DNS/CDN/frontend hash drift

Evidence summary #

gmx.io domain: registered 2015-05-01, registrar Cloudflare Inc, expiry 2028-07-31, privacy protection enabled (DATA REDACTED for registrant per WHOIS). No DNS record change, TLS certificate issuer change, or JS bundle hash drift documented in public data at assessment date. Cloudflare as CDN/registrar provides DDoS and SSL protections. No reported frontend compromise for GMX DeFi protocol in the assessment window. Threshold: hash of DNS record set, TLS cert issuer, or JS bundle differs from last-known-good baseline AND no change-management allowlist entry.

Sources #

Methodology #

Detect whether the hash of production frontend JS changes versus the prior published hash, or a DNS config change is detected.

See the full factor methodology and distribution across all protocols →