{"report_id":"af93ac16-2093-4a41-ac2e-9e283a234c28","version":6,"status":"done","tags":[],"date":"2025-10-19T21:22:18Z","url":{"schema":"http","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"title":"A Minimalist Approach to Maximum Impact"},"submit":{"url":{"schema":"http","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":0,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-23T21:22:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.gfpxw.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2022-03-02","domain_rank":1407520,"first_seen":"2025-07-26T12:08:46.01149Z","last_seen":"2025-10-16T23:36:14.183319Z","alert_count":43,"request_count":43,"received_data":329075,"sent_data":17290,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Astro:5.1.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-13T00:46:10.295271Z","alert_count":0,"request_count":1,"received_data":832,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"datatechonert.com","ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-12-24","domain_rank":17968,"first_seen":"2021-12-24T16:44:17Z","last_seen":"2025-10-14T14:31:32.897495Z","alert_count":0,"request_count":1,"received_data":482,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdntechone.com","ip":{"addr":"172.67.195.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-24","domain_rank":31929,"first_seen":"2021-12-24T17:09:58Z","last_seen":"2025-10-13T05:17:05.300369Z","alert_count":1,"request_count":1,"received_data":17280,"sent_data":378,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fbb7dbae3c20bc81da1b8bf41c13e8e","sha1":"f333d36b1dbecd026483e78eac843bdeb2dde04c","sha256":"eeeffffc79c48f4fbe510fc3fcdae29885a18a48ae121968e03fe502fb48fecc","sha512":"1e82716fa5da363b595ffc7b569caaa347df281bc89fb9d62dd89d2dec789280d9574694f6f78d250922e8d0d3bdc8a637f5748d7c4f4e5cb4e5465106542e0c","ssdeep":"","tlshash":"9ff0998af3c8b623410666e5321b801be67e1851b407a864a0a088e2ac7a449c189f3a","size":636,"data":"","first_seen":"2025-03-04T04:04:04.143618Z","last_seen":"2026-04-03T23:33:08.062402Z","times_seen":3284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce03804912131bf8f1f46800b8175073","sha1":"c0ab40962ee33bd97965484c96aef2c8a6cd3c3f","sha256":"41c1e9527f81ba92d9c9e3fa04c5cef458c3dcc4057f4a043950f1eadb5711e9","sha512":"7656dee7751c4bfde93814484e52d6fd75887cbae0369fec55d3ff183745c3019cd7c43a9cecaf2833cc839982c8831c0a8bd363131d9a8dcc063042a365e5c0","ssdeep":"","tlshash":"18319813b2e62a58fc74fd6519bdee5c515e0e9d74a4908f82db3d4d170298850b40a8","size":1585,"data":"","first_seen":"2025-10-17T23:11:31.424155Z","last_seen":"2025-10-19T21:22:23.12053Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/v00203ece-BVIkmwtf.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3ebb9a5509604d424831a2e105948cf8","sha1":"9e8effa7a2379d91736f08702dad07f6843ffe69","sha256":"84a446c36a7d96d945cbdd40e3a51ae38dfb511a2efe81bd4ce2dc0f602ff3b7","sha512":"643f10d54da6a5d436987348da63e64ad70e972fcb086eb57e23790fe4ffc88b5a0566dcaa5f19c8995a50406b117b1dba31476a48145d6f7677b1fd7b612808","ssdeep":"768:jaQWB93EFyzwaz4+BlYXed2vhfZk8eA02rtWPUfh0UpkEugFn1cL9g7AM8wC+KbX:+QWqyMaz4+rvO01gpkgFnKL9D+/s","tlshash":"906328a47466b03d47eb70b6903f1a0ab33a000691ae475ce712caf52ba4d1d722ff5d","size":67620,"data":"","first_seen":"2025-10-17T18:01:46.219968Z","last_seen":"2025-10-20T05:06:52.07541Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d566ab353-BGMreeeV.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","size":1135,"data":"","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4c1af0f7b285642bb8af9be1358ccdf","sha1":"99684de7c628cfb3226e2859359829cd59044f4f","sha256":"1232c8f0c830c49e369ad8e76abf02d09bf431195fc82201480edc1515c217db","sha512":"b474f80e218865474416415cc857664a6f1e0934a4aa82ab217111f4baba262f92b0b9b69c5e5eeff8677b28bed39967e8752d16310a6b2d3bb60bd431603fcf","ssdeep":"192:8r3c1SyRoFCbsFOEzBr4WuVuYoe21WUfcdova4EUAMRjlehEeVGcnW/RGGb5ao8o:8XCbPm0WuVuYoe21Wucdova4+MRj8hDY","tlshash":"d922d6463ee7f2412e2467b1c07b9111b3f25952316ab192b91b7522786108fc3f3fba","size":10465,"data":"","first_seen":"2025-07-24T08:17:40.839961Z","last_seen":"2025-12-09T05:17:14.075084Z","times_seen":1721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/w5c408f-xWNJfbcP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"92461e3d46fbd7fe2155debe3de17eb2","sha1":"d000685bed4d78071269ce8cd56b7d40a3421dd7","sha256":"b1ccef133f927d37762b460c4a6d32ccf6a2225b06869b89d23538f6dca62ec1","sha512":"f9e8aac7b2b3e3c8ac3e69d1fd234e4e004a6e6a18b3019d94d7c57caeb1384f910c929bd2f59e695715662cb8c71a864f1c065f6d49bd83ba799f6454062c48","ssdeep":"","tlshash":"fd11568fd4f45259c21f29dfe222915674d84473338cd7c1a1bc07741b91acaea1af47","size":897,"data":"","first_seen":"2025-10-17T18:01:45.965189Z","last_seen":"2025-10-20T05:06:52.027679Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/r3f581e-D8GqWNY3.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7883ce2f8b75b3ed56cc7610fe6d2823","sha1":"484b55126c14593c9504de219cfcc83c9ca22ef7","sha256":"f88a1b5bb41bddf583d1caffccae46fc99b7f49ea63f2d561daffb79d601ae1d","sha512":"4ed422d9abce0341ccd9e2f5ed718d781503328d2565c3d1eae26c4418b6f5123855fead5b2983d5f1e1166bf8395c52afb4b0f26593b630a4a56e1ba5dd666a","ssdeep":"","tlshash":"9701159fd5d0521cc20baaedd9b662a3379005625bcd0f80f17c453a27a25c6680eb17","size":738,"data":"","first_seen":"2025-10-17T18:01:46.052466Z","last_seen":"2025-10-20T05:06:52.043775Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/x18103c-DpDBI-SP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2165e565586b7b5349eb8a8a7b02bb98","sha1":"040a52381d38e8830ede9058bb885d775f259d35","sha256":"3def0e553085386f6ac3f9e272e87258108e2f026e6a8b736e99a30014045902","sha512":"e983ae3542e47a594e2c3e55555e75a45f54db644d36f837f33e6db3caede04c49eb0c757dd2ed743e024721d0ab90143eab6667f81fe377303f738714913f66","ssdeep":"","tlshash":"d14193ac41e4c4b4d1a44bec82b2ea33394d4633305ecfc4a12e9a3557bdd86d050b32","size":2118,"data":"","first_seen":"2025-10-17T18:01:46.186443Z","last_seen":"2025-10-20T05:06:52.152669Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c2875f1a9aa4e7aea000433b300f345","sha1":"19ada7d0dfde6c8f5e91f79429fedb4c7c2c07e8","sha256":"faff5a60a2c4aa315bd6d15ef5da1b81098a7b034d3a76acb8fcfffdce74153f","sha512":"8a3b447e6a31f96074144e2ad123595f40ecfeea5083cf8e1aa1d69724b490d55d505fef1cd8c27c4ac1bd097cc3e099d385f1de371e91a6a30f31d54b7a25d9","ssdeep":"","tlshash":"aa6000302f8030b280002002002a0022000a8080038000820080028a00228020820282","size":17,"data":"","first_seen":"2024-12-03T18:23:39.020248Z","last_seen":"2026-04-03T22:33:21.286728Z","times_seen":4949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e16a3ebb-C5FXMIao.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a451845bfa5359369ba42baa87ba6101","sha1":"fb2c0751842a5d1d60e5c1cb4b3074c685807323","sha256":"b34eaca63f8fe5f5c89f0372405cdfeb7d3c37dc47db2be6e5216335be0e6116","sha512":"6e4a4844cda9c63b33672fa4cb7d1178abb185b9d049d267b61b80c3c575bfa50035a9b6f792685824423e2303439fe96acd9b815bce7e2d4e5192f4f308ea1d","ssdeep":"","tlshash":"2d61a50d419c14b950cc8aeb9d720e0ebbbab416698c3899fc2b4cdc074ed8dc20a97d","size":3172,"data":"","first_seen":"2025-10-17T18:01:46.077582Z","last_seen":"2025-10-20T05:06:52.017607Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/af31acb-B3ZxXc0s.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"039953a2f04ada1455a9c0af50054ec0","sha1":"1e36160ef23bdfa31e0d91167bbeb75f97e72b00","sha256":"1f3bed6505da3bd622282b91f32abba342b3e8dee7398dae4b095c4b55a760b5","sha512":"aa15d5c73590d3a3ca8e23c5a8d9229fab2d58c4603f3cf629a7d9f5643aa8fd16941b194648cd261e71624da886931429a89ba6009726d8adef24038b9b6792","ssdeep":"","tlshash":"1cf09e8ea9f48b4dc156236fd61be541b09a11235b8d4f26a1bc0b3937629f85904fc7","size":523,"data":"","first_seen":"2025-10-17T18:01:46.108118Z","last_seen":"2025-10-20T05:06:52.087374Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/l0127002-CaIafYaH.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e94e9b448e5bf3d8e391ca60c08ccf9","sha1":"c610f50988365258892c7707ff4a4ac12ff9a3f5","sha256":"2c1ba183b0bdcffd5da07e64d276f17d250f0394564b239f41584cdc139fa47e","sha512":"9de97665f58435198133c4f41109fff72b28400a5ac9fc4b4531efd2c8270868f07ae843cec8ad77fc9d8407f7a2c95b17868f004d280b7d0ccac49f89d00026","ssdeep":"","tlshash":"67f0ac8a59f83549810e27ffd25674107265015b1bcccb12e0bd07b427719eeed04b83","size":618,"data":"","first_seen":"2025-10-17T23:11:31.289008Z","last_seen":"2025-10-19T21:22:23.117729Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/ae79f3a6-CaDCjwJX.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c077d474aa99a9d68a4fcf6cc9ced47a","sha1":"797cacc388e451e6ddf15fd24df3e58069fd8f3e","sha256":"ac6bb9c2735c4cf4a01c1329762aea1a0c89a62a67513fa2f9361f117e06c3f3","sha512":"b5cf0017e4c7f515cf65341eea96d8707eb43ba720ece3b5187ab3e721b1275a93f93c17f96ec9eb86ec837775bbd5277075e0fb99d3c38ab6eea86a21642e41","ssdeep":"","tlshash":"7e1110c602f25634c355025ef175d3c5b6880267364e9bd0e1bc0e7ea716ec9ca01f4b","size":937,"data":"","first_seen":"2025-10-17T22:34:55.806632Z","last_seen":"2025-10-20T05:06:52.14616Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/a3a43bdc-BWjXao3I.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"497835f5d59c8383b71b888bd33d68cb","sha1":"92afd71d3a091c3afc5218bf8e6d06b2cc75f864","sha256":"bbead45c6a688ffdfc1ae77efbfd14a4ebe946eee8b51815c2e11bcf1f6f303f","sha512":"111ab21df6ad7bad39efbd7c748c5e1420787b3c39196519e95f506e930c70c178263c3113c570ae31b91c94709a8640a6cf3e087a37dc9767f34fff35eddcb5","ssdeep":"96:52y8mLYz6zuxzvPdBb9QMNaAwNS1egxy/6gV+72:kYLYGSzv1B5g+soy6ym2","tlshash":"2291248fb87920fc7a97c6d96133e1e31a3725092989c1b4a5d74f3817a1285a33bb47","size":4310,"data":"","first_seen":"2025-10-17T18:01:46.119382Z","last_seen":"2025-10-20T05:06:52.033603Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d6d7931de-Tb6QoOKe.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0fc360064b0df9d91e99fde418b5a6d1","sha1":"b6457dab5ac3932ea23d11cb0041368f62f8b923","sha256":"befc04e094c70f9a79987c694a708aee2da951d2b348e88b96f629c2cfd91754","sha512":"4cc6929f2fed588b329fd33f3507190f39579b187efe10b14ba7dca437219bb4366ae956cf40adf9b77c7ca1600e0a587d4463f4e3762c902af29e1d08bd880f","ssdeep":"768:wkVayqw16WbqqHeBSihAhM2VBInlkLbNDw+fPATx+E6XFyfjuLUJZA9C1Zh9z3AS:LVGw11zhzATx+EHuSZrOtVRfPwTYbk","tlshash":"dc434f9ed2529fe988b31798b95c2a11b22d0d0ded4981b0ecdf0f16176ec87213b79d","size":59020,"data":"","first_seen":"2025-10-17T18:01:46.144636Z","last_seen":"2025-10-20T05:06:52.072813Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"172.67.195.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","size":16490,"data":"","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T23:33:08.019721Z","times_seen":9006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e20decf58474a6cd3690fae9c45185e3","sha1":"d2a66f3016f39218a64a455d438c24a8cf3bb466","sha256":"acaa555519d15405628ae9f245e8da05df641ae4b04713e44cf459e6e1fb4386","sha512":"6101aa090cf800a259b4a9b8b786e1784d9e619fe59399e3b2015fcda343bf10ee4c1a6c807f2d020908e2ebbabccd79c30dc356e8be720b9dc55e9d704756c3","ssdeep":"384:8virqET5iZIz3+NeBfcgF5zedaLpz8jEq+WhuQ/xPlzXtJzPpMCQa2NiXrkhyb+6:8virqET5x+NeBfcgF5qOpzMEVWhukFXX","tlshash":"86820fd6afb2b5402a4ce742e27786357a603802f399722dd51e6590e0c0cfe97b7573","size":19040,"data":"","first_seen":"2025-10-14T14:31:35.642793Z","last_seen":"2025-11-05T10:41:59.512958Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/u1f96f4-BYjjns2s.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43fa565b1e64122699103fa6a5723994","sha1":"cdbea9b78d999d413a7ff9d78968b2a87cbcc74f","sha256":"01ea28c045fd544a81933d618c8d55cfe78b8753e25114184797219bd4a2a7cd","sha512":"7f9a790c92adbc6cd705c7e56326f3f81e9fed63e73e8fb5a78c64bd7e290e92671ef5bc7b682bedad7a4d85294e7eb77e1f3e0dd1c5c2eeb054d1e5e93cc2e9","ssdeep":"","tlshash":"d271c7cdc8d9c434528f36db1029126077be8e1b752c83c590ad4f398b6de49d485f6b","size":3705,"data":"","first_seen":"2025-10-17T18:01:46.214859Z","last_seen":"2025-10-20T05:06:52.038511Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/bb23a55b-GcutwLC4.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"72f01c27ae270d203dad04d692748ca1","sha1":"8cfd8d10bc137accb99629c19061f4df0eeb50e8","sha256":"8470f61bb23538601f21c804bfb0196446b2f794f1f089df54c14af369297916","sha512":"59adf1584a27dc40d5d60c5a2adcf047f4cb1cdec1ea488527b3b18b5a47e47f4a383f2943d913284531a755c05db1b3ecdbe98f8750c76e9138eddf3dbe906c","ssdeep":"","tlshash":"39414403b176c1b1a15578cbcb61324ef6b087673ae8d5b4ec395d2093ca58b4b2e729","size":2404,"data":"","first_seen":"2025-10-17T18:01:46.058004Z","last_seen":"2025-10-20T05:06:52.029995Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/j4aacd800c-Dec1CAdH.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"5994f133ac9ae3cc0bd1b6a18f0f8739","sha1":"3f82481475719d5404083af2f6450ecedb4cb158","sha256":"cd5866ae561aa1a1dc2c77ea361c230dc8fada8464ba718fc5b292c6d9b3d449","sha512":"97e6919f5ea2775e4755f94e6e71f1452a5e8fe258e56140ba1e546fb539475f8784ea3e74e538630cc4249a652add762c0aba7c4fec7826215ab43a096cb56e","ssdeep":"","tlshash":"233179e848e98d34b2cd59d4763f0a9123f9260738a84f52e17f4aa1165cdce822773a","size":1876,"data":"","first_seen":"2025-10-17T18:01:46.204558Z","last_seen":"2025-10-20T05:06:52.136631Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/c12aa9c-AEUZ2NAz.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7a00d2c8a8287e7d9870568845ab2a65","sha1":"744355356cd68431d351633c443204908e664f9f","sha256":"dcb7a1342c317311466c57b77cce20bd24f47bb4633eacd43b70558326439222","sha512":"daf916b72d549893c48fce1e52c31f64fd1a4f378ee94316e09707e94e44b1f3671af1a5097e78d3a02ce9c0cd49ddcefc704f555f65dd210d2c93fc2874d19b","ssdeep":"","tlshash":"0751108fd42610594f94cfb8bc7926673bd6c22a3d87894823c4a43c41e4bd6227f7a5","size":3088,"data":"","first_seen":"2025-10-17T18:01:46.071942Z","last_seen":"2025-10-20T05:06:52.052778Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"44646c74c0f3cc6057b374b25f9174c4","sha1":"23030f0c8e03e8415d14ae3cf5140fe73afc3b82","sha256":"58dd21a9e9358c46ae8658565555de40f6b9043ddfd2bb0c766c1266dc350b2b","sha512":"1cb30f6404970f58e51b2a0262651b62921bd7aef22003b0ccc7103b2aa463f34668caa59f2b98b616eb9af809083a4e46e3eb80a4e1892d51c1bfd714f34240","ssdeep":"","tlshash":"6971a67813511bb23ddd90a9dd286ec3dd95243485da887e744e5cf30618d4381befb9","size":3593,"data":"","first_seen":"2024-10-28T11:36:57.127078Z","last_seen":"2026-04-03T13:36:12.693243Z","times_seen":5955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e0145479d-uKiSnrbr.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","size":421,"data":"","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/b3e49787-BXK-iPRg.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c7dacc5be9d3a45e5b60869a115ed3c7","sha1":"63fd1a112b7892a4d8e29cb9047200097e5fa321","sha256":"101bde52a5193e596e64d724bf68781880ab307b8b95be15ebe703a8f59eab43","sha512":"415678ebf9236d3ddee57e5d80bb8c3dfdb84da00ec82efa9ab0bc3b1095a715d37cac03e048112ebc05ae53bbe23e6f08f73b8bdf466f0a71033a3fb1e5bbfe","ssdeep":"96:j4pc/RatOb/QIlnLp7hffez9YTGDQjzHQjPki8QjIIuzxJz6M9NzMmgUV+sszbCh:jWc/XDPnPfez9YaYg8FIuz/6M9FMmgUx","tlshash":"a2b193c4e0a9dabd0dff9fda2490c16233144e073c8fd934b2654c1a27b9c0661ab747","size":5344,"data":"","first_seen":"2025-10-17T18:01:46.286328Z","last_seen":"2025-10-20T05:06:52.121165Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d6b88941c-CMLDKLgP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"232d79287f9afeedc617ab60dbb5c63e","sha1":"04167b6775e38f43dce9b0e04b0feb28ba8f1f70","sha256":"2e40f0c513a14b07d304afd9b785f4394e4fd1b0ef604366a090dbb49c50f9e5","sha512":"52b8403080bfa1625fbeeb0390392b00f3f7f848419d163155add0090f32f7cf5fbda832739f95c7e437b63047971ca857f5cb4a21efbc73f6864f41bcfd62e1","ssdeep":"","tlshash":"16f054892ff45a94c24e36ccc279a9012598416756cddb5191790b342b5baeebc14313","size":467,"data":"","first_seen":"2025-10-17T18:01:46.074808Z","last_seen":"2025-10-20T05:06:52.123714Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d999c1d4-GBueL4Ce.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"548b6a58930f634987559a24a333cc62","sha1":"18ede933a64a391c952b649a6d943f132134f326","sha256":"2302f773ab90c2c8c159c50c2ed271aff1f603182cc832333fde27ddd6438db2","sha512":"49ab4b0de9dbd70cd38d6bb4e1b5f527e7e273530b5a83b37634887024495e7b5602e732159b34054315b83b5003f9dbd930a7a1234b754bf3b924ad88ceab66","ssdeep":"","tlshash":"5a211ec2b6b7a07c03b652ace0367242f554892653ccc7d0a1bb027a2ed4e9f9c3061f","size":1354,"data":"","first_seen":"2025-10-17T18:01:45.990886Z","last_seen":"2025-10-20T05:06:52.155351Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/k5d2957c5-COJk4w3f.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bbc2ee6545dca95c19df7ff556f3504c","sha1":"2fc482ffff5ba316af5bfbccd6e1d397ffde8ea5","sha256":"01db311e451de5a48633eee2f3b5267bc36421613fa900ee0e81c00615c613a6","sha512":"9614b095d196278de7c57cc81c7a38570b6cbacf13857061797f479be039cf396e94b54cea75950157827940a6f46d9e21baacef47ebc860ae4c9ca255a0c217","ssdeep":"","tlshash":"8501234918f526d4840a63efc15aa16631580027334c8b4a917c0b791761ee9be13f8b","size":661,"data":"","first_seen":"2025-10-17T18:01:46.17811Z","last_seen":"2025-10-20T05:06:52.128277Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/k36adc812-DbHCy87T.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"66fda451bb9492495a0cac999ed72054","sha1":"9838b21be000edbcd482d05367ea7b0087d1c0c5","sha256":"8f1faa4ed404c25fa1a97b418d67cd4e87c4d15812018e180f163d42bff6f37f","sha512":"408b432d99533e7f8006d97b02eeda2d9f154dc5c0c7e652cf9927348b353a0309d447017db81d38dbee5fd4af95be374c6d3ae6da282b494ef49de3a036296b","ssdeep":"","tlshash":"9911350dba646c29002d05ddc194a9214245976f2bd88be2e0be957d3f39ec97c12b17","size":1066,"data":"","first_seen":"2025-10-17T18:01:45.986483Z","last_seen":"2025-10-20T05:06:52.15007Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/m5dfd0b75-B3m2amsa.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e5cbc7e65baeec0577b72ac5e50d966","sha1":"c0e20344f354fe8c40c25d0561cb25bdd740f5d0","sha256":"5bd0b669168da266d9acc300b75a4f222f4540d58ae4d77bdb9d1936dc44089a","sha512":"e67881bb5d34e427c32fd4cf6552e12840eec7fc1910afbe437f761a4adf9cdc1cee04935d5eab3eaea7682d9c6832dd38220bdf8d65ae82175b339204b9cf8c","ssdeep":"","tlshash":"0651735ba0b450bcf50fcefee06ae136132319534a8c9761818e4b3473a1798b166bcb","size":2866,"data":"","first_seen":"2025-10-17T23:11:31.33295Z","last_seen":"2025-10-20T05:06:52.083047Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c2875f1a9aa4e7aea000433b300f345","sha1":"19ada7d0dfde6c8f5e91f79429fedb4c7c2c07e8","sha256":"faff5a60a2c4aa315bd6d15ef5da1b81098a7b034d3a76acb8fcfffdce74153f","sha512":"8a3b447e6a31f96074144e2ad123595f40ecfeea5083cf8e1aa1d69724b490d55d505fef1cd8c27c4ac1bd097cc3e099d385f1de371e91a6a30f31d54b7a25d9","ssdeep":"","tlshash":"aa6000302f8030b280002002002a0022000a8080038000820080028a00228020820282","size":17,"data":"","first_seen":"2024-12-03T18:23:39.020248Z","last_seen":"2026-04-03T22:33:21.286728Z","times_seen":4949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/b3a41c97-DljtMbit.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd720ffb905ee3c3b258e0828f4d05bf","sha1":"ce66bf47a9510cd7bcf0bce90f2489086f07cc4d","sha256":"2f61d3d0b626e1cd40e225acc656ff8f5aaaecec96ed1671c8e5f195e88342f8","sha512":"b4df8f2e8bcc0b4ae5bc5325fbc07bad648062fa9b8453f15e677d33533456ed4873036b760f6a11238f217254bb3caddc571056715805e616e623d156c8296b","ssdeep":"","tlshash":"4e3144cf55b046fcc46ec5e6e35ef63033590687a28c570195af09702772d86d62ab47","size":1716,"data":"","first_seen":"2025-10-17T18:38:01.122503Z","last_seen":"2025-10-20T05:06:52.089708Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/m8c02c376f-CQLf56TK.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd1335b6d3deb6d9dc4a4a5590718ee7","sha1":"8db72268bcd999f52778b09d8156cda5994792e2","sha256":"67b7ca76a663dabd5f8c2bb43ecbf40b298845676038e63fdf666565bc3411c4","sha512":"0a491eaf6deaf485c99b2fddcb16b8fe016e20971b4ae878d4e1525b1ab817946f81a2e033e57f690ac6d8f7182c2f06815ff08d6319f2745adaa470ab367240","ssdeep":"96:Y/cs3BbFOc4EJq3fX0iMK7Vbf1BBp4ViIEtWvY0DIZat/UshBrBB/bmb:Yj3rOZqKMK7VhBYiIE0w08ZaZUAtB/bk","tlshash":"9281d7dea034117da9de8add8032e631336526d53088e2d0f05e0e3543bad87a69ef4b","size":4129,"data":"","first_seen":"2025-10-17T18:38:00.983378Z","last_seen":"2025-10-20T05:06:52.0104Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-04-04T00:08:09.781138Z","times_seen":6603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d5d9abf41e-D2rjj_wP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"d7f9ccad4f01a978ccec6eda9e245f3b","sha1":"645c110f775ec28460da1c158f18ee4d591f8803","sha256":"45560a0db4bc9b35bc529878ab519fe4238cc4c91346752d6967c3770c6ab69e","sha512":"27e9e92aa73bd8916691323045d0a37f9f24cf02082819842aa0409f0ef5252f1b3c0e46d648db21903ce7b490d656cc77e3864034ba8a51d35fca6385bc9632","ssdeep":"","tlshash":"ce61136967fa3b6f4ca92b7a524dc10f162d1c0bb489c6346d97cb2cfd9059c38b0b51","size":3234,"data":"","first_seen":"2025-10-17T18:01:46.278924Z","last_seen":"2025-10-20T05:06:52.133558Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/adec3aa-Bz6SlTch.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d399bcf3cec66b1e55538b478debed29","sha1":"e2575e8187b6e031f6a8c48632f8cff1da82b159","sha256":"cb37a42eb2c8d1512f1021666c35157fa3626f7d3be0cdae4eadeaffe01caad0","sha512":"66c5edbd5bc153f9c760743378c4fc03abae153ed3171a23b464ad41a08c1c97495b43848a2117cc5f46489410ecce16d9508763fc77c8862014e0f46685dcee","ssdeep":"","tlshash":"1941946571252b7cf00e499ff66c828bf0267b86da0ece50f0bc981a2749485bb46f80","size":2177,"data":"","first_seen":"2025-10-17T22:34:55.995068Z","last_seen":"2025-10-20T05:06:52.092105Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/a50c404-BuuUm2pe.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20cc966b52da81dbb43b69b95ba33fb4","sha1":"2106acf4dd43c373a2b9ffcabbd333f2d00ebd19","sha256":"8cb4091fb1a132fd92b004de9dee4925ce60a15b6036bfe4c761e502c20dac7b","sha512":"df33d0e062bee1de5d3dd2c8c50f8734f66dfd37f46c2d810ae879db5c3924adead24572af7fbcf0b482d9cc68eb94c2695caf5972eb93ef04ca8ecfbab4b9db","ssdeep":"","tlshash":"0f51b5be8599a4390a4c75dfd132c2666e5828523c1dcad1a47c8d2d73d7084f13ef67","size":2716,"data":"","first_seen":"2025-10-17T18:01:46.039034Z","last_seen":"2025-10-20T05:06:52.025248Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/w0ab9284-BNb2k5sa.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96d851fa9d5981f5a22d7fc1711842aa","sha1":"fe3d6b6cd011f6b6be10ddb541317c372037396a","sha256":"78e3e5e2aa20e1d3508e024930ae6eb0a13303d115c1134cd0ed1c2bb47a42ee","sha512":"61fa871aeae05575743eecc52c702ba9476b1bb74b81d238c019430b7475950aba046c7c498213cfe99b00db1c6796cd845b1547bfdcf1a7905ce8dff0cb2fd9","ssdeep":"192:vU35tPJiYFp1xUdbMurvuVawYocDYXJkT/FEqABb0jbVwbqhNegGbI:vU35tPsYFp1xUdzuVsocDYXJEE5J0fDZ","tlshash":"c902298870da1c7cd5db8cf9a460c065b23f0a58b98fd6c0c3ae5ca84255c4061bbf8f","size":8564,"data":"","first_seen":"2025-10-17T18:01:46.246824Z","last_seen":"2025-10-20T05:06:52.158248Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6c2875f1a9aa4e7aea000433b300f345","sha1":"19ada7d0dfde6c8f5e91f79429fedb4c7c2c07e8","sha256":"faff5a60a2c4aa315bd6d15ef5da1b81098a7b034d3a76acb8fcfffdce74153f","sha512":"8a3b447e6a31f96074144e2ad123595f40ecfeea5083cf8e1aa1d69724b490d55d505fef1cd8c27c4ac1bd097cc3e099d385f1de371e91a6a30f31d54b7a25d9","ssdeep":"","tlshash":"aa6000302f8030b280002002002a0022000a8080038000820080028a00228020820282","size":17,"data":"","first_seen":"2024-12-03T18:23:39.020248Z","last_seen":"2026-04-03T22:33:21.286728Z","times_seen":4949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e797554e-C4HViEn9.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4e37a4388fa3da8c178f3e8aa2dca748","sha1":"f60659112d0ae11ae3beb8d847fed41bff55f3e1","sha256":"23bd1910c44f445be89dc5a4c322f38b2c14b93138827de149872e532c5a1fad","sha512":"bdf7f98f80808fe11b1f9efb53f5758d2cf4eccda02fa43b61005adb5d57068b1a4ce13067d2cd54ffea1904e71cdd2faff21c7cc036699c9e3d039dd935309b","ssdeep":"","tlshash":"5af078e41bf02974805f834ed279f2c17a6800a3228e1f90b23c4f6c2346d87ab50e8b","size":634,"data":"","first_seen":"2025-10-17T18:38:01.114941Z","last_seen":"2025-10-20T05:06:52.014868Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d958efaa80-nG9WJJIZ.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c7fff9e6c9738644d323b769749e1ce4","sha1":"de866b74b3f8e285f333f30a88d695967239db1c","sha256":"808525ac1c4c3e2a7e507d09d4ecb124fd5125316d1597927349fbc683487c8a","sha512":"57a2368bd9a43f20f4d7c2a59dd513a6885503afa2b03df3f56bfc05b42c90528cd9c8e90c4984d0491d57d2653110e184b1031261286ae826ccd5170d14886c","ssdeep":"","tlshash":"d431b8cde910825cd239edadc24d11613f05371b139acf45c5bc353a22846ddba13b63","size":1650,"data":"","first_seen":"2025-10-17T18:01:46.195258Z","last_seen":"2025-10-19T23:09:49.118702Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/y20685eff-Ca3ys0Wg.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"551d13f768cdb9036006c942c22565da","sha1":"12ddbd74f15f58ef54034c8fd861d3966816b9a3","sha256":"b0052cdc01994fe54c3597abe83d9c3f08567aff59258ab41a3f46e31e9140b6","sha512":"a33f5ece4762faf968a41914003e8f2672cb853b25a4f34094120819177724a80453dc1fd005d4b4e486cec65313025805fce3e1f061fbb83cb7ac050590297b","ssdeep":"","tlshash":"b3312e8d3af12875861d18ddf6763081b17e1062314e8980d02d4f727ea9dcbc661acf","size":1753,"data":"","first_seen":"2025-10-17T18:01:46.182284Z","last_seen":"2025-10-20T05:06:52.080511Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d6d7931de-Tb6QoOKe.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d6d7931de-Tb6QoOKe.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-e68c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59020,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (59020), with no line terminators","md5":"0fc360064b0df9d91e99fde418b5a6d1","sha1":"b6457dab5ac3932ea23d11cb0041368f62f8b923","sha256":"befc04e094c70f9a79987c694a708aee2da951d2b348e88b96f629c2cfd91754","sha512":"4cc6929f2fed588b329fd33f3507190f39579b187efe10b14ba7dca437219bb4366ae956cf40adf9b77c7ca1600e0a587d4463f4e3762c902af29e1d08bd880f","ssdeep":"768:wkVayqw16WbqqHeBSihAhM2VBInlkLbNDw+fPATx+E6XFyfjuLUJZA9C1Zh9z3AS:LVGw11zhzATx+EHuSZrOtVRfPwTYbk","tlshash":"dc434f9ed2529fe988b31798b95c2a11b22d0d0ded4981b0ecdf0f16176ec87213b79d","first_seen":"2025-10-17T18:01:46.144636Z","last_seen":"2025-10-20T05:06:52.072813Z","times_seen":84,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/r3f581e-D8GqWNY3.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/r3f581e-D8GqWNY3.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-2e2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":738,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (737)","md5":"7883ce2f8b75b3ed56cc7610fe6d2823","sha1":"484b55126c14593c9504de219cfcc83c9ca22ef7","sha256":"f88a1b5bb41bddf583d1caffccae46fc99b7f49ea63f2d561daffb79d601ae1d","sha512":"4ed422d9abce0341ccd9e2f5ed718d781503328d2565c3d1eae26c4418b6f5123855fead5b2983d5f1e1166bf8395c52afb4b0f26593b630a4a56e1ba5dd666a","ssdeep":"","tlshash":"9701159fd5d0521cc20baaedd9b662a3379005625bcd0f80f17c453a27a25c6680eb17","first_seen":"2025-10-17T18:01:46.052466Z","last_seen":"2025-10-20T05:06:52.043775Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=xt5zqd64ysoh05lzh0ooal3ji6nl1x","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js?userId=xt5zqd64ysoh05lzh0ooal3ji6nl1x HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cdn.gfpxw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://cdn.gfpxw.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=xt5zqd64ysoh05lzh0ooal3ji6nl1x; expires=Mon, 19 Oct 2026 21:21:56 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 991353fade85b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6f1323a839e97d35aed330ba0089842b","sha1":"b51789b6f89ea30bc54affc29d661bc1791854ee","sha256":"a005085644580b0eb7199ef679c5ae6ef1e26ef672230e48125c812994b82d64","sha512":"b2077d3f26e72425553f277c732f3b254c64bbf9dcd8b01b7b733c45aacd76f6165953c133089e1274285d7de610c5a71ca4181ef6cbd5995f531012f7887d38","ssdeep":"","tlshash":"b7a002902c34da880024e6592fdbca2260a641469454770961d9541591d768c0d8b301","first_seen":"2025-10-19T21:22:23.053813Z","last_seen":"2025-10-19T21:22:23.053813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":25,"dns":0,"connect":3,"send":0,"wait":73,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/a50c404-BuuUm2pe.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/a50c404-BuuUm2pe.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-a9c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2716,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2715)","md5":"20cc966b52da81dbb43b69b95ba33fb4","sha1":"2106acf4dd43c373a2b9ffcabbd333f2d00ebd19","sha256":"8cb4091fb1a132fd92b004de9dee4925ce60a15b6036bfe4c761e502c20dac7b","sha512":"df33d0e062bee1de5d3dd2c8c50f8734f66dfd37f46c2d810ae879db5c3924adead24572af7fbcf0b482d9cc68eb94c2695caf5972eb93ef04ca8ecfbab4b9db","ssdeep":"","tlshash":"0f51b5be8599a4390a4c75dfd132c2666e5828523c1dcad1a47c8d2d73d7084f13ef67","first_seen":"2025-10-17T18:01:46.039034Z","last_seen":"2025-10-20T05:06:52.025248Z","times_seen":84,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d5d9abf41e-D2rjj_wP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d5d9abf41e-D2rjj_wP.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-ca2\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3234,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3233)","md5":"d7f9ccad4f01a978ccec6eda9e245f3b","sha1":"645c110f775ec28460da1c158f18ee4d591f8803","sha256":"45560a0db4bc9b35bc529878ab519fe4238cc4c91346752d6967c3770c6ab69e","sha512":"27e9e92aa73bd8916691323045d0a37f9f24cf02082819842aa0409f0ef5252f1b3c0e46d648db21903ce7b490d656cc77e3864034ba8a51d35fca6385bc9632","ssdeep":"","tlshash":"ce61136967fa3b6f4ca92b7a524dc10f162d1c0bb489c6346d97cb2cfd9059c38b0b51","first_seen":"2025-10-17T18:01:46.278924Z","last_seen":"2025-10-20T05:06:52.133558Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/bb23a55b-GcutwLC4.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/bb23a55b-GcutwLC4.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-964\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2404,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2403)","md5":"72f01c27ae270d203dad04d692748ca1","sha1":"8cfd8d10bc137accb99629c19061f4df0eeb50e8","sha256":"8470f61bb23538601f21c804bfb0196446b2f794f1f089df54c14af369297916","sha512":"59adf1584a27dc40d5d60c5a2adcf047f4cb1cdec1ea488527b3b18b5a47e47f4a383f2943d913284531a755c05db1b3ecdbe98f8750c76e9138eddf3dbe906c","ssdeep":"","tlshash":"39414403b176c1b1a15578cbcb61324ef6b087673ae8d5b4ec395d2093ca58b4b2e729","first_seen":"2025-10-17T18:01:46.058004Z","last_seen":"2025-10-20T05:06:52.029995Z","times_seen":84,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/ae79f3a6-CaDCjwJX.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/ae79f3a6-CaDCjwJX.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-3a9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":937,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (936)","md5":"c077d474aa99a9d68a4fcf6cc9ced47a","sha1":"797cacc388e451e6ddf15fd24df3e58069fd8f3e","sha256":"ac6bb9c2735c4cf4a01c1329762aea1a0c89a62a67513fa2f9361f117e06c3f3","sha512":"b5cf0017e4c7f515cf65341eea96d8707eb43ba720ece3b5187ab3e721b1275a93f93c17f96ec9eb86ec837775bbd5277075e0fb99d3c38ab6eea86a21642e41","ssdeep":"","tlshash":"7e1110c602f25634c355025ef175d3c5b6880267364e9bd0e1bc0e7ea716ec9ca01f4b","first_seen":"2025-10-17T22:34:55.806632Z","last_seen":"2025-10-20T05:06:52.14616Z","times_seen":31,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/c12aa9c-AEUZ2NAz.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/c12aa9c-AEUZ2NAz.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-c10\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3088,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3087)","md5":"7a00d2c8a8287e7d9870568845ab2a65","sha1":"744355356cd68431d351633c443204908e664f9f","sha256":"dcb7a1342c317311466c57b77cce20bd24f47bb4633eacd43b70558326439222","sha512":"daf916b72d549893c48fce1e52c31f64fd1a4f378ee94316e09707e94e44b1f3671af1a5097e78d3a02ce9c0cd49ddcefc704f555f65dd210d2c93fc2874d19b","ssdeep":"","tlshash":"0751108fd42610594f94cfb8bc7926673bd6c22a3d87894823c4a43c41e4bd6227f7a5","first_seen":"2025-10-17T18:01:46.071942Z","last_seen":"2025-10-20T05:06:52.052778Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/eb122c86-UUZ2M3uO.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/eb122c86-UUZ2M3uO.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 776\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-308\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"318d8e7547c343aad0770a90089964ee","sha1":"e2557b8959363aef3217518f5b8472be70c3aaf9","sha256":"f5490916579ee14a609e5ffcd5a26f243432a5e869e8c1d4a45769874a672e40","sha512":"ded6123e1dd26edf7c815d99642ce0156fe607883ed0ec8969a7ee5a00b5eaf621bf63015ba75f1d91a9c360eff6203c77801fb7022f9316039cbc9b5737bd65","ssdeep":"","tlshash":"99014c398350d73cadd2867def33249095cea07d50e4c28a92f9da3476d60d1f55f849","first_seen":"2025-04-09T05:05:24.74292Z","last_seen":"2026-04-03T21:01:43.560955Z","times_seen":258,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=7a7f30e9-ef46-4df4-8714-cd146223567e","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"185.49.145.45","port":443,"asn":35415,"as":"Webzilla B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:57.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Tue, 23 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"ED:87:7A:7D:70:58:7C:01:53:C0:A9:07:3B:14:A3:60:48:86:04:72","sha256":"A3:45:F2:05:D1:B6:89:92:B3:05:C2:75:20:48:5F:3C:AA:EB:B3:A9:32:5E:CF:38:C4:37:CD:C0:B9:57:CA:E8"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=7a7f30e9-ef46-4df4-8714-cd146223567e HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1349\r\nOrigin: https://cdn.gfpxw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sun, 19 Oct 2025 21:21:57 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://cdn.gfpxw.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-03T23:33:08.020262Z","times_seen":55971,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":157,"dns":61,"connect":17,"send":0,"wait":23,"receive":2,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/i47d01f-BzrDiKps.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/i47d01f-BzrDiKps.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 275\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-113\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd0d0e9ce7ee969fce2896033dc72b60","sha1":"6ea5b2669c71d0cf6d27b487117c91dd881b1362","sha256":"f5e4e2577d35145fc1cb889af35fdee74cff77241693041acef4773306c1a057","sha512":"11e7d5ef03b0b873c8e6a158b40e288eecb56c68b182ed93e44aafe755c43db5f446b165c0d89af26f4702ec31a0265b7d5df67b644a5b8d6faac0f4b706ec26","ssdeep":"","tlshash":"0fd02bbad36e48344ba481b4ce7ce6915042b4d5848c43add0a8d615b316dcb944853d","first_seen":"2025-06-07T11:48:49.418274Z","last_seen":"2026-04-03T21:01:43.578187Z","times_seen":256,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/adec3aa-Bz6SlTch.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/adec3aa-Bz6SlTch.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-881\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2177,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2175)","md5":"d399bcf3cec66b1e55538b478debed29","sha1":"e2575e8187b6e031f6a8c48632f8cff1da82b159","sha256":"cb37a42eb2c8d1512f1021666c35157fa3626f7d3be0cdae4eadeaffe01caad0","sha512":"66c5edbd5bc153f9c760743378c4fc03abae153ed3171a23b464ad41a08c1c97495b43848a2117cc5f46489410ecce16d9508763fc77c8862014e0f46685dcee","ssdeep":"","tlshash":"1941946571252b7cf00e499ff66c828bf0267b86da0ece50f0bc981a2749485bb46f80","first_seen":"2025-10-17T22:34:55.995068Z","last_seen":"2025-10-20T05:06:52.092105Z","times_seen":38,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/w0ab9284-BNb2k5sa.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/w0ab9284-BNb2k5sa.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-2174\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8564,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8027)","md5":"96d851fa9d5981f5a22d7fc1711842aa","sha1":"fe3d6b6cd011f6b6be10ddb541317c372037396a","sha256":"78e3e5e2aa20e1d3508e024930ae6eb0a13303d115c1134cd0ed1c2bb47a42ee","sha512":"61fa871aeae05575743eecc52c702ba9476b1bb74b81d238c019430b7475950aba046c7c498213cfe99b00db1c6796cd845b1547bfdcf1a7905ce8dff0cb2fd9","ssdeep":"192:vU35tPJiYFp1xUdbMurvuVawYocDYXJkT/FEqABb0jbVwbqhNegGbI:vU35tPsYFp1xUdzuVsocDYXJEE5J0fDZ","tlshash":"c902298870da1c7cd5db8cf9a460c065b23f0a58b98fd6c0c3ae5ca84255c4061bbf8f","first_seen":"2025-10-17T18:01:46.246824Z","last_seen":"2025-10-20T05:06:52.158248Z","times_seen":84,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d958efaa80-nG9WJJIZ.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d958efaa80-nG9WJJIZ.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:58 GMT\r\netag: W/\"68f251f6-672\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1650,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1650), with no line terminators","md5":"c7fff9e6c9738644d323b769749e1ce4","sha1":"de866b74b3f8e285f333f30a88d695967239db1c","sha256":"808525ac1c4c3e2a7e507d09d4ecb124fd5125316d1597927349fbc683487c8a","sha512":"57a2368bd9a43f20f4d7c2a59dd513a6885503afa2b03df3f56bfc05b42c90528cd9c8e90c4984d0491d57d2653110e184b1031261286ae826ccd5170d14886c","ssdeep":"","tlshash":"d431b8cde910825cd239edadc24d11613f05371b139acf45c5bc353a22846ddba13b63","first_seen":"2025-10-17T18:01:46.195258Z","last_seen":"2025-10-19T23:09:49.118702Z","times_seen":69,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/b3e49787-BXK-iPRg.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/b3e49787-BXK-iPRg.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-14e0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5344), with no line terminators","md5":"c7dacc5be9d3a45e5b60869a115ed3c7","sha1":"63fd1a112b7892a4d8e29cb9047200097e5fa321","sha256":"101bde52a5193e596e64d724bf68781880ab307b8b95be15ebe703a8f59eab43","sha512":"415678ebf9236d3ddee57e5d80bb8c3dfdb84da00ec82efa9ab0bc3b1095a715d37cac03e048112ebc05ae53bbe23e6f08f73b8bdf466f0a71033a3fb1e5bbfe","ssdeep":"96:j4pc/RatOb/QIlnLp7hffez9YTGDQjzHQjPki8QjIIuzxJz6M9NzMmgUV+sszbCh:jWc/XDPnPfez9YaYg8FIuz/6M9FMmgUx","tlshash":"a2b193c4e0a9dabd0dff9fda2490c16233144e073c8fd934b2654c1a27b9c0661ab747","first_seen":"2025-10-17T18:01:46.286328Z","last_seen":"2025-10-20T05:06:52.121165Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/x18103c-DpDBI-SP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/x18103c-DpDBI-SP.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-846\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2118,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2117)","md5":"2165e565586b7b5349eb8a8a7b02bb98","sha1":"040a52381d38e8830ede9058bb885d775f259d35","sha256":"3def0e553085386f6ac3f9e272e87258108e2f026e6a8b736e99a30014045902","sha512":"e983ae3542e47a594e2c3e55555e75a45f54db644d36f837f33e6db3caede04c49eb0c757dd2ed743e024721d0ab90143eab6667f81fe377303f738714913f66","ssdeep":"","tlshash":"d14193ac41e4c4b4d1a44bec82b2ea33394d4633305ecfc4a12e9a3557bdd86d050b32","first_seen":"2025-10-17T18:01:46.186443Z","last_seen":"2025-10-20T05:06:52.152669Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/v4f18d81-DZ7sNlO9.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/v4f18d81-DZ7sNlO9.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 807\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-327\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1747972185818f895de94fa87c904207","sha1":"fc66d3666d5ebf130c163bfc61a61fad669af916","sha256":"4933e4cf782e166f3805161e22aefd3f30edc6d9336da50484dfb6d76b6ef477","sha512":"942580d5f9c645a372904dfdf74772f055147d540d15a30ac755fa095029bb238ceb564b54e1e97026ef200877a28dff0884977271efc70c13b7e65f543dda69","ssdeep":"","tlshash":"60016fd5b150dd6d9947c55dc6dba3f0210e4489a06ea0dc2ce68b3ef03ddc5f254321","first_seen":"2025-04-09T05:05:24.739304Z","last_seen":"2026-04-03T21:01:43.552165Z","times_seen":263,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/c0e26d05-D4nR0lfR.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/c0e26d05-D4nR0lfR.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 188\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-bc\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a5ed931bf8dce50979e079fe75ff2a7","sha1":"81fe5622743f7b1ff0f144bc0c66f0b17a5043d6","sha256":"4dc63a8077ecf6fd39bf2f00432597165fbc6bed69fc008daba266492dc5c19d","sha512":"e4cdebc3562f81ec557cf681919fa2fcb491bde4e59c26202271993f4f46af740984c020bfd86431ba377ef1f751055d2021ac42c0ae616198e2fd299ba01b37","ssdeep":"","tlshash":"43c0c0f2217409040882863c39bc324a60771047b04204bce2e425683286f7a70c50d7","first_seen":"2025-04-09T05:05:24.722099Z","last_seen":"2026-04-03T21:01:43.580717Z","times_seen":263,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/k36adc812-DbHCy87T.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/k36adc812-DbHCy87T.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-42a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1066,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1066), with no line terminators","md5":"66fda451bb9492495a0cac999ed72054","sha1":"9838b21be000edbcd482d05367ea7b0087d1c0c5","sha256":"8f1faa4ed404c25fa1a97b418d67cd4e87c4d15812018e180f163d42bff6f37f","sha512":"408b432d99533e7f8006d97b02eeda2d9f154dc5c0c7e652cf9927348b353a0309d447017db81d38dbee5fd4af95be374c6d3ae6da282b494ef49de3a036296b","ssdeep":"","tlshash":"9911350dba646c29002d05ddc194a9214245976f2bd88be2e0be957d3f39ec97c12b17","first_seen":"2025-10-17T18:01:45.986483Z","last_seen":"2025-10-20T05:06:52.15007Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/f609306d-CWv6IkKN.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/f609306d-CWv6IkKN.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 199\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-c7\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e1985a6afb2935a7e4ce54b6991ace4","sha1":"50c08585d83b88201463260185331dfe3ee586b6","sha256":"40204e6cf5d2165eb198dbc66fc23e8064c1c91e3a48493a156b98f829a08ebd","sha512":"5dca6c317bbb124616f3d554f9ea2836f4fcf944bca567a2361acc05a4bc5088365122da3e23a583691e90d51ec89162270fb77bbe884a6008ccd357ec9595bc","ssdeep":"","tlshash":"dcd022a89056012ab5c65a902578710b28af6497b0c40d7de2d8015113e0d8a30cc7d9","first_seen":"2024-12-21T08:46:00.055881Z","last_seen":"2026-04-03T21:01:43.562181Z","times_seen":279,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/t9c3e23-UPtv7WGn.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/t9c3e23-UPtv7WGn.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 192\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-c0\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":192,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e6133168dcf129f4caf267388d0ab6d4","sha1":"922552d51294b494d6f1692134f0dea23dc64431","sha256":"fb53fcd165190dd2d1aa7e621288f03b6f229e5e178bc34597ae8ede67017507","sha512":"bd7014e79fcb6fcd6df5bc6f578e50ac006c579d51728ec60f97e3374101ba8d6645b3588235ac700a4f36639918c934d38a5c4e744b63a722c60946aff8819d","ssdeep":"","tlshash":"5ec0c0f40062342980d345d00a7878bd288b1017f0c10dbcd1e8324012d0f93b1ca4f2","first_seen":"2025-04-09T05:05:24.735699Z","last_seen":"2026-04-03T21:01:43.571285Z","times_seen":262,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/s45d414-vFIAVwgC.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/s45d414-vFIAVwgC.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 660\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-294\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6eb7b4e8c5fdfb54124fbfa4e28c036","sha1":"1c3c4fc1b3202459929f110a2d027d5aea9ee4a8","sha256":"d01053dec8b224cd0cab6d1d4e73fdbbcd0af7ced751f4566e855135fb37be83","sha512":"2329ff17fb9a3b3a073442ab32a2aec2dc03b337dbb6ef77b7f8cb3f6d364ece2356d580fb68927f05e0ac3d445a7d6be0c8db4e9d6fb6dd322d5dbc299fa89d","ssdeep":"","tlshash":"d101f2f502340139e4d76bc800a8b6bb3cf71697e2851d3963ad22c113b4e227dc42e1","first_seen":"2025-04-09T05:05:24.745104Z","last_seen":"2026-04-03T21:01:43.558863Z","times_seen":263,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/w5c408f-xWNJfbcP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/w5c408f-xWNJfbcP.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-381\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":897,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (896)","md5":"92461e3d46fbd7fe2155debe3de17eb2","sha1":"d000685bed4d78071269ce8cd56b7d40a3421dd7","sha256":"b1ccef133f927d37762b460c4a6d32ccf6a2225b06869b89d23538f6dca62ec1","sha512":"f9e8aac7b2b3e3c8ac3e69d1fd234e4e004a6e6a18b3019d94d7c57caeb1384f910c929bd2f59e695715662cb8c71a864f1c065f6d49bd83ba799f6454062c48","ssdeep":"","tlshash":"fd11568fd4f45259c21f29dfe222915674d84473338cd7c1a1bc07741b91acaea1af47","first_seen":"2025-10-17T18:01:45.965189Z","last_seen":"2025-10-20T05:06:52.027679Z","times_seen":84,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/j4aacd800c-Dec1CAdH.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/j4aacd800c-Dec1CAdH.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-754\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1876), with no line terminators","md5":"5994f133ac9ae3cc0bd1b6a18f0f8739","sha1":"3f82481475719d5404083af2f6450ecedb4cb158","sha256":"cd5866ae561aa1a1dc2c77ea361c230dc8fada8464ba718fc5b292c6d9b3d449","sha512":"97e6919f5ea2775e4755f94e6e71f1452a5e8fe258e56140ba1e546fb539475f8784ea3e74e538630cc4249a652add762c0aba7c4fec7826215ab43a096cb56e","ssdeep":"","tlshash":"233179e848e98d34b2cd59d4763f0a9123f9260738a84f52e17f4aa1165cdce822773a","first_seen":"2025-10-17T18:01:46.204558Z","last_seen":"2025-10-20T05:06:52.136631Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/favicon-96x96.png","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /favicon-96x96.png HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-04-03T19:38:11.148062Z","times_seen":16113,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/favicon.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\ncontent-encoding: br\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-04-03T19:38:11.148062Z","times_seen":16113,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e16a3ebb-C5FXMIao.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/e16a3ebb-C5FXMIao.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-c64\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3172,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3031)","md5":"a451845bfa5359369ba42baa87ba6101","sha1":"fb2c0751842a5d1d60e5c1cb4b3074c685807323","sha256":"b34eaca63f8fe5f5c89f0372405cdfeb7d3c37dc47db2be6e5216335be0e6116","sha512":"6e4a4844cda9c63b33672fa4cb7d1178abb185b9d049d267b61b80c3c575bfa50035a9b6f792685824423e2303439fe96acd9b815bce7e2d4e5192f4f308ea1d","ssdeep":"","tlshash":"2d61a50d419c14b950cc8aeb9d720e0ebbbab416698c3899fc2b4cdc074ed8dc20a97d","first_seen":"2025-10-17T18:01:46.077582Z","last_seen":"2025-10-20T05:06:52.017607Z","times_seen":79,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/af31acb-B3ZxXc0s.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/af31acb-B3ZxXc0s.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-20b\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (522)","md5":"039953a2f04ada1455a9c0af50054ec0","sha1":"1e36160ef23bdfa31e0d91167bbeb75f97e72b00","sha256":"1f3bed6505da3bd622282b91f32abba342b3e8dee7398dae4b095c4b55a760b5","sha512":"aa15d5c73590d3a3ca8e23c5a8d9229fab2d58c4603f3cf629a7d9f5643aa8fd16941b194648cd261e71624da886931429a89ba6009726d8adef24038b9b6792","ssdeep":"","tlshash":"1cf09e8ea9f48b4dc156236fd61be541b09a11235b8d4f26a1bc0b3937629f85904fc7","first_seen":"2025-10-17T18:01:46.108118Z","last_seen":"2025-10-20T05:06:52.087374Z","times_seen":84,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/k5d2957c5-COJk4w3f.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/k5d2957c5-COJk4w3f.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-295\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (660)","md5":"bbc2ee6545dca95c19df7ff556f3504c","sha1":"2fc482ffff5ba316af5bfbccd6e1d397ffde8ea5","sha256":"01db311e451de5a48633eee2f3b5267bc36421613fa900ee0e81c00615c613a6","sha512":"9614b095d196278de7c57cc81c7a38570b6cbacf13857061797f479be039cf396e94b54cea75950157827940a6f46d9e21baacef47ebc860ae4c9ca255a0c217","ssdeep":"","tlshash":"8501234918f526d4840a63efc15aa16631580027334c8b4a917c0b791761ee9be13f8b","first_seen":"2025-10-17T18:01:46.17811Z","last_seen":"2025-10-20T05:06:52.128277Z","times_seen":84,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/u1f96f4-BYjjns2s.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/u1f96f4-BYjjns2s.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-e79\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3705,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3705), with no line terminators","md5":"43fa565b1e64122699103fa6a5723994","sha1":"cdbea9b78d999d413a7ff9d78968b2a87cbcc74f","sha256":"01ea28c045fd544a81933d618c8d55cfe78b8753e25114184797219bd4a2a7cd","sha512":"7f9a790c92adbc6cd705c7e56326f3f81e9fed63e73e8fb5a78c64bd7e290e92671ef5bc7b682bedad7a4d85294e7eb77e1f3e0dd1c5c2eeb054d1e5e93cc2e9","ssdeep":"","tlshash":"d271c7cdc8d9c434528f36db1029126077be8e1b752c83c590ad4f398b6de49d485f6b","first_seen":"2025-10-17T18:01:46.214859Z","last_seen":"2025-10-20T05:06:52.038511Z","times_seen":84,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/v00203ece-BVIkmwtf.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/v00203ece-BVIkmwtf.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-10824\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67620,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3ebb9a5509604d424831a2e105948cf8","sha1":"9e8effa7a2379d91736f08702dad07f6843ffe69","sha256":"84a446c36a7d96d945cbdd40e3a51ae38dfb511a2efe81bd4ce2dc0f602ff3b7","sha512":"643f10d54da6a5d436987348da63e64ad70e972fcb086eb57e23790fe4ffc88b5a0566dcaa5f19c8995a50406b117b1dba31476a48145d6f7677b1fd7b612808","ssdeep":"768:jaQWB93EFyzwaz4+BlYXed2vhfZk8eA02rtWPUfh0UpkEugFn1cL9g7AM8wC+KbX:+QWqyMaz4+rvO01gpkgFnKL9D+/s","tlshash":"906328a47466b03d47eb70b6903f1a0ab33a000691ae475ce712caf52ba4d1d722ff5d","first_seen":"2025-10-17T18:01:46.219968Z","last_seen":"2025-10-20T05:06:52.07541Z","times_seen":84,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d6b88941c-CMLDKLgP.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d6b88941c-CMLDKLgP.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-1d3\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":467,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (467), with no line terminators","md5":"232d79287f9afeedc617ab60dbb5c63e","sha1":"04167b6775e38f43dce9b0e04b0feb28ba8f1f70","sha256":"2e40f0c513a14b07d304afd9b785f4394e4fd1b0ef604366a090dbb49c50f9e5","sha512":"52b8403080bfa1625fbeeb0390392b00f3f7f848419d163155add0090f32f7cf5fbda832739f95c7e437b63047971ca857f5cb4a21efbc73f6864f41bcfd62e1","ssdeep":"","tlshash":"16f054892ff45a94c24e36ccc279a9012598416756cddb5191790b342b5baeebc14313","first_seen":"2025-10-17T18:01:46.074808Z","last_seen":"2025-10-20T05:06:52.123714Z","times_seen":84,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/m8c02c376f-CQLf56TK.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/m8c02c376f-CQLf56TK.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-1021\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4128)","md5":"fd1335b6d3deb6d9dc4a4a5590718ee7","sha1":"8db72268bcd999f52778b09d8156cda5994792e2","sha256":"67b7ca76a663dabd5f8c2bb43ecbf40b298845676038e63fdf666565bc3411c4","sha512":"0a491eaf6deaf485c99b2fddcb16b8fe016e20971b4ae878d4e1525b1ab817946f81a2e033e57f690ac6d8f7182c2f06815ff08d6319f2745adaa470ab367240","ssdeep":"96:Y/cs3BbFOc4EJq3fX0iMK7Vbf1BBp4ViIEtWvY0DIZat/UshBrBB/bmb:Yj3rOZqKMK7VhBYiIE0w08ZaZUAtB/bk","tlshash":"9281d7dea034117da9de8add8032e631336526d53088e2d0f05e0e3543bad87a69ef4b","first_seen":"2025-10-17T18:38:00.983378Z","last_seen":"2025-10-20T05:06:52.0104Z","times_seen":73,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/eba693-DnIV56VO.svg","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/eba693-DnIV56VO.svg HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 511\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: \"68f251f7-1ff\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":511,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a9033239400303be8adae899ab239eb7","sha1":"f857692c3a529084122d5fc26412c86edc29cbcd","sha256":"9079ed1d74aafbc531efab0db01727cd2e49a5a1288191ab88c29b6b630aa8e8","sha512":"4cb42056502dc14a45440265832eb3bf3b2fd9440790f2e3cbd2148ec4329ffaab16204387600b818dc41527c51c220db12b553b1801a8ea84e862e8d4548e43","ssdeep":"","tlshash":"87f082acc184ec3894bea72c9a681781b42312ad27c8c87d80eb2a1400ef5ed510de8d","first_seen":"2025-04-09T05:05:24.729863Z","last_seen":"2026-04-03T21:01:43.555819Z","times_seen":258,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/y20685eff-Ca3ys0Wg.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/y20685eff-Ca3ys0Wg.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-6d9\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1752)","md5":"551d13f768cdb9036006c942c22565da","sha1":"12ddbd74f15f58ef54034c8fd861d3966816b9a3","sha256":"b0052cdc01994fe54c3597abe83d9c3f08567aff59258ab41a3f46e31e9140b6","sha512":"a33f5ece4762faf968a41914003e8f2672cb853b25a4f34094120819177724a80453dc1fd005d4b4e486cec65313025805fce3e1f061fbb83cb7ac050590297b","ssdeep":"","tlshash":"b3312e8d3af12875861d18ddf6763081b17e1062314e8980d02d4f727ea9dcbc661acf","first_seen":"2025-10-17T18:01:46.182284Z","last_seen":"2025-10-20T05:06:52.080511Z","times_seen":83,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/m5dfd0b75-B3m2amsa.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/m5dfd0b75-B3m2amsa.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-b32\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2866,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2865)","md5":"7e5cbc7e65baeec0577b72ac5e50d966","sha1":"c0e20344f354fe8c40c25d0561cb25bdd740f5d0","sha256":"5bd0b669168da266d9acc300b75a4f222f4540d58ae4d77bdb9d1936dc44089a","sha512":"e67881bb5d34e427c32fd4cf6552e12840eec7fc1910afbe437f761a4adf9cdc1cee04935d5eab3eaea7682d9c6832dd38220bdf8d65ae82175b339204b9cf8c","ssdeep":"","tlshash":"0651735ba0b450bcf50fcefee06ae136132319534a8c9761818e4b3473a1798b166bcb","first_seen":"2025-10-17T23:11:31.33295Z","last_seen":"2025-10-20T05:06:52.083047Z","times_seen":26,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d999c1d4-GBueL4Ce.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d999c1d4-GBueL4Ce.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-54a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1354), with no line terminators","md5":"548b6a58930f634987559a24a333cc62","sha1":"18ede933a64a391c952b649a6d943f132134f326","sha256":"2302f773ab90c2c8c159c50c2ed271aff1f603182cc832333fde27ddd6438db2","sha512":"49ab4b0de9dbd70cd38d6bb4e1b5f527e7e273530b5a83b37634887024495e7b5602e732159b34054315b83b5003f9dbd930a7a1234b754bf3b924ad88ceab66","ssdeep":"","tlshash":"5a211ec2b6b7a07c03b652ace0367242f554892653ccc7d0a1bb027a2ed4e9f9c3061f","first_seen":"2025-10-17T18:01:45.990886Z","last_seen":"2025-10-20T05:06:52.155351Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/sync-metrics","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 495\r\nOrigin: https://cdn.gfpxw.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.gfpxw.com/single-page/1130/fr.html\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: nginx\r\nx-trace-id: 156a66c75075ea9d34021654c6321267\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: max-age=172800\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-03T23:28:34.997301Z","times_seen":114980,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/b3a41c97-DljtMbit.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/b3a41c97-DljtMbit.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-6b4\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1715)","md5":"fd720ffb905ee3c3b258e0828f4d05bf","sha1":"ce66bf47a9510cd7bcf0bce90f2489086f07cc4d","sha256":"2f61d3d0b626e1cd40e225acc656ff8f5aaaecec96ed1671c8e5f195e88342f8","sha512":"b4df8f2e8bcc0b4ae5bc5325fbc07bad648062fa9b8453f15e677d33533456ed4873036b760f6a11238f217254bb3caddc571056715805e616e623d156c8296b","ssdeep":"","tlshash":"4e3144cf55b046fcc46ec5e6e35ef63033590687a28c570195af09702772d86d62ab47","first_seen":"2025-10-17T18:38:01.122503Z","last_seen":"2025-10-20T05:06:52.089708Z","times_seen":73,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdntechone.com/stattag.js","fqdn":"cdntechone.com","domain":"cdntechone.com","tld":"com"},"ip":{"addr":"172.67.195.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdntechone.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 10:37:11 GMT","end":"Sat, 03 Jan 2026 11:35:39 GMT"},"fingerprint":{"sha1":"1C:EA:64:D2:D2:27:D8:F8:14:68:7A:01:A6:9B:4E:C4:C7:D5:B8:DE","sha256":"4B:C9:99:7C:8C:A3:85:BD:17:9A:F8:0F:83:73:65:9E:67:73:5E:2C:89:B3:5F:84:D3:E2:5D:D8:FA:8F:FD:BA"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: cdntechone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://datatechone.com/\u003e; rel=preconnect; crossorigin, \u003chttps://datatechonert.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X21HRJbIaPMK1tlH%2Bsxf9U%2F8AKTYdx1YyXjiY0xVrEAkcjObwTQNtrfFG%2FWBsOMJVwPUKs4%2F0H302lWhQhVHEr3aW26%2FlbtBoUwi7Bds\"}]}\r\nage: 5697\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2b6-406a\"\r\ncontent-encoding: br\r\ncf-ray: 991353fb4891a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16490,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15840)","md5":"80d7433dbc2b7708f2fa4e6a9943a116","sha1":"350c6e2bb1cbd07de260856f918f4ececcd96894","sha256":"54862ebdcfa23c67d6de25543e0b22014de8fd8d3d3aed09d615981bbdd76251","sha512":"6c065d9d4d04b7c4a11ae28751a711a064410055e1db34daed1c74d98f0257a304481bbf2af96b0845075f43d43bafeab34a49241a2a63f967fc0867748f6052","ssdeep":"384:WDC77FbFjbRN8h+eYFCatOJ39BEisNWP7gDhlPQ5EKQIkT8:d771Ff8h+eYFC/JNYa71","tlshash":"ac72e8c631a474afc6c292f04a7f092ef768509060be2986c1d5b4ec5ab51cee7c3f95","first_seen":"2024-07-11T14:08:01Z","last_seen":"2026-04-03T23:33:08.019721Z","times_seen":9006,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":95,"dns":1,"connect":1,"send":0,"wait":6,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdntechone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e797554e-C4HViEn9.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/e797554e-C4HViEn9.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-27a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":634,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (633)","md5":"4e37a4388fa3da8c178f3e8aa2dca748","sha1":"f60659112d0ae11ae3beb8d847fed41bff55f3e1","sha256":"23bd1910c44f445be89dc5a4c322f38b2c14b93138827de149872e532c5a1fad","sha512":"bdf7f98f80808fe11b1f9efb53f5758d2cf4eccda02fa43b61005adb5d57068b1a4ce13067d2cd54ffea1904e71cdd2faff21c7cc036699c9e3d039dd935309b","ssdeep":"","tlshash":"5af078e41bf02974805f834ed279f2c17a6800a3228e1f90b23c4f6c2346d87ab50e8b","first_seen":"2025-10-17T18:38:01.114941Z","last_seen":"2025-10-20T05:06:52.014868Z","times_seen":73,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/d566ab353-BGMreeeV.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/d566ab353-BGMreeeV.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-46f\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1135,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1135), with no line terminators","md5":"8506d4e19453aedbf3c1fc04342b89c9","sha1":"0e2bb5bdcf7088e8614858622e74e932b0c2fa2c","sha256":"184cd18e2112ed9660cd49257113c5aad97d659890668992cdc1635e21f374a1","sha512":"aea362c50d524712756f68f2889fc20a454c6d90196b625c6970314765b332c69bbca873363ba29779f6bcf904bb42f976a317349f70b3a85158398d0bd1b97e","ssdeep":"","tlshash":"a02100d1b6486b0ea53e3fddf0cb184036301123ce8d5683d2174722634fd49427dba6","first_seen":"2025-06-24T19:07:51.391409Z","last_seen":"2026-02-23T22:20:45.176058Z","times_seen":2159,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/a3a43bdc-BWjXao3I.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/a3a43bdc-BWjXao3I.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-10d6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4310,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4309)","md5":"497835f5d59c8383b71b888bd33d68cb","sha1":"92afd71d3a091c3afc5218bf8e6d06b2cc75f864","sha256":"bbead45c6a688ffdfc1ae77efbfd14a4ebe946eee8b51815c2e11bcf1f6f303f","sha512":"111ab21df6ad7bad39efbd7c748c5e1420787b3c39196519e95f506e930c70c178263c3113c570ae31b91c94709a8640a6cf3e087a37dc9767f34fff35eddcb5","ssdeep":"96:52y8mLYz6zuxzvPdBb9QMNaAwNS1egxy/6gV+72:kYLYGSzv1B5g+soy6ym2","tlshash":"2291248fb87920fc7a97c6d96133e1e31a3725092989c1b4a5d74f3817a1285a33bb47","first_seen":"2025-10-17T18:01:46.119382Z","last_seen":"2025-10-20T05:06:52.033603Z","times_seen":84,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/single-page/1130/fr.html","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-19T21:21:56.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /single-page/1130/fr.html HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: nginx\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Astro:5.1.3","description":"Astro is a new JavaScript-based static site builder.","website":"https://astro.build","common_platform_enumeration":"","icon":"Astro.svg","categories":["Static site generator","JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114672,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"76ab75034023e835cf1aa0c0b18c8aa6","sha1":"5035f2a183d8dc4a02c78564019f9688bccb9231","sha256":"9940cceb75e4859495111d44f14cb88dafa693f717d3cbdf2f102aa06d987a5d","sha512":"1a7f6dea970a201bdc192de7df8920d1330b0afae505015ea670db43da5ae4846ae545b00475263d5dfe0e95a05a7bd3df41849acc46520d8be5a86dcd8edc6c","ssdeep":"3072:+fWKPGHqAe2r8aQM2h9DTijwg3S539UDP9AY6l9:RJHje2r8aQM2h9DTijwg3S539iP9AY6r","tlshash":"d1b3f95a5bb2102b7c1fa3f1d1a5eb587627b787ff2933dae802111087d16eb2973610","first_seen":"2025-10-19T21:22:23.11549Z","last_seen":"2025-10-19T21:22:23.11549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":236,"dns":46,"connect":19,"send":0,"wait":31,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/l0127002-CaIafYaH.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/l0127002-CaIafYaH.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-26a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":618,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (617)","md5":"3e94e9b448e5bf3d8e391ca60c08ccf9","sha1":"c610f50988365258892c7707ff4a4ac12ff9a3f5","sha256":"2c1ba183b0bdcffd5da07e64d276f17d250f0394564b239f41584cdc139fa47e","sha512":"9de97665f58435198133c4f41109fff72b28400a5ac9fc4b4531efd2c8270868f07ae843cec8ad77fc9d8407f7a2c95b17868f004d280b7d0ccac49f89d00026","ssdeep":"","tlshash":"67f0ac8a59f83549810e27ffd25674107265015b1bcccb12e0bd07b427719eeed04b83","first_seen":"2025-10-17T23:11:31.289008Z","last_seen":"2025-10-19T21:22:23.117729Z","times_seen":13,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gfpxw.com/_astro/e0145479d-uKiSnrbr.js","fqdn":"cdn.gfpxw.com","domain":"gfpxw.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cdn.gfpxw.com/single-page/1130/fr.html","date":"2025-10-19T21:21:56.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.gfpxw.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 14 Sep 2025 02:34:03 GMT","end":"Sat, 13 Dec 2025 02:34:02 GMT"},"fingerprint":{"sha1":"6C:D1:2F:EB:30:D6:68:32:CE:EF:EB:CD:9A:A7:36:16:0F:FE:91:19","sha256":"79:7A:3C:73:3A:24:19:9E:FE:B5:1B:9F:68:9E:F5:4E:C0:F6:AA:4A:EA:0D:04:32:CD:EC:5A:6D:31:4E:AD:80"}}},"request":{"raw":"GET /_astro/e0145479d-uKiSnrbr.js HTTP/1.1\r\nHost: cdn.gfpxw.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Oct 2025 21:21:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nlast-modified: Fri, 17 Oct 2025 14:25:59 GMT\r\netag: W/\"68f251f7-1a5\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nexpires: Tue, 21 Oct 2025 21:21:56 GMT\r\ncache-control: max-age=172800\r\nvary: Accept-Encoding\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (421), with no line terminators","md5":"ddb08ad6fcb495956ecb5a55ba472d9a","sha1":"c5ddb6e22c1d5c337d4a6fd5acfaed754027b2b3","sha256":"8b7814b13adc6d7caf9d50533aa86899827e596a04ac827d2f276294a05306dc","sha512":"7688e93e884751699f683cece75af94dafe4a219c19ceae2fb3d90f38f2e63abf4668bfbe2000b3735f28c567801580d06f0d27c73289abcd8e758b0a3cc9dfd","ssdeep":"","tlshash":"e3e0e5984ae09ad9419e26ded616540265c81863179c4f61a6b80a382775bceca08347","first_seen":"2025-06-24T19:07:51.329462Z","last_seen":"2025-12-16T11:57:19.837877Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-19","alert":"Sinkholed","trigger":"cdn.gfpxw.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}