Domain > m.gfs-express.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-07-01	104.18.0.233 (ClassC)
2025-12-08	104.18.1.233 (ClassC)

HTTP/1.1 200 OKDate: Mon, 08 Dec 2025 17:18:50 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9aadec9e0bdcb876-PDXVary: Accept-Encodingx-amz-id-2: GwqIfqhqjfff+9Sr8um7FlLX+pyxeXU13teuqT5Qjt7GsU7IJWZ9h+HH/IDEgUHJg4TCZIshh3kx-amz-request-id: 538XKBKQDX8DWMV9Last-Modified: Thu, 04 Dec 2025 08:11:18 GMTx-amz-server-side-encryption: AES256Cache-Control: no-cachex-amz-meta-v: 1.3.9cf-cache-status: DYNAMICServer: cloudflare

!doctype html>html langen>head>meta http-equivContent-Type contenttext/html; charsetutf-8>meta charsetutf-8>meta nameviewportcontentwidthdevice-width,initial-scale1.0,maximum-scale1.0,user-scalable0,viewport-fitcover,minimal-ui>meta nameapple-mobile-web-app-capable contentyes>meta nameapple-mobile-web-app-status-bar-style contentblack>meta nameformat-detection contenttelephoneno/>meta nameformat-detection contentaddressno>title>GFS Express/title>link relshortcut icon hrefhttps://s3.gfscdn.com/favicon.ico>meta namedescription contentOne-Step service for Global Brands building & Logistics, Get your package swiftly to all over the world>meta namekeywords contentGFS Express, High level Deliver Rate, High level Logistics, High level Track system, High level COD collecting on behalf>script srchttps://s3.gfscdn.com/libs/js-cookie/3.0.1/js.cookie.js>/script>script srchttps://s3.gfscdn.com/libs/gfs-polyfill/0.0.1/polyfill.js>/script>script>var F_CONFIG{app:h5-customer,who:gfs,name:h5-customer,uidCookie:PROD-IAM-USER-ID,logger:{duration:false,reqUrl://dot.xxx.com/api/v2/dotRecords,channel:v2},tracker:{reqUrl://dot.xxx.com/api/dotMets,performance:false,sample:1000,isInitMonitor:true,sucCode:101,1001},version:1.3.9,shortName:h5-customer};var F_PLATh5-customer;/script>script>var domain  document.domain;var rootDomain  domain.substring(domain.indexOf(.) + 1);F_CONFIG.tracker.reqUrl  `//dot-hub-x.${rootDomain}/api/dotMets`F_CONFIG.logger.reqUrl  `//dot-hub-x.${rootDomain}/api/v2/dotRecords`;/script>script srchttps://s3.gfscdn.com/libs/axios/0.27.2/axios.min.js>/script>script srchttps://s3.gfscdn.com/libs/gfs-dwp/0.0.5/dwp.js>/script>script srchttps://s3.gfscdn.com/libs/gfs-tracker-utils/0.0.1/trackerUtils.js>/script>script srchttps://s3.gfscdn.com/libs/gfs-tracker/0.0.3/tracker.js>/script>title>GFS Express/title>/head>body>div idapp>/div>script srchttps://s3.gfscdn.com/assets/inner-h5-customer/runtime.c676e558.js>/script>script srchttps://s3.gfscdn.com/assets/inner-h5-customer/vendors.7d743020.js>/script>script srchttps://s3.gfscdn.com/assets/inner-h5-customer/app.2ae22ad6.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 08 Dec 2025 17:18:51 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCF-RAY: 9aadeca0ee455939-PDXvary: Accept-Encodingx-amz-id-2: 8dDguhMIKOMpdzCB2SvtzN8sf9mJA2l8/CvbDwIbRtZ03YPbw25PG31fIzbUhku62IhPdCkp6aIx-amz-request-id: K9M3H28RJNAPZ5XZlast-modified: Thu, 04 Dec 2025 08:11:18 GMTx-amz-server-side-encryption: AES256Cache-Control: no-cachex-amz-meta-v: 1.3.9cf-cache-status: DYNAMICServer: cloudflare

Subdomains

Date	Domain	IP
s3.gfs-express.com	2025-04-07	104.18.10.102
s4.gfs-express.com	2024-10-18	104.18.10.102
eu-s4.gfs-express.com	2024-11-30	104.18.10.102
m.gfs-express.com	2025-12-08	104.18.1.233
client-metrics.gfs-express.com	2024-09-20	104.18.10.102
dot.gfs-express.com	2024-10-10	104.18.11.102
gw.gfs-express.com	2025-02-21	104.18.10.102
www.gfs-express.com	2024-08-09	104.18.10.102
dot-hub-x.gfs-express.com	2024-09-01	104.18.11.102

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > m.gfs-express.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains