807d789d58dd25a8c2843b7ffd","first_seen":"2023-03-07T12:02:47Z","last_seen":"2026-10-11T19:10:37.72327Z","times_seen":1359,"resource_available":true,"data":null}},"time_used":1993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1967,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-8.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.989Z","timestamp":1788979876989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-8.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149130\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149130,"size_decoded":149416,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"0ae8e8b87fbaca1bbdb7669fb02ae7b2","sha1":"93c4faa819d31cbe1a7abef6b4ecdaf8aaed0822","sha256":"062e25d7ab38731f39bbca32f127c332e6b8af0bed08c5758af16e28d68ea5b6","sha512":"1ce354fdee2b153156eee99de04e8444b24cfe57cf1be39b704cfc9097bb680c3a403bba035b64efa6dbb0e067688cb6faa2c60d2a54ff4807b7d9ce1fb475cd","ssdeep":"3072:etEWR8bt/LFbfPI1mIi6fKUvI7WhxLt1HkyUYUTjAKVcpquIQGB:bW2hpXIMIi6fKUvfhtvEyUYUTMrpHO","tlshash":"50e3129021c66e19e650f270f45c1a2cca7e42a52eaffa5bbd506fd688b201cdc6d17c","first_seen":"2026-06-05T06:51:04.998213Z","last_seen":"2026-09-09T18:52:01.944378Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1945,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/footer-shape-3.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.995Z","timestamp":1788979876995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/footer-shape-3.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6708\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6708,"size_decoded":6991,"mime_type":"image/png","magic":"PNG image data, 243 x 627, 8-bit/color RGBA, non-interlaced","md5":"b2ed51ef08d78477dd4593ce62c8578a","sha1":"76648d169d9b780d8e5f9934a2bebed05219ac18","sha256":"d71f28771a724be8fe04fa9bc4127130b27f4c1907d25cbfda24a4682e86a006","sha512":"1f6aee7d1f22aacbca3928e23e5db9c03d15c717a529363ca6e46394a32587b26d5551dd1c835c5c0e968896e9707ae22f0abd727d68bd0fc312819c7575bdc1","ssdeep":"192:NOArH23ZRenG5cxGnHsL6VGMSGiIU598GPGKG1mha:NOAj615k2HsuSGigogmha","tlshash":"b9d19e02f60a1454e40cd86e11d591e3f157cdb6fb5bc3737b4ec6031aa05ae2b526dd","first_seen":"2026-06-05T06:51:05.047563Z","last_seen":"2026-09-09T18:52:01.945721Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/fact-counter-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.304Z","timestamp":1788979877304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/fact-counter-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 659\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2576,"size_decoded":978,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"624c7c2014c45ff08f0c12c9b5600764","sha1":"2437bf82ce9d4ebc846c0b44f24ed3c487c2100a","sha256":"f1ecb9ec110d8ca70053feb4f1107c2534fad41a3fc1ae7bcc96170cbf54dbf3","sha512":"93b17ac05df3a641e21899d2e5d3f5dab8d4d654fb838603e473f8c28cd9f5007ddcedacd5f7b025fc02167bc9dc304244e9b1c714da22eafa3204af492319d9","ssdeep":"","tlshash":"e6519f58a7131105a937d6dc7bd10359f2244043b60b055cbbc5a2529fbbffc9151f9d","first_seen":"2026-06-05T06:51:05.012632Z","last_seen":"2026-09-09T18:52:01.947071Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.polyglot.language.switcher.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.500Z","timestamp":1788979877500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.polyglot.language.switcher.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-11T20:34:56.689609Z","times_seen":158824,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/slides/slide-v1-1.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:19.039Z","timestamp":1788979879039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/slides/slide-v1-1.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 716993\r\ndate: Wed, 09 Sep 2026 18:51:19 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":716993,"size_decoded":717279,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x835, components 3","md5":"3b72780e4516e073abe7e774cd252e2e","sha1":"d1bbbd4e7fe98af1381d277929f984b6475bbdd0","sha256":"a4be70ada8e27d34fb973f2513aa916a88c5d290007027c3efb1a7cef04c6f34","sha512":"37e74fdec03f9c85a036acaf3430898dbacc92aa115e12ebe60eea129a6eea5e3a058dc964d4713d12cf321474f031c3bce2cbb835f4d545b2fe5999ee4578e7","ssdeep":"12288:RmLdg20uwI5l+p3f7M0RkDFXtk2lWP2H6OuHXuUySLJsYYUGQBgtYOWOcWA/S3FA:RmBg2cE+p3f7LGBtk2lWPY6O4ef9YYUR","tlshash":"4fe4234aac0c4da3e29b501451ad578f3b83332254479f726afff7d3a920ae519068f7","first_seen":"2026-06-05T06:51:05.087368Z","last_seen":"2026-09-09T18:52:01.948409Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/favicon/favicon.gif","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:19.086Z","timestamp":1788979879086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/favicon/favicon.gif HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:19 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 03 Aug 2026 09:21:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37658\r\ndate: Wed, 09 Sep 2026 18:51:19 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37658,"size_decoded":37942,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 33","md5":"bd65eed7f69805c4fd0bb25a5be79995","sha1":"e3ab34628ae46443f38fa18c3c6fa084245d71a3","sha256":"51e16b6fa64befabe6c338361c1a963df34019107f67881e719c1d7ec05b25f0","sha512":"1d4be75b718f4970ca47d5a407185d921af76ed1ceebceb169f9d433e3f40554a2d4cda39d28fb84fea68c36b82f235c5ebfc8c1bd794349be979c46025e129a","ssdeep":"768:BiGy/nMS7Jq+zuo/VqxijKH1/X87lmWa/TcSw+Fwrkv+37m:BO/n9o+zuZxl/qlmWa3w+FKkv+3q","tlshash":"8103d02ece3cc80a5067e5726e49ce91489dc5f87d8d099a0c28f8b5edce8ff95ac054","first_seen":"2026-06-05T06:51:04.961956Z","last_seen":"2026-09-09T18:52:01.949857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.fancybox.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.928Z","timestamp":1788979876928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.fancybox.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 34739\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154104,"size_decoded":35074,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6e11711058a9459a94d5a19b26a78135","sha1":"76792d5913afe035b6ccbac585b0b5e70b33aa76","sha256":"7b99eee1db728472aaa8452017a0d755f488e8d647cc0f62baf45f8ff65b95ba","sha512":"6ecbe997bc6e82fa7976a98e291ec31e043de23f0f5d06834fcc809cde8d0c3ffa0e96c734dfc0b0fbc313e405eac603540913794bb3a9a86ac56db5d2ab868a","ssdeep":"1536:26iljQs+4wETv0qwF/fwUsjuFR4amerr3txU0Me7/pby+mHWgGbAdKfW7WP83RSp:2NoETcqwF3wO/VUbZZr7WP83RSD6E3t","tlshash":"f3e3968a67bd112589333129ab8f705eb57e8423a10dd9263cad53481fc13a943f5fee","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:51:34.177011Z","times_seen":3907,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.mixitup.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.929Z","timestamp":1788979876929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.mixitup.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7892\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28935,"size_decoded":8226,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28522)","md5":"0850ae304b0eb839c556c01fba3b3982","sha1":"2666b6f895685e3c7b3f97e56e3f995b84243f36","sha256":"a7b4cb3db2cf3d417e8e69528fde70b5ed09686cbf54cb06e5dd993dfa452670","sha512":"b283d1fe308ffe8084c6069abac2d8a55bff6b39f19fc62c9e9ec7b87df1986f7f8ad85402c1ef9e27839810a78fbab0ca273c56f790700ec0c97f4bc3b4c25d","ssdeep":"768:PbVEg7ZYHQY4KeCWTNkx/vzGUv8U4n4w/s4:z6N4K7WTNK/vzGQ8U4n4t4","tlshash":"62d2f781335834b1160313f36eff5a0ab43bb1a5a505c864f935c4ea1aab945b273b3b","first_seen":"2023-03-07T12:11:44Z","last_seen":"2026-10-11T07:02:12.494009Z","times_seen":1281,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/bootstrap-select.min.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.275Z","timestamp":1788979877275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/bootstrap-select.min.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1776\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9892,"size_decoded":2096,"mime_type":"text/css","magic":"ASCII text, with very long lines (9652), with CRLF line terminators","md5":"d49bc7346ce02d65c230bde38b733285","sha1":"09f2a4cc2f98a5af9c24c8d4e8a55a93f3202c4d","sha256":"4aa8ed19a0b7881b11095ee57d08cc70199573b75c8cd35fb50a12c570677203","sha512":"ce2e7f21b89ed1c5a9ede36a8533d484db4e5fd4ab6dd31b932b1b7f053775379e0f333ed6de0fc7c922f6133d237ac2b1b2d0539f05eefc86cb1c141fefefaa","ssdeep":"96:sdWCgDfhlU20iLoMlpUcQbV4Y14UcYTlnR46DXUcc3Uccg:ggT02V5O91TlnR46DUd","tlshash":"1c12b05db38112b5819d802e39c57d6a35dafa14b54640b9b39fe36c1e804873c3bfae","first_seen":"2023-04-08T01:47:03Z","last_seen":"2026-10-11T18:04:43.659483Z","times_seen":494,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/polyglot-language-switcher.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.284Z","timestamp":1788979877284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/polyglot-language-switcher.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-11T20:34:56.689609Z","times_seen":158824,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/tinyscrollbar.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.290Z","timestamp":1788979877290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/tinyscrollbar.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":279,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T20:43:33.933419Z","times_seen":19037193,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.460Z","timestamp":1788979877460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gnlgroup.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 425409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-11T19:54:08.249768Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":34,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/appear.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.918Z","timestamp":1788979876918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/appear.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1234\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4379,"size_decoded":1568,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"5a457d262e3c32d25c003ca412ee7fe6","sha1":"b08e23c986259073419a7068fcd36296a91b1ae4","sha256":"46fb2235bcf84086a9b939ae509ecacc01bb31c68ba94e6473e31d8adebec3eb","sha512":"826945d028efc7a9f95c22c5f4d34dfab6704b75f45e7d6fc2e93e2b42f7078aaf7b8508f9155b36dd15ca759a765fff3b4550f17e3b187e79285f63de455d53","ssdeep":"48:3l3Xwqhd24ayV+zFLAPftUIeohhR9zIreFfFoBSxMEh1u1cq6KjD4W7j9:V3XWz1zFkmDo7R9cr+YSpTocqBksj9","tlshash":"7391db4a759b2ab54877722a9f2fa20cd721513b1202c21138eede6c2f71c50a197fdc","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T19:10:37.686808Z","times_seen":4480,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/bootstrap.bundle.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.919Z","timestamp":1788979876919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20503\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":76308,"size_decoded":20838,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"4c723f3a80b935e5e37ec46940bad17f","sha1":"2fddaeb8c5996f0bf7eee5c1b8ba30882f056609","sha256":"3126158d682bafa50bffd7907d0bcecadebf82cc5be9da70235cea3390db2c2b","sha512":"ba8d010cae55f7bda38e3a3c674be884e6ba58e4c83da4463c8fcf83718bcc4adc7ce2bc6e46696376877c6d56c12dae67a709e8672b4623b89910898c658e85","ssdeep":"768:tTYD4yp1HVeg3ZehUp0N4LnUXI5bkqTGAdQ+fZMQndVwkqUNF6JUhz+lcy+f9uBT:tTdimqTvZPzf4Fi7L8JPMU","tlshash":"3073c549b240b8b2069fa066807f460fb33b68daa50b815cb55dd8dd2d7cd89316bf7c","first_seen":"2023-03-07T12:03:55Z","last_seen":"2026-10-11T16:10:17.878214Z","times_seen":1230,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.countdown.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.924Z","timestamp":1788979876924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2174\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5057,"size_decoded":2508,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3854)","md5":"5687ff37986e9a4fc169c299087eb2bc","sha1":"e6a1be605a384a94fbdba0484a0c721f07b22e63","sha256":"3f25abc862001a9c86a15f2703935b1d1ce661a7eb2d1ff1b49ddaca6ca19b10","sha512":"c70d676afd257790b9c09c9a7a9c8950b6e508d850f61efb15d8f73676c78e1d5d1417cbd6685a1806f5015dc1f36f21899ebc01d72d0667171473050302e8ac","ssdeep":"96:MbG5QHArNxeRFMWiM3ySohdy0v/2bBqz2e/xMxHxqxAxKx3xDx17qD2Ycw9NYy:3QHAMpqh2Bqzt/xMxHxqxAxKx3xDx1Wb","tlshash":"cca1c4ce73b2239908a552b101ae1546617bf25af4d6002cb4fceac87a76c6d607fd78","first_seen":"2023-03-07T12:41:42Z","last_seen":"2026-10-11T20:43:02.050777Z","times_seen":2554,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/partner-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.305Z","timestamp":1788979877305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/partner-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 470\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1975,"size_decoded":789,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"99b1fb1a7138ead70c5acfe2af6344ea","sha1":"686c5b9168012ab44ea9ec203b4311350ea1b30e","sha256":"df56fee8fd93bc6e1d4375a6b9e8b755b6c5ce5007abcb4abb5ba3f233dd4c9f","sha512":"dfa3e35d0ac6dfab2b5ada1ae8c61a219ed2dc05304055e352ab83e8b7938911fc856a7b5751c998c5d447c4036917963d32ccf1d311e01754126486234dffaa","ssdeep":"","tlshash":"8a41028d7a02005c973b9be447b3279cd6640187c62e00ec7e9533518f7ab9c86a3cac","first_seen":"2026-06-05T06:51:05.068149Z","last_seen":"2026-09-09T18:52:01.957008Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-1.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.982Z","timestamp":1788979876982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-1.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114812\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114812,"size_decoded":115098,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"6808299903a541a99438a0e9ffecc305","sha1":"d8c92691e31ae0a064c186017dcdb34900d7d052","sha256":"786eff74d7d04738722cfa3dd81bd62f139ab78cf52185905894ed33f6a1afc1","sha512":"b7f11a3cc0c2104b627b4e47aa6372c554d65ff9d1c28191674a9214aa746cf5758312e9506be0c1082852389c37d4eab718897dce69f47cad4c62953a26f44b","ssdeep":"3072:A1zED8HEBuI48NjFtK6Of+Nzx/yK/EPfMCbDD0P6gAVZ:apHa48kP+GK/AbDJZ","tlshash":"d5b312bc01d42587ec365eb94061869240524bfd5a4fd16cfed49b4ee2cf6afa4c3838","first_seen":"2026-06-05T06:51:05.064446Z","last_seen":"2026-09-09T18:52:01.958174Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1956,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1942,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-10.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.991Z","timestamp":1788979876991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-10.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89872\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89872,"size_decoded":90157,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"ba206b217c4cf2c8769da0ec23bbb4fe","sha1":"52fd94ed4a736e3ac18da0676aaa004ef39dbaec","sha256":"b9b3a16562dc508b2d3d0b6de733a31e28f82d6210aa184c8d4ef0493bd11c31","sha512":"e45e4e8a2de4ed703e15a78832e3d796063e2398e444123683a276a8b5a521498dd9ad78889a525e23d2be706235d52c0d7f5f0f725cf681b55ba275c8d3d1aa","ssdeep":"1536:DXJQl12tDLP/1NXEARH11af7U793O+lwzSAV55UR1/cm3P6vqJ2gz3w/Gexp/PJ:DH/7RVYzU7VO+lwtV5aH/B3JJTwOexNx","tlshash":"4893029cea13a186e05410703ff2edcb93f4a3bed6e7c56d6fab921756829563c0081d","first_seen":"2026-06-05T06:51:05.084709Z","last_seen":"2026-09-09T18:52:01.959922Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1946,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/footer-shape-1.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.411Z","timestamp":1788979877411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/footer-shape-1.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12691\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12691,"size_decoded":12975,"mime_type":"image/png","magic":"PNG image data, 577 x 582, 8-bit/color RGBA, non-interlaced","md5":"d223d8ff0491f9d0c83cdf5c2be0615d","sha1":"a024224f29106a99ed5a729a7af6a056036148b7","sha256":"2064fcc7c298506d5162a00481cff77fc2f2d105c7dce5b6f7ed07ee8e3173ce","sha512":"4fe5912447b06080ab9a3e70133f6a4e6abb4c3bda556433ec470736f16f0b7137aee2f4d2439e90db81939fe045b3998c82d1bc9cc7a6919672f63b6cb58b01","ssdeep":"192:1yIy4DrK/dFHXAK+/WRpca1MDSTwBsZxmlb0zvB+Weezi2OQ7hvmb6a9JSBD:1yIy4DrKX5+/WRpc3Y13NzvhUKEuaMD","tlshash":"9b42bf0dc3ca12d349dca18652cb0863587b364c1ba7e6cfd0c9597fa0dd4d44aaf959","first_seen":"2026-06-05T06:51:05.009074Z","last_seen":"2026-09-09T18:52:01.961288Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/nouislider.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.934Z","timestamp":1788979876934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/nouislider.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5124\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13675,"size_decoded":5458,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13626)","md5":"b0964221867ece5328baf1985f9f1a43","sha1":"3092a4ac5064b35b5865db3cc5962e256178db7f","sha256":"16129cf19ca1cabbc5a4d454651bbb475d55923f7026f4890afb9aa9cb5ee5d2","sha512":"35fdc1d61f1629151d15a542f63fb4b832f8956e033e1d6926805132e674c6ddde495c88eeb13f08560c36a67d5aa0756a94fc34104afa237a40b1fade800efa","ssdeep":"192:b0d4YXuU0v8kt95Z+yTZcuyVw7jYX290xnDdaspJ+2CR8i223xk+JShg/kn9ZsFL:Yd4YeH8kj5L/V7jYGOxnBacivCrtA","tlshash":"3452d5d835a2b136432324b2a0af850bf1769d90b50c196095a4d2d17e78ffca7bbf5c","first_seen":"2023-03-07T01:38:14Z","last_seen":"2026-10-11T07:02:12.432877Z","times_seen":382,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/jquery.bxslider.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.288Z","timestamp":1788979877288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/jquery.bxslider.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1086\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3884,"size_decoded":1406,"mime_type":"text/css","magic":"ASCII text","md5":"c6dce38fd931ed97dd8266fb446a9a1d","sha1":"cfff3f5bceeb3c743d503ac8cc4461160b527c6b","sha256":"8e3fcfdce957e716767fa2317b9c3b3dc1427f91fe873dfa565872d4f5515ebd","sha512":"e09493cb8a23fb7feb2a0116cef5edf6499fd371955d364bb0b0b4c38770ccab221ad9967ca29aafb52774ab9c464dda4f02f64a7375f46aa98a271f1b1cc244","ssdeep":"","tlshash":"2d81ded11a763d9aa11e917c7e95c76d4c2e8063af0f0dfee4a5a87d878dbc00233985","first_seen":"2023-04-11T05:32:16Z","last_seen":"2026-10-11T18:04:43.891562Z","times_seen":483,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/style.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.909Z","timestamp":1788979876909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14008\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101422,"size_decoded":14329,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1e02c7e93c7f5d8c9f1b95175dee9ea1","sha1":"079732fb8d27fdae2499a15d8c9b4ee4255b7e1d","sha256":"58c062078e9a8b1eb5d25c552f7a5654ceb68bbfe6fcd1d1e7dcc1b37be3e00b","sha512":"5320eb215c4592aaa8491d3f631d68d1ecd5551141575929047fa3204173d8114539c4e56749bfe65558dc1b4376385ad8389f5b51b4326de5994bbb1764f991","ssdeep":"1536:eYKQ4t/sjRnjgw79AF2SmK4/CucTXcdMfW2:eYKrtQxAF2Sh","tlshash":"5ca3005c96211545a23397acabe11789da384053db1600acbbd57311cfbfb9c8623fee","first_seen":"2026-06-05T06:51:04.966188Z","last_seen":"2026-09-09T18:52:01.96444Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/aos.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.917Z","timestamp":1788979876917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/aos.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4224\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14243,"size_decoded":4558,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-10-11T17:15:33.734764Z","times_seen":12621,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/map-script.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.933Z","timestamp":1788979876933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/map-script.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1199\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5655,"size_decoded":1533,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"26b98f8d8e285619068cd0c042c47876","sha1":"6c78eb73c234c101ebc842e15d9c98973f151bf7","sha256":"844f0ba1bb02baec601536b3ae5e941dac5b4dc0db0bcfcd96fd04271de58c3b","sha512":"1c53e24dcc4be9e4a7338b946a7d3f211f157674b79046f1a844b92f531517285a4ad42c04d076e3bb90ca2edfcbb552bedd14d68e0c85b82bf1e42504b03f75","ssdeep":"48:yZ9qbl9UcBjmau3ka3Rs2l56jOwXq2+JEnrWdYFu4h:y6p9ULau0aDl7BoFuE","tlshash":"8fc1fd6afc24556741bbf3b69aaa8240f4b0e23f424041177a3c56dc5fb0a74b19dfac","first_seen":"2023-03-08T02:32:05Z","last_seen":"2026-10-11T15:32:47.952813Z","times_seen":82,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/lazyload.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.941Z","timestamp":1788979876941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/lazyload.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3429\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15295,"size_decoded":3763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (351)","md5":"cf8ac4ac2ca82499efb266472e0ad291","sha1":"ff689e70ff65eb5a20aa4abd7a87c9ef1f92a72d","sha256":"8ab6a22e0e8694d7181b5e67ad23c92c73873b97c7e6abd9bdb8762e64beb2bd","sha512":"e9551fb41940197f18b5e44053b1a6494e542005069562dd6621aac1cff1adb2178787141c3bd1d7b8031e53e782a8d1c0ee7be9ef84513667b350b209fdbbe3","ssdeep":"384:n6LtCrpOaCs45VIar3eKE1Y+GiVhewdSDT+qVWV86lHM+r7+l1br+lJ8pirLq+25:gtCrfkjeKE1YziVhJk/+qVWV8+H+zbrL","tlshash":"b062ed0e3bb6216d586fb03b57afa20e36298447441cca50bc7cc7985f71ca936e5acd","first_seen":"2023-03-07T01:33:06Z","last_seen":"2026-10-11T07:02:12.451579Z","times_seen":202,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.tinyscrollbar.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.948Z","timestamp":1788979876948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.tinyscrollbar.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2680\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12500,"size_decoded":3014,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6b76e99ab5c6b8c74ee53c4e5bb51b51","sha1":"d072bb29292dd5a532594781d9ac9c0104921579","sha256":"39b0bd03285290da64e5d8f6275444307e7c4179eeb8833a8914cdcd96aedd94","sha512":"76ec7b608f3ad71f9d19c7e72ec0dd941b6f95d4b6fb6ec93a78049c46280e88ee1a7363aaa9b694ce1acbb89dd433baa9d2a1bb4c2aff11f19f4bd179d46fce","ssdeep":"192:z9YjhYofCCIqi4w2+mUH2lmZtIbmSnO/DxNSVNlNH4majdijT3Zw7NWK6agc5rC0:xCAS0ZxNS7lR6G09kW3iRdtUj","tlshash":"db42425826e912914167f23c87db3281a035d60f561d6d9c39ac9bf84fc7f3053e2ea8","first_seen":"2023-03-11T13:45:51Z","last_seen":"2026-09-09T18:52:01.969693Z","times_seen":25,"resource_available":true,"data":null}},"time_used":1989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1969,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/discover-2.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.993Z","timestamp":1788979876993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/discover-2.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71935\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71935,"size_decoded":72220,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3","md5":"53bf3b50680080fe09dbe420bdbab8ef","sha1":"08fb250abc032519f3a9ecc8720e6d1d150cb90f","sha256":"6884a802759de1b6b66ed28adbb7e24105078a018d6e45a09500ec273802b949","sha512":"d17a65036401f1c806bea192469d745196a0dbc439491b2b338466688013f52776089f192cad4a1b069b7f14e365f86f64907fe25b5bff339aeabf29d6960947","ssdeep":"1536:JA+AvwppLcSmUuc49NmBqfk50ymCbBzbhwMNNO/e3g9YCfOUp:++ywpZyh9i09CFiqEx2o","tlshash":"0c63026f24dbb6e1979c8e0e11afce24fd31978a84a36e7dc8c30ab5c0413d93674156","first_seen":"2026-06-05T06:51:05.017866Z","last_seen":"2026-09-09T18:52:01.971102Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/jquery.mCustomScrollbar.min.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.281Z","timestamp":1788979877281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/jquery.mCustomScrollbar.min.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3801\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42907,"size_decoded":4121,"mime_type":"text/css","magic":"ASCII text, with very long lines (42907), with no line terminators","md5":"48ced4b8591f0e0216bf4a44926cbbb2","sha1":"ecd34b4c09645b415c5a4535c51e18d008931204","sha256":"2cd8d308a8b1ab19dd60121e4bb462c5a217aab38f28b7c625698939b1902385","sha512":"f47852fdcd24874903889a567de2a26354931d1ec92beb84b28c81560dfbd5c8d256e0ae7fd168dc197827ec0f72c7b72a3266a69425ce0b2b2334983cbab609","ssdeep":"768:VStyRbNRmYdFZFt6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:VStyRnmYdFZFt6+R9","tlshash":"0413179a2a4336dffa4f447dbb81379a11fc37834552166cb0d758a4ab88bf7a439402","first_seen":"2023-04-07T02:43:29Z","last_seen":"2026-10-11T19:10:37.870329Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/custom-animate.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.896Z","timestamp":1788979876896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/custom-animate.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1595\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19021,"size_decoded":1915,"mime_type":"text/css","magic":"ASCII text, with very long lines (713), with CRLF line terminators","md5":"c47e86e281f05083224b1c5b8651c3fc","sha1":"eade7544fbef77548b5b0a98274d48be20d59a9f","sha256":"01723e910ec01f6f95bd9f6b50b9aa683f9463d099cfff327ae5ec204f066e6d","sha512":"b9b6af739748cfe163232ffc41ce2bf703ffc8b1130ddcc1bf2de91e6287b77edd289e77dfa4622b65e735822323e3418094b86af10d86a3c2a9336100f2ce0d","ssdeep":"192:iopY2+Y2kE6Gi6GvcNZL0S80SoeX/lX/MWKWxkUw3UwbUwMUwRQ:5HcxliQ","tlshash":"f282189b1882014957770b2193fe0e54de385963a8221dfe73cb254e8f657ac138ae7f","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-10-11T18:04:43.895568Z","times_seen":55,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/nouislider.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.282Z","timestamp":1788979877282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/nouislider.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 902\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3138,"size_decoded":1221,"mime_type":"text/css","magic":"ASCII text, with very long lines (3085), with CRLF line terminators","md5":"47227d60055ecfb48b204c36063a044a","sha1":"ad1442ad277c050a72ba9de54dab2057a5919212","sha256":"24db18ce2f84de05c5d1699844639e31b7e1765ad91c1658ff13a5875f7160f8","sha512":"0e6f6f1601aab242b68718adc2aa921dbf1f459de7af80bb0ff297178eb0bf2cfd38e5d488b190b08a1633b95bf9643606d300a9c4758044674ec6c48e44fb64","ssdeep":"","tlshash":"1a51543219322f3afa13d10d42a00ffb7125421e97737adfa918b661fd93c99452e388","first_seen":"2023-04-07T00:21:24Z","last_seen":"2026-10-11T04:41:56.098562Z","times_seen":567,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/icon/preloader.gif","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.401Z","timestamp":1788979877401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/icon/preloader.gif HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48991\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48991,"size_decoded":49275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 107","md5":"7355bddc2491ca54860da0cf524faf08","sha1":"f939505118bfe9375cd70a3b47debc32dc1417c1","sha256":"43f17f31faa2eb91323a1d9d73f4707fdfcfb29b81b65223d2a91cf8d64dac57","sha512":"f2a6c6f1b96c8e7109643ca638d503906f2e4f938d4a63268259b88df59dd5c63f327bbea8858315644715cc21d1a57495226665829f68614a625573b1e7034e","ssdeep":"768:kTodMwTmI3/s/6Uc3oeSZMuMxH2Kakwqh4mxtwG9wxPJrHaAHS2M0oVVV4YVAZgm:kTodMLm/sSwMxxWhkYzaoOVVAu8Jh","tlshash":"d623e199cdb11419a8772d3a0e663a7c2a2de8d0808458782c9ef575f0f5cbe502ef96","first_seen":"2026-06-05T06:51:04.975447Z","last_seen":"2026-09-09T18:52:01.975864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/parallax-background/interior-design-area-bg.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.406Z","timestamp":1788979877406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/parallax-background/interior-design-area-bg.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 339729\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339729,"size_decoded":340015,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x690, components 3","md5":"17d6ec96edd5b8fc143a22ddcdee68f4","sha1":"841201f40e3a1049df9fe48445bd101d1f71d942","sha256":"bd8b94042ca3e9952f1264ada91ecb246a21e5b519ba22e99c8dd5a9a723468d","sha512":"5ba189a6f1301935f2c803695c153c3f4b4e3be99d959884d4d9b67adcfee332f06d017d97193a0b36ffcfd9bd2ee8ee8b07a5edff64c234764ae1dae23bd2ef","ssdeep":"6144:gUGIXa6SGlHuCjzzSmHVbSs9zPDRjKBrCfomiDwKOoPiU+nuihG4appLOvPikQMY:gUGT4tlrHV+asBrCfv/daBiMx+vPst3t","tlshash":"5474228a7bf6f5b6f94dea04b1b7784e80dee5a3f1c623587e94dd8459c01822904fe0","first_seen":"2026-06-05T06:51:05.077729Z","last_seen":"2026-09-09T18:52:01.977352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/scrollbar.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.903Z","timestamp":1788979876903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/scrollbar.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3801\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42907,"size_decoded":4121,"mime_type":"text/css","magic":"ASCII text, with very long lines (42907), with no line terminators","md5":"48ced4b8591f0e0216bf4a44926cbbb2","sha1":"ecd34b4c09645b415c5a4535c51e18d008931204","sha256":"2cd8d308a8b1ab19dd60121e4bb462c5a217aab38f28b7c625698939b1902385","sha512":"f47852fdcd24874903889a567de2a26354931d1ec92beb84b28c81560dfbd5c8d256e0ae7fd168dc197827ec0f72c7b72a3266a69425ce0b2b2334983cbab609","ssdeep":"768:VStyRbNRmYdFZFt6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:VStyRnmYdFZFt6+R9","tlshash":"0413179a2a4336dffa4f447dbb81379a11fc37834552166cb0d758a4ab88bf7a439402","first_seen":"2023-04-07T02:43:29Z","last_seen":"2026-10-11T19:10:37.870329Z","times_seen":2135,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-4.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.985Z","timestamp":1788979876985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-4.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112647\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112647,"size_decoded":112933,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"d9cc177449a1c6fb8001347f07ea2e58","sha1":"b2780089c67004545124484f5d49ab57cf929465","sha256":"2f553f7dd4064ec53a667cc9050e628fe17c416d8aa33fc1cb6cab90b0864386","sha512":"44b16e507e0800af10bae174a1a85314d0abd443732b64f1874796fe84e473682ee082a17540d9ff0c47af921de755ecae941c94bb5b461b1af5d4a1b1459b5b","ssdeep":"3072:aQxC1XXGbDdrM1seDrLmbYAkP8uBGwpcJw3jKSAjC:aYKwRQVv60DPFBrpuxC","tlshash":"8bb3120f49220afd6a0955f8b85416c424f83fa6d5daec6ef7f7d24dc091ca3e0989e4","first_seen":"2026-06-05T06:51:04.967599Z","last_seen":"2026-09-09T18:52:01.991904Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1954,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1943,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/choose-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.308Z","timestamp":1788979877308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/choose-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 503\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2392,"size_decoded":822,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b17322b80747e99ed08f290aadfaa998","sha1":"33f602ee166856065eff433801bbdb1837b7bb9a","sha256":"26cab8c19dff8f4488828b50efc309e01b9fd58d92729699b4532eccf6c30f11","sha512":"38c667e172119e45f36743502596e67600d387ec86125ccc0e480f5a34651c1dfba82e832b70de0c9b86206497b6cc756ff67e18e180e386b0b342b6160a347c","ssdeep":"","tlshash":"0c416ba9c11614096377cee46b55329aea2441e3c7a200d8f7a552388ffff2c8452f8d","first_seen":"2025-04-12T15:14:13.025508Z","last_seen":"2026-09-09T18:52:01.993388Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/fonts/flaticon.woff","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.457Z","timestamp":1788979877457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/fonts/flaticon.woff HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/flaticon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: font/woff\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13632\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13632,"size_decoded":13916,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 13632, version 0.0","md5":"b4748b9366db4ce76d709863c516fa37","sha1":"47a2affefc170eb42aa43bdf29074f65a8399e61","sha256":"260430ca542ba286a6999ab321cf8f861499fbaad9eae43f284f2a660380287c","sha512":"73fab7ac6caec0aaaf0420c1e25056b95c5d694ee370c3657b625922df58fc6af8533538173a381da7a6c0ec35329a8edc5f8f30b8071a710ac4a24631d765ab","ssdeep":"384:pHzxdprqv8yHRbhjFF4sXlxXpYQ3hkajamyrT+:1MvXRhLXlRpYQxkajfyrT+","tlshash":"6e52d0200e2b3b43f66417361ea4e29e1dd756b600cef60a85af17497c477b41a6800f","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-09-09T18:52:01.994989Z","times_seen":9,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/timePicker.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.936Z","timestamp":1788979876936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/timePicker.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5000\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:1.3.2","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":24909,"size_decoded":5334,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e91877ef599f935cda6bdb97aa30a851","sha1":"89f4c7a0945b9e30528923bf2295dede7814c6bd","sha256":"c0b1950c24f059ab7fe9c2f6321dcf8b8148b01156e09f8424982c4bcf5a1d21","sha512":"f4367b2bc6cda33433221e6f0ddb58a7b78c985190d5e2ded1a22295bff8cada1808ef8592fc5ecf60099ac68f5e540a5cb4a978e03267e067639b4a286e3f8d","ssdeep":"384:hV80uAFfxUS9CBClqKYVuZXFuSpMUcD9nvvneJ:hBuAhxUdBClJmuZEYfUnvmJ","tlshash":"43b2533e28c25276d237a37bd2bea2bcf6e1621f52022d4c749d057d1ff0b914216ab5","first_seen":"2023-03-07T14:05:29Z","last_seen":"2026-10-11T20:58:28.578033Z","times_seen":829,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/logo2.gif","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.958Z","timestamp":1788979876958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/logo2.gif HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 03 Aug 2026 09:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48991\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48991,"size_decoded":49275,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 107","md5":"7355bddc2491ca54860da0cf524faf08","sha1":"f939505118bfe9375cd70a3b47debc32dc1417c1","sha256":"43f17f31faa2eb91323a1d9d73f4707fdfcfb29b81b65223d2a91cf8d64dac57","sha512":"f2a6c6f1b96c8e7109643ca638d503906f2e4f938d4a63268259b88df59dd5c63f327bbea8858315644715cc21d1a57495226665829f68614a625573b1e7034e","ssdeep":"768:kTodMwTmI3/s/6Uc3oeSZMuMxH2Kakwqh4mxtwG9wxPJrHaAHS2M0oVVV4YVAZgm:kTodMLm/sSwMxxWhkYzaoOVVAu8Jh","tlshash":"d623e199cdb11419a8772d3a0e663a7c2a2de8d0808458782c9ef575f0f5cbe502ef96","first_seen":"2026-06-05T06:51:04.975447Z","last_seen":"2026-09-09T18:52:01.975864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1979,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1959,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-3.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.984Z","timestamp":1788979876984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-3.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 80153\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80153,"size_decoded":80438,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"cb1115e0f801922b26d9a6f7e6cb4235","sha1":"4121afafc00f9c9ee4ffeb000456828a6056e92c","sha256":"c80077c6f5d0ee254f2650add07cf97886951cdd24331b2408e674ce317a1c6c","sha512":"f10f5569bebd9b100b9a7db3168e1fee60edae37ade0f668d844d685147c72374ef5c2a470499b3152cc4eb281edf3b4d6212a82c3fa9b6f1d75458cedbc3efd","ssdeep":"1536:DGGEw6sW8Jty249TAg2267rMhT9MAfgP8ExhWisEagDU/YYJR9iv4jrEKTcXtS9:BAuty24p1wcT9BfgU8vnagDUgUq4j4Ri","tlshash":"e87312fb6757d895610a01b3607bdaa37f4ea4dd9078b9049edc66671a212203f80ee3","first_seen":"2026-06-05T06:51:05.027028Z","last_seen":"2026-09-09T18:52:01.999515Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/imp.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.892Z","timestamp":1788979876892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/imp.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2225\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14237,"size_decoded":2545,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8685222457d23632d01c71c09720b3ae","sha1":"4c5ad711cacc590ed56f5bbe12db4f6ff8133e89","sha256":"2b7aaa36ca216f9216b006fde80dcd0e03c9a3cfec62d373216b9699f706115c","sha512":"14a15cf506e881865d2af9d2cf1ad9414be110b7c7d8794bf93fe54ef6ab6f0bbe480e3da0be3c139cdced2eaadd475ccee4efc7ae85332547bf2dc530075144","ssdeep":"192:1JHOdM/Di30S6e+fM63+Hgt+GO16ocMfoO7lH/vUXNPdv9EpfuILUcBd1T:1J0uIB60fqTK","tlshash":"b45211a9e541024272368a282b97efb6ff2c00938b0614797b5cb3650fb53b94d61fcd","first_seen":"2025-04-12T15:14:13.049376Z","last_seen":"2026-09-09T18:52:02.001227Z","times_seen":16,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/about/about-1.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.970Z","timestamp":1788979876970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/about/about-1.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:21:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 451621\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":451621,"size_decoded":451906,"mime_type":"image/png","magic":"PNG image data, 575 x 585, 8-bit/color RGBA, non-interlaced","md5":"1445cd0cdc995d5d9c641d9ae0169b69","sha1":"13772f23ed81d0848642975f8ce7e864aa897945","sha256":"441187d3f5fb9041229bdd7c9278d7bdc609125c664a586b5f9db7402b035c34","sha512":"8a0d34542c12d93f83ea2c12fa415d86e6b675bfb48fab183c59f76c5ca701c72bf0aa9cc191fbb229c7a40a5a4767a75915e3ec6bf4253d8eec860ad1b6f4e7","ssdeep":"6144:VwgkM7s2tH85ErtV+GnVUjRdHIiTnBaou4Nlnme3bnmw+4422mPw+bP1rsqn3+EB:VwgkM7RS1eUvoxYFme3jm3mlFsS3VTV","tlshash":"eea423d010e21b5e99f500be736e2d1f6770ea667925e08d1e413fccbece825af89146","first_seen":"2026-06-05T06:51:05.025788Z","last_seen":"2026-09-09T18:52:02.002636Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1969,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/owl.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.900Z","timestamp":1788979876900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/owl.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1233\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4752,"size_decoded":1553,"mime_type":"text/css","magic":"ASCII text","md5":"d5b507775bbdf34adb1ac9914f8ca020","sha1":"8979eed0c1957152258433f223d67c579136adce","sha256":"6f965531c70972c209917c1867f595940ad8a2416935c04d024a7373a28c234d","sha512":"7a15b8d2d0073203398f18bf97507f619588fb338e7f2d8a3bfe8392a4323a74efa14a87c57573186b55cecfe1cccfe54127159978711c016d5d9bae769d1b82","ssdeep":"96:T1GgJcBG8dLXehwaWIAIhIL+NV5TVGKLT+EqCsvFbEyZEAFbApgrYMwBuU4X:TEgJc9LLNIAIOiV5TVGKLT+gsVRPApgN","tlshash":"2ba1cce6217b010e381a63d01aae6b56357e8443d8199c54b3f753098f8efac215ff6e","first_seen":"2023-05-09T07:16:10Z","last_seen":"2026-10-11T18:04:43.692126Z","times_seen":536,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/faq-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.311Z","timestamp":1788979877311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/faq-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 898\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4488,"size_decoded":1217,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"99949cd46e8cbcca0381da31c07c1a43","sha1":"6a23e7039d270213cae08f7dc0ea768d2fd2e0e5","sha256":"13e146d533c088736a0521df641f1b2cb64ba3be6ca69e4c81b5d772f74b4432","sha512":"53186608e8d219c8bcfb681ae1afca12b763c026f4d7f95906ac80f46147255a0b3f3ebd7cbb6b29c49b26c0ec4f0d54728c802f6cdf10161c8316f0cc6ac1e0","ssdeep":"96:lPiYtJGsGDU/aKBTVasY/htpM1Q0u8nnrG/:lPtXHIUy+R7Y/K1Q0u8ny/","tlshash":"2e91101ce70425495737dfd457a23b4de7381083ea25103cbba2a2607fbab9c85b1ea5","first_seen":"2025-04-12T15:14:13.09289Z","last_seen":"2026-09-09T18:52:02.004655Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/isotope.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.922Z","timestamp":1788979876922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/isotope.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9890\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37779,"size_decoded":10224,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039), with CRLF line terminators","md5":"55c61eb8802947bf0d14f5430dfdebcd","sha1":"462535569e9282274bdd71e0a1393052afb426f5","sha256":"4fa72a8e292674529c8c0fdc8b0ccb7974e214d83e862316e91743ed7453b1c6","sha512":"7a43ace9c2badcf6e170cd09a0b4e53232e52f0e0f6e77522e2af9e02a0ed8002c7437effa4e51e8b32226bbdb2d6c2d78d7c2e507615b8dcae28f6756d274ed","ssdeep":"768:njlIew3PtifBnQ/KMDwmWD6sMKD6gjfGQre4+uhFVByQ9zx:njWSBnQ/LEBD6YD6Ee4+mf9zx","tlshash":"3803b649b74079304387b1a696af110f733aa47ca90690ecb369d8fb1cb684d6133f79","first_seen":"2023-03-07T12:02:41Z","last_seen":"2026-10-11T16:10:17.631488Z","times_seen":3489,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/material-2.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.975Z","timestamp":1788979876975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/material-2.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55882\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55882,"size_decoded":56166,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit/color RGB, non-interlaced","md5":"40e72b7207c6d7f7d4f79f8db345dcbf","sha1":"80365c201247dafd97eb1e288aed0438d4ef543e","sha256":"a28d39c1570019f9a372d9f3ac4552cdad415fc31830c3ba8570befd55f37690","sha512":"f599b6333a16238b39a671947e524914a19329d341fb68bd0c8f4b0b5ee4874fd5bb55df4317f6f9d597fc7fd14aa2048451042099f31209984e1eccd58dc4fd","ssdeep":"1536:LEp1dAVi9NVDQDZWMrBaV8mviHh4s9J4KMbJPORiQ:F1BaX6B4wJUbiiQ","tlshash":"384301a978253f9b876bc38d0598600d342f6d5edd9c51590cd2dde22f038bf8b2a8d2","first_seen":"2026-06-05T06:51:05.071995Z","last_seen":"2026-09-09T18:52:02.006564Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1962,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1946,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/parallax-background/discover-area-bg.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.409Z","timestamp":1788979877409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/parallax-background/discover-area-bg.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 659276\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":659276,"size_decoded":659562,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1280, components 3","md5":"d9936f668fe2447e17869e91d10ce7ac","sha1":"a04b980a355df556aa2ea6b0c40d14a14b2e74ce","sha256":"b019f8b4386d7b01b913446cb12b31779556ac8fb3a6658753085ca7b275d586","sha512":"336918ef00d170cda64ba26eb7f74d6873ae26bff72ec1ce853df35eb455b74d981b991c2fba56b18a94ab585f2062691b518e8c15df7c08dfb055d2019fe4c5","ssdeep":"12288:Zh2+ciW3P/C2PUN3DGJlMk/o98rJWL7NElZQ0e4hiVnLx:bjW3P/CEURGJlM19yWLxEw01hSx","tlshash":"65e422153499364ecf6f145701a7cbbcf5120034f636db523f2c9ac71e8921a9a9af4e","first_seen":"2026-06-05T06:51:05.083685Z","last_seen":"2026-09-09T18:52:02.008472Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.456Z","timestamp":1788979877456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gnlgroup.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 425409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-11T19:54:08.249768Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":28,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/animate.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.273Z","timestamp":1788979877273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/animate.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4291\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79169,"size_decoded":4611,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"57fb9e2cfb317959f7824f4fbe950dbe","sha1":"378aaa5cd626d05d5a45f21a5629bbb5c09bf534","sha256":"75a917eda5c7d388adaa10a684b5468d51dd043ed1c517bec76b4ae0a6a4995d","sha512":"5b0371267fe722041c014f22c86a43bfd0c35f2826b6e918cc71bd7aa9b37ca85820d55d0a1409f37eff4dcce85fae8aea98eab8f40fe2a1d36e0e3fb279d6f7","ssdeep":"768:I1A1vYyY21f1NYtY7XXYzYtYOYrVDV5YMYw:dYyYaYtY7XXYzYtYOY9YMYw","tlshash":"8c732c5e1d40118447724b29d7de8f68eb3d917318222eee72c2588b8fb6fa853c9d47","first_seen":"2023-04-05T08:09:08Z","last_seen":"2026-10-11T19:10:37.728062Z","times_seen":2484,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.455Z","timestamp":1788979877455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gnlgroup.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 425409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-11T19:54:08.249768Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":3,"connect":41,"send":0,"wait":19,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/shape-1.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.962Z","timestamp":1788979876962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/shape-1.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6108\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6108,"size_decoded":6391,"mime_type":"image/png","magic":"PNG image data, 219 x 411, 8-bit/color RGBA, non-interlaced","md5":"f317e05e7f7a5a4791b8991a89ba7522","sha1":"230daede68c97ae05e6f2da44f67d7176a813a6a","sha256":"7fd2e9179748c8cbe51038c9e960a3df5cf1a4a9df8f9dacc7cd8981f0e301e0","sha512":"5f234f9ad246f2aa2e604f8ff30913d563da6b68c456d98f233b3beb6bd2b4ce4a762b07069f0c1df5036146cf924f906a5a7c16cb7a9d5497fa1d4893fd9b4c","ssdeep":"96:kQt+70lIRfly7T1yUvIdP/5vUPkEOdhLYqqg93+bY67Hl7jg2PA9PbudYQxM1:tjEuMUIPhvU23kqDcbYgs2PUPbwxA","tlshash":"e1c16c4cbc207cd9341f81b452f25637bd37c690e983b1912cdd85b86d58aeca89d6c7","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-09-09T18:52:02.011568Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1956,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/featured-2.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.972Z","timestamp":1788979876972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/featured-2.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 123569\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":123569,"size_decoded":123855,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x400, components 3","md5":"70bc5af2603df3312bc5d34a75ab7bb1","sha1":"1ec093e4580ebadcb819928f06e145a27b998503","sha256":"246cec6c2f5c0910438d296ee2295b97ccb9834e5ef63c02eb9f643fc66f1a9e","sha512":"fac9c35211e223124ac6f5febcbe3f1b5ad87cc440c8e8246474fbd1a32bb8161a876fe4fd29d75315f5a7849c2e996701b60dbc75cc51386bd669139d50010b","ssdeep":"3072:PFnkoWeTJ6+mVimAaJUgDFfXIca6fVAie2bvUZxF:dlJ6a9mzXIc1fClceF","tlshash":"7bc313e7750a60f7d59809b9f4e38a9f677bf9c24a2e11e94962044835e7bf343022d3","first_seen":"2026-06-05T06:51:05.090889Z","last_seen":"2026-09-09T18:52:02.012738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1966,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1948,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.467Z","timestamp":1788979877467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gnlgroup.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 425409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-11T19:54:08.249768Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":40,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/icon/shipping.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.966Z","timestamp":1788979876966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/icon/shipping.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2511\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2511,"size_decoded":2794,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"afb4cc0058024d36a7dc836516ccf059","sha1":"d458ad91198c2e368d16ce0d9830f087e3f816fa","sha256":"f4d62404e2c29cc14b44825eab8eecf7d870567c032a2dcd64510f690b5119b0","sha512":"937b8403267969a7185e1ea40bf6a4946d8c10e0cccbd5f88b21b99667deb9529e8f6c7c1bb07a70f5deee0f8bc0d5b0c6d02ef0ddc54d31689012ad24fae6a5","ssdeep":"","tlshash":"2751190ee68074415add99d21cee433b81d18840ccc89f57f88fe6642c68ff2a6670ab","first_seen":"2026-06-05T06:51:05.057018Z","last_seen":"2026-09-09T18:52:02.014012Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1953,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.magnific-popup.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.939Z","timestamp":1788979876939,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.magnific-popup.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7043\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7377,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T20:36:10.025868Z","times_seen":77948,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/icomoon.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.277Z","timestamp":1788979877277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/icomoon.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1021\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4830,"size_decoded":1341,"mime_type":"text/css","magic":"ASCII text","md5":"771911dd8ab9b75904db4ce4ca594fbd","sha1":"b941ea2d6d0e6e76207a12dd80f747d6eb0039a1","sha256":"51376955dea5dad567d0ec30ee5c9fc092b8251e012ace70c612a63eea2f5350","sha512":"8926598449672f7b0c211f38a83c23158698c1834b18806b9858696107e9b5c8a4fb278bf1169525edc8d0674299e29dc580569155071cf92f386d698f138ebd","ssdeep":"48:InmAIdOrbcCAGOrMan/BMSt1qmI26+2ip3Gr1BMGo90rz3:InmdOrLAGOrMYGStAmIi6hXtr","tlshash":"5fa132e0d9bd18804340e4d622426660ff18a3289d9f6d4bf6a7788cbbe2705d1d73ec","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-10-11T07:02:12.544633Z","times_seen":8,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/slick.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.286Z","timestamp":1788979877286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/slick.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 493\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1893,"size_decoded":812,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7dd6efe7556ca666dca0126387feed72","sha1":"8bbd779ec8580ec0f0b8233eaafdb1bb5090671b","sha256":"2ea14b8011f2330241a3f98a5b444db57214f133728ca671c86fa0d160ec5324","sha512":"a8d94b842400f96aa98f2d739f435b9f386f45693f50e2ed23ae380e9eb5426ac6b82e85879ae00d31969d144557d01d50e0b800955bd48db6aaa0811958bad6","ssdeep":"","tlshash":"ad41fadc0652c5d68733c4444fd38649eeefa0930c251698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-08T04:13:47Z","last_seen":"2026-10-11T20:12:42.248558Z","times_seen":2768,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/breadcrumb-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.300Z","timestamp":1788979877300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/breadcrumb-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 399\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1556,"size_decoded":718,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3d2898876a815902dca75221d31060da","sha1":"f4ca4a1cdba48bbb32832a8651a598dd1704d7e5","sha256":"e8be20a95ddb4d2f4d2f48b63b06800f62484dae17bbd7f59734f4d35e6ec048","sha512":"0c27fc66dae8039b47b63f0a7a6bbbbdaf56326fabd56240cfa84f2cfb0f2be5e1564b750b0dee506dd7a8b413ec96552a25d118b6702ec57e87adeb9765a412","ssdeep":"","tlshash":"a2317d485b106150f93745ae9bb2264ac7380603da16416c7f44bf556fbf74cc1f2e9d","first_seen":"2026-06-05T06:51:05.011619Z","last_seen":"2026-09-09T18:52:02.018021Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/sticky-logo.gif","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.961Z","timestamp":1788979876961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/sticky-logo.gif HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/gif\r\nlast-modified: Mon, 03 Aug 2026 09:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 37808\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37808,"size_decoded":38092,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 89","md5":"51320d4c1a97001b33d402b9e2f63436","sha1":"d10b8306524243f737afc25e310d6579c24364b5","sha256":"03b088166ae4c9c32026f155e455855e83388451d37fd3c6adb3e3e8dab38146","sha512":"5f1eee0bd72c503058d065193af385183f3418c2d33f045839a4d2628ea501fc0e4066dcc3667b84bfe38ecbafb41c61e5a019c5a14be1287e51b06e36a991c3","ssdeep":"768:GF8StSvSEtcI5WibzSLUrn5NGnKRfKcWDscgcCO+Eg4juHbhNMJSavUk7a31m:GF8St6Dn53uIrn3IKRpWDQjOt/jIAJSC","tlshash":"e203d02e6c6dd14f81fa2ca6fb244dedc0ed0de45cd234a80a7e7d12c5d667e194e209","first_seen":"2026-06-05T06:51:05.037148Z","last_seen":"2026-09-09T18:52:02.02002Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1956,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-9.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.990Z","timestamp":1788979876990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-9.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 101245\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":101245,"size_decoded":101531,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"2afa6a5faf132cbdb81c2836090bfe81","sha1":"88b1f63a279cdce54894ea58129d61a6fe56f35e","sha256":"a3c4b772046e27fc53398795f59ff2d0aa02837bf5e51f613089bbe85c18a0d4","sha512":"8749e8554e4fdc3cf50a62542bce27b030a3ee2ec38a7ca62e9ce58aaf584d2274533f761f2263373de365edb4032515c6fc9c7021898f5d3c2ebf6708411f0c","ssdeep":"3072:dcX28IBT9YpKWJhMSrcntDN3B2sDzbaBxRRbBaa:bbBqEfuCxNR2svWBxRBBaa","tlshash":"e5a3125adb63065fbc26047085b9f32cc688561a6ed0e9c4d07c19a2fd7d0fc2715b8b","first_seen":"2026-06-05T06:51:05.046417Z","last_seen":"2026-09-09T18:52:02.021423Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1946,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/free-estimate-box-bg.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.405Z","timestamp":1788979877405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/free-estimate-box-bg.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 154038\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":154038,"size_decoded":154324,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x400, components 3","md5":"3b25415ddd3a78872d6229544a106ac4","sha1":"5ef55e7715d644781b78ca5aa2990d063abb9480","sha256":"60298b58daa1f165e90bd56aaa414388d1b553293ae3fcae51613e135d19191d","sha512":"1a80d105fd911b87adf9cc41d19c40a01d67e063ddf9a46aebffbc6dbdbb08977c129ca2eb78e8b08d293a41bbb65b67e3146b45cba558e277f3e326d130ffef","ssdeep":"3072:dnErCVONGAWnnbgXynjsGQFkI6E/Xe+5x3MTiQ3rIxiBm609XRKNhfkbc7:dA5GdmhD1hi30xikzqkby","tlshash":"73e3137e7da2cd08afecde89ca51b70b5b8513e042d70a7d679cd500cf2906882399f8","first_seen":"2026-06-05T06:51:05.098137Z","last_seen":"2026-09-09T18:52:02.022607Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-5.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.986Z","timestamp":1788979876986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-5.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 91178\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":91178,"size_decoded":91463,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"e32545a6200aa9755505584b2ce13b8b","sha1":"7ba811dbce4af10b24ab5e7f28c60ca25dee030c","sha256":"aef51fc5b521c2c359689376033ed749b7bd4fa9465493ab2bf5d791a7b70ecf","sha512":"cf0452e269739197e5f6acdcf8c8a994d05b72b1932c9abee1a287ca585a07e338a81fb93f2bc15b5549abeb6215a376a014abd64c494db16d680bc8c21af521","ssdeep":"1536:DZsRpcRu/11VxtYYUV4XWMYJDRl3erADGANY+MnUCZQgbIKJ+WQOipaF:FXRulgcGp5RlurAGAKnUCZVbIKJ+WQU","tlshash":"3f9302497e59b1b2df74081ad2c8d27e2ff3a38e491b25e4f04cd45af2c11d5d92b0aa","first_seen":"2026-06-05T06:51:05.052329Z","last_seen":"2026-09-09T18:52:02.024865Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1945,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/jquery-ui.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.289Z","timestamp":1788979877289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/jquery-ui.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7925\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37262,"size_decoded":8245,"mime_type":"text/css","magic":"ASCII text, with very long lines (2363), with CRLF line terminators","md5":"02300e7fc98d6aef8672bcbaec1b5b92","sha1":"0c7ce4cd0a828973d95fb93cb08f33787c557917","sha256":"9acf22470b3efa550607c6a05066d75ea4c78c16c21169f18a11af80c80a9b3d","sha512":"f59bc70403619c9b2d21a287ef69e1cdff117fdee05c712ea5b8f8d5a9ddbf2a24d4b95b157a292dbe1e518244a9dc974eefd3387b56a5868cbdf813c59011c7","ssdeep":"768:Y9IVwgYrzZIjnT79V96MBiWAVPQ0l5r/cdH4NvEkTfbv:o/fbv","tlshash":"16f21eb49b43340d7617d350f2f26bf3ce2e1392ee17c96fa09a255992d64a0807f6b0","first_seen":"2023-05-08T01:34:33Z","last_seen":"2026-10-11T18:04:43.744844Z","times_seen":342,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/project-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.299Z","timestamp":1788979877299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/project-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1223\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6865,"size_decoded":1543,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b681bafc9e2c127738168a0b8757449a","sha1":"7d7cfb10492315f2cc9b5a2fd417191f9c22cf3a","sha256":"cdcbbcaf60586363ece62bae15c7a01cbd1cbf40a2f68a57057dea63df8115c6","sha512":"9a64f246457a762b9473545a6072eb6ceb1edfbbbe27fe95fac0bd572ac4042d45d6d11d312daa0bbdc87e75daa86896b8770c8323a9d78edced457c3f212cd0","ssdeep":"192:uuVxfvcmTKdTLZMw8zzTLZLtl07OUlYLE+UliTqyeZJsSuq0:KTdFKTdDaNntun","tlshash":"fee1d058da135100f737c6e54be41e56fa391047ca4320f8b794e2259fb676c81a2eaf","first_seen":"2026-06-05T06:51:04.989057Z","last_seen":"2026-09-09T18:52:02.027794Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.464Z","timestamp":1788979877464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/worksans/v24/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://gnlgroup.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 20:41:08 GMT\r\nexpires: Sat, 04 Sep 2027 20:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:23:20 GMT\r\ncontent-type: font/woff2\r\nage: 425409\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50316,"size_decoded":51129,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50316, version 1.0","md5":"97b33529e13b04b2205144e28a17a1d6","sha1":"9eaf3fe571af16f72a84dbadc1fce0128dff4486","sha256":"1dd49afc07fb2231b2ff686cbf007725fb2742271bb1f28ebd98f22a0d817343","sha512":"ce731a26fac8fd5583137450138d71fc36a9a0c4b79257a5af74be21cc2773b6e3a1ead61055411ec1c2cc857b8b0e6cbc94971f5f0b51820b458d9146af89bf","ssdeep":"768:etWz8e4bJ7xYqUBOYPc1NmWL7TDGrAZrIzcbWomWEjoyW6Md/AE1wBje34U:eZdhUQN5ToAZrIz7uEjR7udw5e34U","tlshash":"a33301e2882ca65cfe1ba7f8c422cc65e3336044f63d461d5766ff6ee470605e83a016","first_seen":"2025-09-12T00:12:40.161531Z","last_seen":"2026-10-11T19:54:08.249768Z","times_seen":25750,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":23,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/bootstrap.min.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.890Z","timestamp":1788979876890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 20694\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":153182,"size_decoded":21015,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-10-11T18:04:43.801747Z","times_seen":4738,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.bootstrap-touchspin.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.923Z","timestamp":1788979876923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.bootstrap-touchspin.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3202\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19540,"size_decoded":3536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (587)","md5":"f7db50d8aa22669b78518dd81a4c031d","sha1":"6dc6fa7afbdc414f66bec16571a8f03ee949b48d","sha256":"2a2ce11b132ac26b3525e6dc64aad585ad802929feaf1c049122aa06c6b0aa95","sha512":"3d0008dd6feecd3781de499dd41fce486ffe7ed41c220a035ce3356ba2ce8e3c8f97958dd7936ef31940628cf220ba64c2a454ed74c21c634074fcb0e6c07f4d","ssdeep":"384:1otTxb2qwGuGsQfUsnWgOy4jD/eanMO0QAsbpdLzoc4Qo6anoeWy:1STkqOGsQfUXnyqD/eanMO0QAsbpdLzO","tlshash":"f392e95936e720b51067b2bd97df4701326788075469eea07dbd06c02fd1dbca3b2aac","first_seen":"2023-03-07T12:42:32Z","last_seen":"2026-10-11T16:10:17.763621Z","times_seen":849,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/project/project-v1-2.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.983Z","timestamp":1788979876983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/project/project-v1-2.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 92535\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92535,"size_decoded":92820,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x335, components 3","md5":"604cb8e06ff365eda4d84e153fcd00be","sha1":"52f9022f5af940364dba63baa9f2d74363b870f2","sha256":"74aa560dbef68850d2f2902d076ae7d653960e85e4841738e666f087f2fe76b8","sha512":"528fb4d977eb24e07f51253342a4d65566264b760ee5c7ec1ce5479d08134ad64f81296ff6e3328a684a663ad17efb94f82aac840ec736379ed506bff4ee6d13","ssdeep":"1536:Dteuvhqn2eEhyfP69oSK3h1pAT8pOBp0rU5zmidvElZIOD1cgy2b3PnDLlyw:zK2/s6shDAT88pBqiIZP2tYfDLUw","tlshash":"829302d3b8352503a8088be43198d65145a37f0df4e75aabaed4e26c35ab1a067ce347","first_seen":"2026-06-05T06:51:05.092301Z","last_seen":"2026-09-09T18:52:02.031088Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1945,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/service-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.297Z","timestamp":1788979877297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/service-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 907\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4462,"size_decoded":1226,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"314809a3b578b5e100238ff862fbf566","sha1":"e45f2a605f41d55a62a8280c185ca20616deeff3","sha256":"cd8900e2ebb68d6405ee50bbce99dadd8296e33975c9f8841deacbffeaa1c21c","sha512":"b58b55fa4ef688535c688c4e1b160e91bb2534bd205563a9c215cc5010591265d5a8427e652b990b75e70db641d75fb2f15abef9fe9a612ab9b2c4040a2ebbf9","ssdeep":"96:v7+QOZlR3QTUu94bgq9gWUlHdSJ+UlFlFkQq8:vNOZlR3QTUu9Ig0gWUlHgJ+UlF8Q9","tlshash":"6691c059e6474202553fdaa05fe63684db2c0083d71310acbbf96132afbabfc4196d5e","first_seen":"2026-06-05T06:51:04.970933Z","last_seen":"2026-09-09T18:52:02.032708Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/responsive.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.910Z","timestamp":1788979876910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3805\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32109,"size_decoded":4125,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8f3433d6b1fcc0006b83b01beac4f96b","sha1":"a505446a81e801c9247482341d2e8b797b8b9b57","sha256":"72ee1020131e9f121880395fb278640c4927f2606cecb8bca7fbc828ec718331","sha512":"12ddc8ee3c5d2d08c68fdd6d602c83b9638a5aade45d76d436cf3a4879dd5d0ed39643a5f41d49f470ca5a3084994fdef912214e7ada4a2b1790b9f4349f77c4","ssdeep":"384:xfeR4PreejX0ufsWMeejlDyucsqiCxkaC1:6","tlshash":"dce20ec1d906100e0275e3b5dbb929a8f65220a7974714f0bcb4a275cfb9b6e4c62ecd","first_seen":"2026-06-05T06:51:05.073074Z","last_seen":"2026-09-09T18:52:02.034319Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/validation.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.937Z","timestamp":1788979876937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/validation.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11747\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36157,"size_decoded":12082,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20948)","md5":"62a2ff47d8ea93f9eb32d18497502d4b","sha1":"35709e0cd4a77507d7d04963b7cc3785a89651f1","sha256":"81317fa1d0f757e2f2264758b9e7cbf11dd33200c5cd983f1e2c138dfe939728","sha512":"1a3e777c3fdac6a13c3fb4e1a37d8e85c924bb301e6f3886bedabd2822ec958fe63234d2aca75768ab7d7676e71df422e22185c7773f90314c48160636448b84","ssdeep":"768:Q+Jx6U2lHUdS2QQ54R7/1Eny+WwhqxVcvgz/PyUEvPe0+vPziVqdPuj4kcOE0mBN:rfdS2QQ54R7/1Eny+vyiYLXEiHziYdPR","tlshash":"51f21a8937c170664fa630f4945f5607a172ad65900ce478b6b8d8e17ef8ec860b7f78","first_seen":"2023-04-09T01:25:20Z","last_seen":"2026-10-11T15:32:48.097366Z","times_seen":1262,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/slick.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.940Z","timestamp":1788979876940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/slick.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14119\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":86934,"size_decoded":14454,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"656b552160c2f9b03ef0b483b26fd8ff","sha1":"60c8fc0721b201a2376b3105f48dd38e4780805b","sha256":"556a5e2ef0fa7f3cf1080bef772f2d6fe55fcd4fcfe2d92cd8079598e246b0e1","sha512":"84daa2cb1053154e4e558ced192b12e2c9719059113692cf36792f3f65d506ff7f2ddd0f3683adf23dfdd9fe4aac4f038a35bfac3ceff298cdbd1025c5260f45","ssdeep":"1536:nOBYMpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6i7:nOBYMpbDRTtwn7158/HVqg8dxMuY+7","tlshash":"eb83028f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2026-06-05T06:51:04.960749Z","last_seen":"2026-09-09T18:52:02.036919Z","times_seen":3,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/jquery.bxslider.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.945Z","timestamp":1788979876945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/jquery.bxslider.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4925\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19359,"size_decoded":5259,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19040)","md5":"697d69a48e5356f7106e38c09f7f19e0","sha1":"b57160771fa597a5b56c5b12756c693e4829be07","sha256":"bb9e7dc822c6b7b95a6329932885c72ff2caf74b243fc1c40aca0e858123b83e","sha512":"898b8be9b092ac7dcd1efe0381db28fb8ed0555419cdaf40bf739edfb7945f8e301a95e6392677b2564b1f5838a560e6f309394cc46b1bd7b570b6f9312b90e1","ssdeep":"192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc","tlshash":"9392541b713436fe46b632b5b299cf487276908ac537f8f861b5d85819e8cc4301badb","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-10-11T17:27:21.197199Z","times_seen":7618,"resource_available":true,"data":null}},"time_used":1994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1968,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/featured-1.jpg","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.971Z","timestamp":1788979876971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/featured-1.jpg HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 03 Aug 2026 09:21:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 140648\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140648,"size_decoded":140934,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 370x400, components 3","md5":"b1b996d0c7c2cf9becb74c977659d989","sha1":"147f9634016818b39c6781c83f7e36a5e717a2b0","sha256":"d167bf3d941b9d381d50ce7cf704504f4a77cb3916601a71a9c745d40344cbd5","sha512":"51c3379069f806b69a107929758a3e195b8283d6444d71f90eb3d2886686454491495becc12b8bd622e7afe9d5a41cfd445c9393ee39363508aa2da016f442fa","ssdeep":"3072:z+8g3br7CnanoQ+qYxWk/x+Kn648GVX5un5CYiARYC:z+86bIaoBqOvrfeCURYC","tlshash":"1cd31202abe2f4c72e5883ca01c2409dbe155bac51bfea2d7f19b0472ed13dd5b6211d","first_seen":"2026-06-05T06:51:05.097113Z","last_seen":"2026-09-09T18:52:02.038601Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1948,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/banner-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.295Z","timestamp":1788979877295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/banner-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1351\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9750,"size_decoded":1671,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"741f8f84c62307294e898119533ab6b6","sha1":"6b408f150077136d5cd509ba0e9667573d81c5de","sha256":"754ce2a3e24c9905cf076122632ff36d992ef1283613e1c2420776b470606b17","sha512":"42e260f34e1f49cfebcf563a41c802b7c2b40379d3b12dacab2969f07a3a76b5a35a08e860d3872350c34d4b1f33e71bbb8e564a1655ea223b3ce2903a7bc009","ssdeep":"192:+p4bPBFnfMGTLZliGwCwswBwKlfgo/TLZo/pxF6JlbMfTLZ8rplClslBlKlIzl+E:XvTdXwCwswBw+fjTd6xF67baTdClCls7","tlshash":"8512b9a90a0010045233875c77e64b48ebbc9043ee1254adb3ca251bdfb779d61a7fbb","first_seen":"2026-06-05T06:51:05.044131Z","last_seen":"2026-09-09T18:52:02.039725Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/tilt.jquery.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.944Z","timestamp":1788979876944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/tilt.jquery.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2727\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11789,"size_decoded":3061,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (320)","md5":"3bb2cb86f33d82a9778dbc59d3783577","sha1":"b26d3761ee9e4b9b24088f8fef1d6638d0f93fc9","sha256":"5416ba46bb8efd4527ceada4cb0dc677c5ab9e750688b2d43a86d4ffb6299216","sha512":"12934cad09d2e061d3d4333a8041b3c1575b841e9cffb51caa22e3fc3b1c6759463493940d38ab91988b0a4b253b1a7dc222a1a855e252c59f0a4bc79d37defb","ssdeep":"192:DqDxmNgkCJrncEHng+TaXESuoz3S4zhfNJUN2RyYtbiOXQKFmDLV///EWL67:2DwK3ZHgo2zlfDUN2RyAbnKL0","tlshash":"66322e4939fa211a44eb736adbcf1144627ad00b1902e57c3d5c47e88fd669842b2ffd","first_seen":"2023-03-11T13:45:51Z","last_seen":"2026-10-11T16:10:17.823035Z","times_seen":625,"resource_available":true,"data":null}},"time_used":1993,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1969,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/js/parallax.min.js","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.947Z","timestamp":1788979876947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/js/parallax.min.js HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Aug 2026 09:22:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5057\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17314,"size_decoded":5391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17272)","md5":"6dbee040c8d4fb731bd44936b2efc99a","sha1":"0a7ac970f67b7fa08738a5be55233e9e741ad267","sha256":"bf4d20b28de8c7f77428b24325ec3afb39b6f7e277f6b61666f3a0a17cc3b42b","sha512":"ffa4d93831a360beccf2a6fb3fa49f94907f9d3184efd79dd517c993775f9bf21be89c024f8fad39faebb1e1078719088701bc8c297e8a8e9e6a258b4bf517d7","ssdeep":"192:d0KW9KgqL4+UaWCjVYTY2tPtt5uM+FjgpfMiXuwv8S/X8/VUVTJTsjNn1SF:mKVWCynJduMpfMAuwESP8/m3Ton1SF","tlshash":"0e7296d97322b421657b622721afc70e713175261980809cf538c8db6eb9d4a736ffb8","first_seen":"2023-03-07T12:10:45Z","last_seen":"2026-10-11T16:20:13.296424Z","times_seen":2306,"resource_available":true,"data":null}},"time_used":1992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1969,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/shape-3.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.969Z","timestamp":1788979876969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/shape-3.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6775\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6775,"size_decoded":7058,"mime_type":"image/png","magic":"PNG image data, 193 x 186, 8-bit/color RGBA, non-interlaced","md5":"0908427f0f51d9512fbbe5c95bac12a3","sha1":"74dd58485c0786e93449ec8305c31ffcbb803f08","sha256":"743bb0a62f7a5669f71616763a40aaeed654d74adf482202692d9173285a92b3","sha512":"a165b2b5a8594a9e45af9c0e0a3933370c66ac47d334b724a005f249014a67cff91d3f659002bf992c107589ef660e9d68da43653c461e9e1b740052dc3b068f","ssdeep":"96:9QxU0lIi/g9eOJdHhqjm5TQVFdwbblL0x82r0MsWI+nISBA6z1r5X4z:qTnMxj6f6F2v77n5q","tlshash":"96e19e0d9a9170c5f6ada60f7ac2e587c6e207c011f1e10d7d9fe01aa9215f88e288db","first_seen":"2023-08-29T11:14:13Z","last_seen":"2026-09-09T18:52:02.042569Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1949,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/resources/material-3.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.979Z","timestamp":1788979876979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/resources/material-3.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47521\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47521,"size_decoded":47805,"mime_type":"image/png","magic":"PNG image data, 170 x 170, 8-bit/color RGB, non-interlaced","md5":"4f06ec96c7f1364907e9e3788c2246b5","sha1":"7c1267259d894b83a1600ec67fc40fe583f9729d","sha256":"98bf675791e9b294611d3d05e0361287e45a381707a11f1394112b3e180f6d89","sha512":"157878277f0926e202c2b02eeec4ec5c0a11506b185fbaf4004aa751a20eca22df0e6e152dfc1371951f7fc952e675668784472ebe7ddc786cf06deadd2c7f5f","ssdeep":"768:LGnznxZtNk9U7WnoNb3tnU93Ccrc9m7rMY9VebQ1MlQRJ0VDbvJpnMztVVrNte80:Lo3W03tU93EmUmMQ16kqDLJpnMztIl/d","tlshash":"e323025afbb46d4907f26ef9186e11325ec35d901e081b4290e865afec2a23d1cf735c","first_seen":"2026-06-05T06:51:04.977877Z","last_seen":"2026-09-09T18:52:02.043604Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1959,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1944,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/module-css/about-section.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:17.294Z","timestamp":1788979877294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/module-css/about-section.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 968\r\ndate: Wed, 09 Sep 2026 18:51:17 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6776,"size_decoded":1287,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0dc2bdc346cf912e168077e26f2947d2","sha1":"9a93fc39445904d2a241673d043d44d266e3d112","sha256":"88c755a1abb65bb4c18b2c1f09726c31de4ff5f3017d987bc4df2c8e2a4c91d3","sha512":"cf92c68f7af47f6da21a9dee72c979df88bbdb9b79592ea91d533fed79e53c1734045af175740ee850d21e3d424dd0fe03bce5cb67540bdebdd783ee813d0918","ssdeep":"96:jspNIaWwHmxP82AKfavD1+faowBWpRc7asDBDfu7E8fDfdpq:jmCaWwHmxbwvD1boaWpm7tDfuQ8Dvq","tlshash":"31e17a9cc1521405a377dbe46b9533c2de140093dfc2019afba292288ffa76d8657f9e","first_seen":"2026-06-05T06:51:05.039068Z","last_seen":"2026-09-09T18:52:02.045064Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/css/color/theme-color.css","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.906Z","timestamp":1788979876906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/css/color/theme-color.css HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 09:21:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1213\r\ndate: Wed, 09 Sep 2026 18:51:16 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5518,"size_decoded":1533,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2c81d05ffd2801de900b14fd68687ee3","sha1":"79a02526c1667ccd27aab59fd6989f090ec295b0","sha256":"dfee745993d6f2b02bc05de15d3dae84e6c18b1c94c3dfa2e40a4cde02b21f0d","sha512":"3946c2282bed727558fc571bd6a63fc3a7b81972335ddcb250b15f65f88918c3a6a047c24c54442fae417348ed6383bb87d6bf1dfd7e9c90d6edf63f1e1cbbde","ssdeep":"48:Q4NmpSw2apL3yLv+ZJO8UYAssrBtqgAPEgAPAJc5obHH1R91BRrSI1G1R91BRC1A:AL3yLv+dSqgAPEgAPAJcA6KV5Pu","tlshash":"5cb1fb98f38b14543336c275228d7964bbdba290db8212ddf4b74422d42af9c53e3a2d","first_seen":"2026-06-05T06:51:04.958141Z","last_seen":"2026-09-09T18:52:02.046004Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/icon/trak.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.981Z","timestamp":1788979876981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/icon/trak.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:21:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2587\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2587,"size_decoded":2870,"mime_type":"image/png","magic":"PNG image data, 111 x 76, 8-bit/color RGBA, non-interlaced","md5":"9fa6b8452e05b80a35b2e4c75b55e0a0","sha1":"94b4e3b7fa9ab892ed88059b2431f534f96e4711","sha256":"853ee8915a213cf99727eb3aa7f322850519e7762152962aa571439920514c7b","sha512":"2e9b1ae1cd4492da2db25050913e2dc36a6231497a1abd7a5bc8c56440c702b8d47a769ae1ab387537c64691d3201d3f7d13c093ad74e39faa778d98ca4d86c4","ssdeep":"","tlshash":"69513d0bf9515c02a685945a39f980bbc3369280464c95bd2adfc51f4ca40a1dfac0ca","first_seen":"2026-06-05T06:51:05.063324Z","last_seen":"2026-09-09T18:52:02.046987Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1957,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1943,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gnlgroup.net/assets/images/shape/shape-2.png","fqdn":"gnlgroup.net","domain":"gnlgroup.net","tld":"net"},"ip":{"addr":"192.250.229.33","port":443,"asn":209341,"as":"WHG Hosting Services Ltd","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gnlgroup.net/","date":"2026-09-09T18:51:16.965Z","timestamp":1788979876965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.gnlgroup.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 08:42:47 GMT","end":"Wed, 02 Dec 2026 08:42:46 GMT"},"fingerprint":{"sha1":"87:DE:C3:E0:22:98:E4:5B:C0:92:85:EC:D6:95:80:F9:A5:21:5C:39","sha256":"EA:DF:A4:DF:83:72:88:3E:22:C8:7F:DC:7E:03:B5:C2:9E:17:B0:6C:24:49:71:2E:9D:5B:ED:B1:F4:BA:83:8B"}}},"request":{"raw":"GET /assets/images/shape/shape-2.png HTTP/1.1\r\nHost: gnlgroup.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://gnlgroup.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 16 Sep 2026 18:51:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 09:22:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7264\r\ndate: Wed, 09 Sep 2026 18:51:18 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7264,"size_decoded":7547,"mime_type":"image/png","magic":"PNG image data, 292 x 673, 8-bit/color RGBA, non-interlaced","md5":"82c5e225c617712e0f90891234bfe558","sha1":"35511494630079a1f9ec0781ef70afa5288579b0","sha256":"6b13f5f588154a39e315aa544db4691fc2631d7a87a15339f43efdf26943b93d","sha512":"c18fe45944586d25497b189ec15ea29966adb1f8ddffaceb922eba77c32fd960f35237066a14d74d8e062f27f573f7298846ef3e3fb23ed4402e5bb9320655d9","ssdeep":"192:5VNB44WtboV/Amkrxwp0NyIkAKdp6rlIV6lKeAKi:57K48bXFqp0gtp6RIVIKe8","tlshash":"4de17e4ef1adac6341c838ad57e788a0cd97ce08685897e4954f4d8f4b7629c1c847fe","first_seen":"2026-06-05T06:51:05.095861Z","last_seen":"2026-09-09T18:52:02.064037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1953,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"gnlgroup.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"gnlgroup.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}