{"report_id":"a3da92af-396a-45c5-a652-a24414551de5","version":6,"status":"done","tags":[],"date":"2026-04-10T14:35:49Z","url":{"schema":"http","addr":"geminicopier.com","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"title":"Login « Gemini Staking","dom":{"size":719,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (719), with no line terminators","md5":"0e7d1efec26b1ecb00b05777d0f1397e","sha1":"1c1dba9c772405ebf897c2b9273915f1748adc7d","sha256":"54ec16cd5783abb9c3b026500fbd692ae58b7a79c80d9c1a03207ecdde910780","sha512":"ab080913dd9e2b3a23e0c0fb8c2d44421955835c6da967695e762075e6f94fd1412bacbb04ea19b4d1a292008b40a67d7eec504cc558e198eb23a0b528e89cb5","ssdeep":"","tlshash":"0c0197f33408c9a333514ac7b8e23228514aa14fad488c628dda967bde407f00c3a61e","dom_hash":"domhash1dd8e3179d8191d8c3db88b3cd44f597","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"geminicopier.com","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:35:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-10T14:35:41Z","timestamp":1775831741,"ip_dst":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":38716,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-04-10T14:35:41.313606+0000\",\"flow_id\":485213373052609,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":38716,\"dest_ip\":\"104.26.12.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3438,\"start\":\"2026-04-10T14:35:41.308929+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"socket.tidio.co","ip":{"addr":"34.240.98.173","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2014-06-01","domain_rank":107322,"first_seen":"2017-11-23T13:17:52Z","last_seen":"2026-04-09T05:22:11.497289Z","alert_count":0,"request_count":1,"received_data":161,"sent_data":742,"comment":"","tags":null,"fingerprints":null},{"fqdn":"geminicopier.com","ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":27,"received_data":1849081,"sent_data":14406,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-04-08T23:59:30.273865Z","alert_count":0,"request_count":10,"received_data":1614237,"sent_data":4707,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-04-06T11:59:43.380237Z","alert_count":0,"request_count":1,"received_data":269,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":2,"received_data":16182,"sent_data":984,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":3,"received_data":62925,"sent_data":1617,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a10e1883bb5b3789b27cc724608c9ab7","sha1":"1929d60a5f78e08bb784214f01cc47a4563be038","sha256":"21279410032c4912016200644240f29c9a9360e0295e1ae3bb8eae11541f8c2c","sha512":"e042c85b98706c524194bfdf5ad2d706827229b3ccda2da4bb5fb3c2ef2e5eafdbc3d35cc9b43b1f8e8826a827b964d883b35b65fcf4848cb02f1bbca20901ad","ssdeep":"1536:8P6den/s6fJoQW5hgDyJDTKmPLS4bTKmRhgDyJHVNQ3Ke/Bii+xCTGKkxk:y6den/sJJRJJ+/9J1","tlshash":"2893faf693c872e4d547e7a0dc238869755f34fa3fd5c7888668dee4b3510ac8a89c84","size":95771,"data":"","first_seen":"2026-04-10T13:57:00.80064Z","last_seen":"2026-04-10T14:35:56.209054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd089205448cab2010d87650112a24f6","sha1":"2c0ed772386558dbbc2ff31b44c826e3074319ec","sha256":"f8ae1da2891f50e441b5d3e7783787afee7b318433838328812869631a645835","sha512":"b50030b908d0ae0530b6ad2b8d51cadaac24c61073ea7c96e2dd1fe2851e3f2a2e8453c0866b948696ce4e0cd3b45d2e58cdf5fc7207161cc58bbcf843277628","ssdeep":"","tlshash":"b9e068bea8f750549e7334fa042fc381fa339007e25cc501fe1c0a242f46a14ba29d05","size":437,"data":"","first_seen":"2025-06-17T19:53:01.90481Z","last_seen":"2026-04-10T14:35:56.209577Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/js/bootstrap.bundle.min.js?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-04-10T21:10:40.115341Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.14","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"451b0b2a11d4871fa8354048bad72ba8","sha1":"9e3e845afd1b28653b350f68fce313eefdb990c3","sha256":"54a0bcde9445a58fd5802f2a369aeae5132201f747bf8e2077b1835b9ff4f6c1","sha512":"ba8655b947eef6aab57004a35e6a97620e605862f039ff6cd32634f3f861fd15bfb6d9b80bd4bf8cde2f811ec55d33fd776563c8227693451ae138dbe8438e5a","ssdeep":"3072:ORRPABIjxpMIO81R95QMOZlIXMILgaPdnRErKzA:ODjS81R95QMOZlIXMIs+cKzA","tlshash":"40c3f8dc72e7b47613936575406fa20ab33f2c95644c8920e226e9e53c78c4ea277f6c","size":121286,"data":"","first_seen":"2025-09-09T13:22:48.411685Z","last_seen":"2026-04-10T14:35:56.193046Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/wp-dark-mode-js-extra","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"135c1ce279d30cda7d2d25a70b513989","sha1":"ff87bb2c8abf40c2e4a291efccc3759043bfe145","sha256":"62ea8e5f5d28d7fc5dbdb17878efdad1330ee2dd149b6bbaf41973005f75cb6b","sha512":"85ac710a6eda5c92c82247d3db5ce2fdb10d3c3a696a488e6e27af77c42beace15c5ce60f7b7f7c71533c4a9ed98edf4a61ca13bf0f13c9221ea8394cadd6e2d","ssdeep":"1536:MP6den/s6fJoQW5hgDyJDTKmPLS4bTKmRhgDyJHVNQ3Ke/Bii+xCTGKkxk:C6den/sJJRJJ+/9J1","tlshash":"a193e9f693c872e4d547e7b0dc238869755f34fa7fd5c7888668dee4b2110ac8a89c80","size":95869,"data":"","first_seen":"2026-04-10T13:57:00.798716Z","last_seen":"2026-04-10T14:35:56.210113Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.14","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b51c15e54a16031fa1dfc609eef6062b","sha1":"10d70b6f5f758d302f2b56eab554193f0b71a3b1","sha256":"bfa90b38ee707462a35912c85aa0361ab98a40c9ee93e749919642cb3c188f13","sha512":"158bbe0bc2597caec87a7ff7c4798d9499820021bb6562908d4fa2013c6ddc5570e165049e9464bdc4820e981296928cee1a4cf8d47bbb24687aa3fbe629f317","ssdeep":"1536:va9oT9IX9n0ootQgzM6h75MtrHTEhjC4uSpmr:vau989n02EM6GsmQpmr","tlshash":"f3735de372f56872436305d1e53e4e0af33c496ab89e445c702e4dc92fa5c09bb63e69","size":77408,"data":"","first_seen":"2025-09-09T13:22:48.447253Z","last_seen":"2026-04-10T14:35:56.189068Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-10T23:50:01.832214Z","times_seen":141089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/n8xuj61qcje2q524afvkguknaomjnox6.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e45801852a51a9a5f2eb70249b1d87d","sha1":"3ed5407a0e743c1dc6343a44578eb0db0a0e7f78","sha256":"dac5ff6b5c9296d3cfa7cbe77c28d3871eab415d1123bec077b64de79993372b","sha512":"bc0f0ede79f7e3d0a58e16503010319d0fb36e60a7eea9cd47d9fab010274fc49e77054671672586509293802e11c90c314c9ef9df9d3a4c276565b3e18ad295","ssdeep":"96:oqyozLgwyMGBAMa4qc8uLetLu9UinoAXKNOvydcQ7fFB/41w9O9GBdYPuI:Kozjy841LeEVn6ay1qFkzYPz","tlshash":"d8d1d991316828650226966d307fb30732a9712f650e91a4736ddceebd38dc3814feeb","size":6426,"data":"","first_seen":"2026-04-09T13:23:20.243671Z","last_seen":"2026-04-10T23:01:50.465732Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/widget.f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e1e06e4d308505cbff928b8db1bfecd","sha1":"00a1c24397db78b4e2bc1c7de4dd10424bd75bfe","sha256":"cf3b5c96b3994fd1e424685856af491b352782781e7238756c1346b2f49ffacf","sha512":"30f02a346c5937cc8d60d20da56cb574a89211d41686d7b29f9ecd60bf2eb004ecd395717e1c7893f9159e8b4dc7165511c23e8ce243269012f3afbbf0785735","ssdeep":"6144:LCFZ+uk/m4qBwVX5J24LnSNTaWjflX96vs/kEIehb/JiI6ezQT93W+kiR8:LCyuk/mQpJlLnSt60Oehb/76lXR8","tlshash":"55c41ad871d2f06247e312a6407f5107f33e1959380d8490f668edeab87958ea237fad","size":587127,"data":"","first_seen":"2026-04-09T13:23:20.249814Z","last_seen":"2026-04-10T23:01:50.520849Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0eced7c5ed4167d42db2b6b569622297","sha1":"836d243a3f04137c0df3b55cb9d70307b272266a","sha256":"5e3f0ac1bacc2b6520acaa3e0bcd0ee1c2b1c37fcac7ed0c01c3bfdf52bf31e1","sha512":"63df0d8369ab857e5a468b3bb8df4e1c701e3d1d6d6d3c3a88ff2ef6fdd61f730ca80f735315b169cd076d9eabc3a60affe5f030261a1626c6f71662e3d4054a","ssdeep":"","tlshash":"29e02c2be0fb3898663f22e9917bb7099262300a60d28070ba8c82a00f284202322884","size":350,"data":"","first_seen":"2025-06-17T19:53:01.905781Z","last_seen":"2026-04-10T14:35:56.210617Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/wp-block-template-skip-link-js-after","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8884ab4ed21eb0cb381c03f82fd71fae","sha1":"72a52da39c5e879355d1de415ca31d8c07c23cc1","sha256":"83842f19f1aa66c08e318f22788de8553df9a2ad89efde81774a4fa8817c3fd5","sha512":"c701a4461fb1ea93e6061cb66bbabc89ab1d084d98e86c2c1d2029906a2da1b641f4cf8fac80fd6b2d94f0607dfbd24d6b90d6c815f2783e8e4a464e987622c4","ssdeep":"","tlshash":"802195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1366,"data":"","first_seen":"2026-03-26T12:16:14.631153Z","last_seen":"2026-04-10T14:35:56.211182Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/extendable-navigation_customizations-js-extra","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8399cc639a602063aa18bb0875b145e","sha1":"8464124c0defc2770e28265ccdcf83e8f888d964","sha256":"d6bc316616334b77f483366911e33ee29ca7f2cd54ee0dd93a583cf0e3f8bf5f","sha512":"517bfe3e21776454ef87802c0d0398afdc8d9535c5113308761af5a80fc67f31f4d1d8088511633c1705959f09e72c25c656caf05e4536388ec93edcc644fd2f","ssdeep":"","tlshash":"cff02b50c8e82fec4822cc31025041a35082c941c05301a8c1c846041030c41bf5cf01","size":441,"data":"","first_seen":"2026-04-10T13:57:00.805155Z","last_seen":"2026-04-10T14:35:56.21167Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/js/iziToast.min.js","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-04-10T19:52:05.42537Z","times_seen":2496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/public/js/hyiplab_public.js?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"985a02810a4b7deadc3bc66df4ca163d","sha1":"d1ace6e4ef6cd67511a08efa2252c55fe0eb0b15","sha256":"0c66f2ddba5c20f5877ec26562f2a4402a68c8517cf6adf20d5e8939af412e3e","sha512":"b72838b8ec5f32b397b147af6a06c2c43595b73a525d666d9c1cce2726fd1a5b865e9a3e1595d6895f388e0e71c88ab1f21c5e729e8e4d068d8cb2b034e224dc","ssdeep":"","tlshash":"21519d6db0456272c57b7f7e2716d289f934456b7101aea63c5c62e02f32ba046f2fc0","size":2650,"data":"","first_seen":"2025-05-10T19:31:49.429183Z","last_seen":"2026-04-10T14:35:56.20462Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc101c0649d24929609f5716da571819","sha1":"8b8016e9a339dfb8a9b813196875d9f24629e4f6","sha256":"d8b3e308af9efedcef385ab9461f07823751e2bb26a80d78081f20571103fe00","sha512":"f0e69c127345166f3d8551267907c1abd3ea6228730d21ebcd2a17ce46e6cf1b0dfc76ee452c1b16487d8fed1b67cdd2b01d5aa80f92dadd0c4de27f8c38e443","ssdeep":"","tlshash":"e1d0221e40e2984c0cb33099786ea51558333a03640ab8123fcc22000f0a16ca356b2c","size":243,"data":"","first_seen":"2025-06-17T19:53:01.908315Z","last_seen":"2026-04-10T14:35:56.212208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/chunk-WidgetIframe-f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"143d6e17598989e526b40d0a54a3390e","sha1":"34c60260da38c7b65c2467982e4549a1c48b80c6","sha256":"0e2c35760278ba8906120ff557d7f882bd1cabff6dcf9bbc8b54c118456185b4","sha512":"0992aef0e89685e7844f647b28718c0c49b7a3865f010460d74539f4bf8198036c18758e292fbd917145b7001fffac2c66842980b75d37cdab22dcf973ef3798","ssdeep":"12288:SYOi6R+bvNyRB6yx8mUPPCrYGs0aFt9IF2mHKP0l:ii6R+bvNyr6zCPs0aFt9IF2mHKP0l","tlshash":"35946dc270537468bbe351ead4a7584c757e340dba488468f6bcbce8158a4d86373fac","size":431952,"data":"","first_seen":"2026-04-09T13:23:20.248228Z","last_seen":"2026-04-10T23:01:50.351205Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-10T23:54:59.170186Z","times_seen":701761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-10T23:51:37.07003Z","times_seen":653374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae5a852b9ff48e2c8bb16c600a0e1801","sha1":"04ba0736fb6fc7f021b90772d37c9858e43403d1","sha256":"85948cb636f4fb60f5bd875629625d531b6e0bc709296f0e202d3955e0e9749e","sha512":"7a01069ff25e3f0f69aebb3dac73f14414fcd18321e283ff3935d6c96a269629df41ad00d4a5c3ac1bb62c67123ed59c9f17fb76cefed846892b9a43144bd78f","ssdeep":"","tlshash":"1511ce3c46b260750223a2ff03e7528179b09417e44688d97a7cc74d6fc0960e776b5e","size":1049,"data":"","first_seen":"2026-02-26T03:41:55.541419Z","last_seen":"2026-04-10T23:49:42.427234Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"635b56fe0894a36e2c86dd730a43a722","sha1":"d227584fffbebc6ad603171b040e40c8acb89138","sha256":"3e24ebfc1401f25796d76d749412b30e97aaaa15068127d626451e5f27e0b56c","sha512":"c6f2e2d3f5bf20040d47c1f5167d7de1f2beecf99b9f4e2b57d5e81f680a9f29e8f9c56b03f6db51b3ec2833191c4bc4db31519840f2c9979e02286a55fe4888","ssdeep":"","tlshash":"3461969ae77a38dbb2f900f2697e0d47eb614435d6c8d038c9bea3141cb5893c274b46","size":3289,"data":"","first_seen":"2026-04-10T13:57:00.803354Z","last_seen":"2026-04-10T14:35:56.212742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/wp-dark-mode/assets/css/app.min.css?ver=5.2.14","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/css/app.min.css?ver=5.2.14 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Sep 2025 21:55:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 69007\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":162102,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"165444373814002f8d080778ee40782c","sha1":"534f2f88a5e32bea821c8f78d4ef20ec89320a7c","sha256":"3d73342e59c01b5dcc36d37b56ea6eca52415d06f43f9b07c8ab152258bce2bb","sha512":"15d9d708f28cbca180669c5df9266a4495c97ef4c673b3c0122f9960271478d15959fd2835c46119260a75d0b133a8eb899e63b1862643aa5a4bcad04a9084f8","ssdeep":"3072:qRLRNRTR3R3RTR7Rg3zIm52xyLMPtOvc6qtNqayyzUVh/5TSdVgj5MpqYq74oqXg:qRLRNRTR3R3RTR7Rg3zIm524km2p3sFv","tlshash":"daf3d9a330faa8f8fa131bb07b40dd94822e51f158f97c9d719312e9c9695f8be54d08","first_seen":"2025-09-09T13:22:48.418281Z","last_seen":"2026-04-10T14:35:56.188282Z","times_seen":639,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.14","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/js/app.min.js?ver=5.2.14 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 21:55:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27377\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":77408,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26226)","md5":"b51c15e54a16031fa1dfc609eef6062b","sha1":"10d70b6f5f758d302f2b56eab554193f0b71a3b1","sha256":"bfa90b38ee707462a35912c85aa0361ab98a40c9ee93e749919642cb3c188f13","sha512":"158bbe0bc2597caec87a7ff7c4798d9499820021bb6562908d4fa2013c6ddc5570e165049e9464bdc4820e981296928cee1a4cf8d47bbb24687aa3fbe629f317","ssdeep":"1536:va9oT9IX9n0ootQgzM6h75MtrHTEhjC4uSpmr:vau989n02EM6GsmQpmr","tlshash":"f3735de372f56872436305d1e53e4e0af33c496ab89e445c702e4dc92fa5c09bb63e69","first_seen":"2025-09-09T13:22:48.447253Z","last_seen":"2026-04-10T14:35:56.189068Z","times_seen":244,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/images/logo.png","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/images/logo.png HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Sep 2025 20:32:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9733\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 139, 8-bit/color RGBA, non-interlaced","md5":"3f50c3d06262d176f44fe97732dd8431","sha1":"bbc06dcb8b18c7705afc5f72521e68f95577fcb7","sha256":"34306281208697710c24e55813fbfbc3c6f7dfc7955b388d1c1abd789bfeabda","sha512":"09bff41b2c86dff2bf098c5e202431071e264670d640fceacb40233a7279dc8f0e24a473d4e3acb62b07d62ecb3048dda8611b92f707ef5a0ab95bf8ba705e85","ssdeep":"192:oKwIy1gljc5O0GxFzUToKHx/3AAyNJEfs0nty/jRlUwy/5cYQr8ZnpXHe0ni:4xeljc5bMKBxAnNSxnty/HU48Zi","tlshash":"52128d479a19abfdeaef124474636876fadbb8d48414bbc8e63a80dc158368363c40d1","first_seen":"2026-04-10T13:57:00.785314Z","last_seen":"2026-04-10T14:35:56.189775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/n8xuj61qcje2q524afvkguknaomjnox6.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /n8xuj61qcje2q524afvkguknaomjnox6.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://code.tidio.co/widget-v4/1_423_0/static/js/render.f01b3758afa36dfb54bb.js\r\nserver: cloudflare\r\ncache-control: public, s-maxage=300, max-age=0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BZe49kirPVWAYK40wLbbt3V%2Bc%2FtgRGqHcHNk6KyCD8ZPxJvMRKn47pjdeDd%2F3v5NyD0PwHUdRg9XAjnP7B6lssBKiApR5TqRXktFTVz%2BwooAO0V3MKsBYifLMHBkQxE%3D\"}]}\r\ncf-ray: 9ea27a82a81b1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":37,"dns":21,"connect":1,"send":0,"wait":192,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:41.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 16:45:18 GMT","end":"Sat, 30 May 2026 17:45:14 GMT"},"fingerprint":{"sha1":"EF:8D:ED:C7:B3:46:8A:91:47:71:92:F2:D9:B0:67:EA:C1:FC:5B:89","sha256":"01:CA:DB:EB:79:61:2D:B3:FE:2B:09:FE:44:84:EA:5B:6E:C1:3B:81:A1:0F:8C:9F:DE:2E:16:1E:59:45:06:D9"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://geminicopier.com/\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 21\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9ea27abf4f8b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-10T23:44:45.881695Z","times_seen":83988,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":90,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lora:ital,wght@1,400;1,500\u0026family=Maven+Pro:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Lora:ital,wght@1,400;1,500\u0026family=Maven+Pro:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 14:35:31 GMT\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13050,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a4687379f7bdd213cbde7b2d4ae2ac5b","sha1":"57a05a5a88d445fe741db313576e644322a15ccf","sha256":"138ea55bb4aa1fef9c621b2bed4ae60d4532ebf594af292e7046ab189ada262f","sha512":"18ec05e80d74422b0a47134222776547f28303448c59dd9c92dc9698e7a849f23040c61b5116d17bd2648842a0d817df16078d6295b052e05d383a10b37ad182","ssdeep":"384:3QnRNQGqY42NOWbnO0QpqY42WxOuoDijVOisKpZ:evVoWoDaVOlKpZ","tlshash":"d04211a100179100ab571dd223df7e36ee4ea2647040c536abfd5b8bfd9eda6636831c","first_seen":"2025-09-15T08:10:45.214965Z","last_seen":"2026-04-10T14:35:56.191831Z","times_seen":36,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":97,"dns":0,"connect":21,"send":0,"wait":32,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:15:49 GMT\r\nexpires: Sun, 04 Apr 2027 02:15:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562782\r\nlast-modified: Fri, 29 Aug 2025 03:25:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20140, version 1.0","md5":"983bb0feb829de031ab574857c119dc2","sha1":"2ebc112e1e080219eed917c71b49de3cf4877f22","sha256":"968b1a6ec61d2e6d238adbbb8ecca304cda2e251bbef7f9085df187c993195a3","sha512":"f3b457a3fea5819d9527f285c10046df5757a60845e8194c1a92042ad71ef48bb3e6253e551a4bc01a1bce72dd8013e199fd36d2854f823ff309abacd0aa1772","ssdeep":"384:FXRx3n9UoDtMpUMUk3t8dH3qrQEiCI8bgDZMJHW85SV6O0LRV1wXMUSj0OpUdWn:hR19Ryv3t8dX+Q2eDZ2f9O0LRKMUSjjL","tlshash":"c292cfe71bd17d1de88ebe3139701ac10baed4b347e6459290ac8ab6161d2cd544f3ce","first_seen":"2025-03-05T04:36:04.179611Z","last_seen":"2026-04-10T22:49:49.836112Z","times_seen":1538,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":10,"receive":2,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.14","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/wp-dark-mode/assets/js/dark-mode.js?ver=5.2.14 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 21:55:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37386\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":121286,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (49913)","md5":"451b0b2a11d4871fa8354048bad72ba8","sha1":"9e3e845afd1b28653b350f68fce313eefdb990c3","sha256":"54a0bcde9445a58fd5802f2a369aeae5132201f747bf8e2077b1835b9ff4f6c1","sha512":"ba8655b947eef6aab57004a35e6a97620e605862f039ff6cd32634f3f861fd15bfb6d9b80bd4bf8cde2f811ec55d33fd776563c8227693451ae138dbe8438e5a","ssdeep":"3072:ORRPABIjxpMIO81R95QMOZlIXMILgaPdnRErKzA:ODjS81R95QMOZlIXMIs+cKzA","tlshash":"40c3f8dc72e7b47613936575406fa20ab33f2c95644c8920e226e9e53c78c4ea277f6c","first_seen":"2025-09-09T13:22:48.411685Z","last_seen":"2026-04-10T14:35:56.193046Z","times_seen":284,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:29.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /login/ HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://geminicopier.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nset-cookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-litespeed-cache-control: no-cache\r\nx-litespeed-tag: 97a_home,97a_URL.55762f6979c1c7cec78bc674da75a804,97a_H,97a_\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 10 Apr 2026 14:35:29 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":149388,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (25985), with CRLF, LF line terminators","md5":"1cb4e24a008a7ce6e9b7a3517c756020","sha1":"00cd87977b58a36864ecf016301341767ef01ce4","sha256":"3b3a84099af7619184d8d9b25e48acd8ba39d0113734c56ee3f1fca336dad259","sha512":"dedefe3c3df0a34471d32822bfc5097e6a66b83c72ad904ae908abe55e459bfd491db80f970e1e5c9c5b73798c2a2d91320e61649e9cfa751b0a0933b4e39290","ssdeep":"3072:LvR1rDlcdy86den/sJJRJJ+/9Jr0FHVh/6hAGv:LJ1rydN6VTK/z","tlshash":"f1e35cf2a2d861e0b547cbb4d827a929740f34793f81d7d4b1fc89a8a7910be41dbd48","first_seen":"2026-04-10T14:35:56.193576Z","last_seen":"2026-04-10T14:35:56.193576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/css/all.min.css?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/css/all.min.css?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12370\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-04-10T23:36:03.162215Z","times_seen":34579,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/css/iziToast.min.css?ver=6.9.4","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/css/iziToast.min.css?ver=6.9.4 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9933\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419)","md5":"ca2f839e9a41207ce4d486b75b0dc926","sha1":"398acaa4eca2baa749a90175fe24d3c2a35f19ca","sha256":"20b2776eaee552defc7c9b25bfef14a891f0dd4a12ac7320d689d749e1ca0fa7","sha512":"d9feb978fe3c1c26cbb2efb380a70eeb7501f5631343a998abfc84766f9a6d2f1e521cee40bcff6b381515a7a1d8fb4726af583502ee23549934757766257f5c","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppGf1oWQA1","tlshash":"711345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:39:17Z","last_seen":"2026-04-10T19:52:05.426639Z","times_seen":1741,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/public/css/hyiplab_public.css?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/public/css/hyiplab_public.css?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11695\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2934fbc34dd6edcfea269eb87fdac8c9","sha1":"777d06112e048a82012830209de2743b0346c971","sha256":"adcc256e9b97258bc10810243f4b207d3e959c7fc52506f6ea2f6c6fa145ad3a","sha512":"94f31bd8d25ca64d1eeac2f19cb078d3edf658a98c025d4067a60771b8f3fa02f6e0232a56f3dc7aba85bd621254229a5c7f209a53a66e707f0f5751fb27a091","ssdeep":"768:pI0vA+qdhyWJpfOdERGmNiJGxjpQfYXqZuzBsg7YR5p3cJI:R0QfYXqZA7YRcO","tlshash":"86930355da1710f62a37b7385b96863efb7610639e0d0ab4bacc13780ff92b44111dae","first_seen":"2025-05-10T19:31:49.438583Z","last_seen":"2026-04-10T14:35:56.195442Z","times_seen":5,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/js/iziToast.min.js","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4784\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-04-10T19:52:05.42537Z","times_seen":2496,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/fonts/mulish_SGhgqk3wotYKNnBQ.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27400\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\netag: \"69d77e12-6b08\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 101243\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vASM2i%2FuvXxzMzZzn2sLB5cnJIDl2ZBOT70mU5VdANVHpyNAIOOF6QW5fwP59sAGBl%2B%2FBILS3CV31xlQXSyGACp3FV%2B4oeRoFpvUcDuYgH0qw4WIWgEmkm%2BvteYSxEw%3D\"}]}\r\ncf-ray: 9ea27a8479881ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27400,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27400, version 1.0","md5":"d96e6550e1c6b3063f60875bfd4a0870","sha1":"c1b22f0d075bd4413686866134fffcccb3f487b8","sha256":"577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8","sha512":"8446c25d840412230bb91806faab73de9dee5da6a8aae2c980431879d749ca8090d6879e6f42e3be27b416a00ee759dee2febc34df97c3ffa81ae15ce2196802","ssdeep":"768:F4xt+sRZS5Y1nK6uicEP3rhaxoQAoF6jLIRt:F4x3fcUrhOoK63IL","tlshash":"4dc2e10fe287737a5418f23ea969c86e365865503a2e67f1dc1a3ab51e18137b3c4f50","first_seen":"2023-04-08T09:21:33Z","last_seen":"2026-04-10T23:01:50.451169Z","times_seen":6946,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-admin/admin-ajax.php?action=wp_dark_mode_update_visitor\u0026_wpnonce=1ec48b522f","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:41.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php?action=wp_dark_mode_update_visitor\u0026_wpnonce=1ec48b522f HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 239\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m; wp-dark-mode-device=light\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":239,"data":"visitor_id=false\u0026mode=light\u0026security_key=1ec48b522f\u0026meta=%7B%22os%22%3A%22Win32%22%2C%22browser%22%3A%22Mozilla%22%2C%22browser_version%22%3A%225.0+%28X11%29%22%2C%22language%22%3A%22en-US%22%2C%22timezone%22%3A%22UTC%22%7D\u0026ip=91.90.42.154"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://geminicopier.com\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\ncontent-type: application/json; charset=UTF-8\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-length: 84\r\ndate: Fri, 10 Apr 2026 14:35:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"540dcc61b51ee1ad5f41d43a14d44122","sha1":"c2f0c989e845fa23054001dce924bb0d2143daff","sha256":"cf4cb4ad4dd18bd2fb3caeaed4cc701c8e52c7b2db6d5b1f289197cb3e727042","sha512":"8851637cd57c68fb1bb4897b3cd5bbd7dca826bdd4ad1870a5f11b6d04e31d39bfadea779900d88f9e06db0b9f794d4c902a488e39358bd4bef95a7496d8490a","ssdeep":"","tlshash":"29a0122319000cd75645136120243c4050d7728340c05105d00c5009eb0e41133c7379","first_seen":"2026-04-10T14:35:56.197412Z","last_seen":"2026-04-10T14:35:56.197412Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/simple-post-redirect/css/block-styles.min.css?ver=6.9.4","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/simple-post-redirect/css/block-styles.min.css?ver=6.9.4 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Jan 2026 01:53:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 626\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2680), with no line terminators","md5":"c895bd4ca29593beae1369c83d822a86","sha1":"0090c35f98c10fd1d0076837b8a7e8e82f0900bd","sha256":"b3f39200be6d4a1dd05e6e0ddc6d59769217f6eb2b0a2e55c5d92447fe8e822b","sha512":"db8e789e1b4230ba86942e30621dfa1bd399d727b47b4ca2fcd2d6771450006f380005194c51d8f1de5696570ee688168458d55c3efdc916874138dbb4734098","ssdeep":"","tlshash":"b9518c85b2823def65064c1b914afe79a98e453384edcdfeec41e2d21ac25e9800f757","first_seen":"2024-12-07T19:15:32.248443Z","last_seen":"2026-04-10T14:35:56.198408Z","times_seen":308,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/css/bootstrap.min.css?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/css/bootstrap.min.css?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21169\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163826,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"1477c4cbb0fe5d43e157c84981325db3","sha1":"595aebfa80b5afe20746a0f0af37c3dc3f9b502c","sha256":"8e23c3b3f22abb77e233c65f438c4190a773637c591d1fe15587bfddc6f81e6f","sha512":"bed809b5b97ed858b6a09f474ec37a06768981ebf311fba3b234a1828fe3c56cc2f78c23e326b0f288b17789a6b7f9e232b2474b8a5abc28de49c21e4ed48a50","ssdeep":"1536:At04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fT:At04/0VUpz600I4fT","tlshash":"a2f3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-09T08:56:00Z","last_seen":"2026-04-10T21:10:40.072404Z","times_seen":336,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":498,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/css/line-awesome.min.css?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/css/line-awesome.min.css?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15174\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89729,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-04-10T19:52:05.415684Z","times_seen":6315,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/themes/extendable/style.css?ver=2.1.4","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/themes/extendable/style.css?ver=2.1.4 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 08 Apr 2026 23:38:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5269\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22274,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5513)","md5":"bfc72d1e3a56c7530ca377bed7a3a773","sha1":"26e04f22691156c86f7656f3a004b9e7caf0666a","sha256":"f45351707392c8be7afd9008b96828540e8557461ff20d1186732a136fa64870","sha512":"faf4eaec953c65f1654b2c0f9de47ba0fa0a6622d4889a98740f7d1d1cc1d3454ac3e617511b997981c1c7cc05ba3573b084c48ae0b589128880f400785e33b6","ssdeep":"192:EGnjwEZ042hSFHGzCzYzSzL5euNw9PSCzOz9znszTqO/BkZi3ckUA8IGGuQo10Mg:JsgyQ8aw3kFnu15MAaAZDbY6vPdUdq","tlshash":"7ca2d8a19ef318f4256bc3371a6db244e62b94038b057bd5f1f6e194578c7a800af74e","first_seen":"2026-04-09T01:14:37.172666Z","last_seen":"2026-04-10T23:49:42.441256Z","times_seen":11,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Courier+Prime:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Courier+Prime:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 14:35:31 GMT\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1760,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c58eda48dc6d9c89e524a39d815f9032","sha1":"4d2e5f7f35e620ef568b762aab3f86c8f50f284f","sha256":"c47fa0c18e29117c6483ace106a9e09daafc2c1b5e7c7a1c2eb01e7be824f05b","sha512":"3032c7cccd4c1dde69d59ee404177f69f278c546cb9550690b43fa0aedd28bd1b0b593ffb2e0f7933c8b6ece8881ae6f97017d0cf9c70c28cdd351d2a517783b","ssdeep":"","tlshash":"1031ec81046ba504db930cc123d93d32fe5ea2546948da396bfd149cbc6ac2a5312f4d","first_seen":"2025-09-14T18:11:09.94654Z","last_seen":"2026-04-10T14:35:56.200636Z","times_seen":64,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":121,"dns":0,"connect":24,"send":0,"wait":33,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/uploads/2025/09/cropped-IMG_1044-1-192x192.png","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-IMG_1044-1-192x192.png HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m; wp-dark-mode-device=light\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 07:50:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11227\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"e5defad231df1b41d4212f5dd4e0efc8","sha1":"a9e2279edc7882da45a8fd47b81838cb3e5818bc","sha256":"31e08ba2df7ecb98fe2f2f428b851a486614734bdab3ce93a063eff8bd48f9ba","sha512":"0ea0c54ce86d416106201d7ab0013159e278b6e3270cdba8a42023531348609a725b6d242e5a132dda2cb35ddb9f24554dd04f7caa10675437a0e018464987b5","ssdeep":"192:ZVApZccoJXOe/UYHak8TvsSxc/cyaLsY+YVicExEtKKWPFfMJNwC7ka:MgXOshGsSx8FyDlVJSE89fMJiqn","tlshash":"7432bfcf160195a19ac572311cba1f53e4588a2df0d94bdcdb78ab6d11c3a8a6022fec","first_seen":"2026-04-10T13:57:00.788043Z","last_seen":"2026-04-10T14:35:56.201132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//notification-sound.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//notification-sound.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28255\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\netag: \"69d77e12-6e5f\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 101240\r\ncontent-range: bytes 0-28254/28255\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4aC2RgSPY01T7OLry7tB6zEiqX%2BC%2FzUSPIu4aryatMJzojtG6wqxu%2BUtRYWXpPcsgJLmptGmx4OowsjZi%2BvfjgtOgQiElrlawpVGY0lupLimoHMJZcczTKbEvTeUSA%3D\"}]}\r\ncf-ray: 9ea27a84a9bb1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28255,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"ed632238ac260d2ff13a5b319163ea80","sha1":"ec3d658a6b985654354abd43c1688d9d020f9eee","sha256":"b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea","sha512":"951d0ec7b29dad74312dd617d2b715863f417e64e29702535ba6e9fcf231a8dcc2f3de89d5abee1b51fe03f7d3209eae13c17ca04878d7634e3841714e2059d1","ssdeep":"768:N4mLXoawnNyci56NczRzQJhvEgmTKBm9zt1J85voWDmrpNxe:SooaE8B6CzRAhsBmBm9zt1JVlrpNxe","tlshash":"d4c2d0c724248328f92a0db47cb70aabc250bf6804b14be6e34e93015eeffc50f4955a","first_seen":"2025-04-16T11:16:17.238101Z","last_seen":"2026-04-10T23:01:50.39084Z","times_seen":4763,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"socket.tidio.co/socket.io/?ppk=n8xuj61qcje2q524afvkguknaomjnox6\u0026device=desktop\u0026cmv=2_0\u0026ver=1.423.0\u0026seid=cf122ae8-6f75-4849-b9e4-2bc97bdbfc88\u0026vid=1o2n37349qo891634s433449osr5q8p3\u0026EIO=4\u0026transport=websocket","fqdn":"socket.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"34.240.98.173","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 22 Dec 2025 00:00:00 GMT","end":"Wed, 20 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"52:8F:77:02:20:27:EB:C3:D1:B0:3B:95:A0:9A:54:F6:F5:FA:79:C8","sha256":"69:63:8D:8F:D4:FB:49:A4:9B:3C:48:80:87:0B:15:2D:52:5F:B2:9C:0E:38:74:28:00:22:E4:EF:51:4F:C9:44"}}},"request":{"raw":"GET /socket.io/?ppk=n8xuj61qcje2q524afvkguknaomjnox6\u0026device=desktop\u0026cmv=2_0\u0026ver=1.423.0\u0026seid=cf122ae8-6f75-4849-b9e4-2bc97bdbfc88\u0026vid=1o2n37349qo891634s433449osr5q8p3\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: socket.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://geminicopier.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: X3WYHXpszjpaO9ZXNjDvNw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nAccess-Control-Allow-Origin: *\r\nConnection: Upgrade\r\nSec-Websocket-Accept: WltdJ9TijZpJncALvqJ+cqRgDDY=\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":1,"connect":33,"send":0,"wait":35,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/login","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:28.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /login HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://geminicopier.com/login/\r\nx-litespeed-cache: hit\r\ncontent-length: 0\r\ndate: Fri, 10 Apr 2026 14:35:29 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149388,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-10T23:54:59.170186Z","times_seen":701761,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:15:49 GMT\r\nexpires: Sun, 04 Apr 2027 02:15:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562782\r\nlast-modified: Fri, 29 Aug 2025 03:25:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20140, version 1.0","md5":"983bb0feb829de031ab574857c119dc2","sha1":"2ebc112e1e080219eed917c71b49de3cf4877f22","sha256":"968b1a6ec61d2e6d238adbbb8ecca304cda2e251bbef7f9085df187c993195a3","sha512":"f3b457a3fea5819d9527f285c10046df5757a60845e8194c1a92042ad71ef48bb3e6253e551a4bc01a1bce72dd8013e199fd36d2854f823ff309abacd0aa1772","ssdeep":"384:FXRx3n9UoDtMpUMUk3t8dH3qrQEiCI8bgDZMJHW85SV6O0LRV1wXMUSj0OpUdWn:hR19Ryv3t8dX+Q2eDZ2f9O0LRKMUSjjL","tlshash":"c292cfe71bd17d1de88ebe3139701ac10baed4b347e6459290ac8ab6161d2cd544f3ce","first_seen":"2025-03-05T04:36:04.179611Z","last_seen":"2026-04-10T22:49:49.836112Z","times_seen":1538,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":94,"dns":0,"connect":7,"send":0,"wait":8,"receive":2,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/chunk-WidgetIframe-f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_423_0/static/js/chunk-WidgetIframe-f01b3758afa36dfb54bb.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d77e12-69750\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 101244\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iKvp1biVAeahrcZ40YcK4ccimeEjQIjeEneE%2B6MzXaEDI8UvzNu4ugO2jL658xxgZDmmE6RsLsaMYvLBOfWo%2F%2FeT%2FZkQddTUQnTIUTBn253dTHb62C%2FAHONJtiJe%2BPE%3D\"}]}\r\ncf-ray: 9ea27a8479851ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"143d6e17598989e526b40d0a54a3390e","sha1":"34c60260da38c7b65c2467982e4549a1c48b80c6","sha256":"0e2c35760278ba8906120ff557d7f882bd1cabff6dcf9bbc8b54c118456185b4","sha512":"0992aef0e89685e7844f647b28718c0c49b7a3865f010460d74539f4bf8198036c18758e292fbd917145b7001fffac2c66842980b75d37cdab22dcf973ef3798","ssdeep":"12288:SYOi6R+bvNyRB6yx8mUPPCrYGs0aFt9IF2mHKP0l:ii6R+bvNyr6zCPs0aFt9IF2mHKP0l","tlshash":"35946dc270537468bbe351ead4a7584c757e340dba488468f6bcbce8158a4d86373fac","first_seen":"2026-04-09T13:23:20.248228Z","last_seen":"2026-04-10T23:01:50.351205Z","times_seen":37,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/widget.f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:32.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_423_0/static/js/widget.f01b3758afa36dfb54bb.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d77e12-8f577\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 101244\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OmyluKULGXlJ8jGAUXJ25CnY0K4RARebBSejWLNneRxyhyzA3LJ9JFAArd078IgPm1MXXr0EVffHYnEddOy7ikYhnNiVdyL05MjLTn2j1mSGOHkT0%2BBI3B8HMbTpk%2FM%3D\"}]}\r\ncf-ray: 9ea27a850a2c1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587127,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2e1e06e4d308505cbff928b8db1bfecd","sha1":"00a1c24397db78b4e2bc1c7de4dd10424bd75bfe","sha256":"cf3b5c96b3994fd1e424685856af491b352782781e7238756c1346b2f49ffacf","sha512":"30f02a346c5937cc8d60d20da56cb574a89211d41686d7b29f9ecd60bf2eb004ecd395717e1c7893f9159e8b4dc7165511c23e8ce243269012f3afbbf0785735","ssdeep":"6144:LCFZ+uk/m4qBwVX5J24LnSNTaWjflX96vs/kEIehb/JiI6ezQT93W+kiR8:LCyuk/mQpJlLnSt60Oehb/76lXR8","tlshash":"55c41ad871d2f06247e312a6407f5107f33e1959380d8490f668edeab87958ea237fad","first_seen":"2026-04-09T13:23:20.249814Z","last_seen":"2026-04-10T23:01:50.520849Z","times_seen":37,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/chunk-WidgetIframe-f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:32.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_423_0/static/js/chunk-WidgetIframe-f01b3758afa36dfb54bb.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d77e12-69750\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 101245\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApgTX0cDG2LZl88ACjuqSb%2FwkemuQvwfZenRVLUMsC9ML%2F4lVo37oF9iQAXD9eOHajeXqZNXq3A9O9WcpsJ8MInB9e63pb%2FLPsvne1LeTxoBQG8DbKnGPa0%2FDtS2NNI%3D\"}]}\r\ncf-ray: 9ea27a888de41ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":431952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"143d6e17598989e526b40d0a54a3390e","sha1":"34c60260da38c7b65c2467982e4549a1c48b80c6","sha256":"0e2c35760278ba8906120ff557d7f882bd1cabff6dcf9bbc8b54c118456185b4","sha512":"0992aef0e89685e7844f647b28718c0c49b7a3865f010460d74539f4bf8198036c18758e292fbd917145b7001fffac2c66842980b75d37cdab22dcf973ef3798","ssdeep":"12288:SYOi6R+bvNyRB6yx8mUPPCrYGs0aFt9IF2mHKP0l:ii6R+bvNyr6zCPs0aFt9IF2mHKP0l","tlshash":"35946dc270537468bbe351ead4a7584c757e340dba488468f6bcbce8158a4d86373fac","first_seen":"2026-04-09T13:23:20.248228Z","last_seen":"2026-04-10T23:01:50.351205Z","times_seen":37,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/user-dashboard","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:28.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /user-dashboard HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://geminicopier.com/user-dashboard/\r\nx-litespeed-cache: hit\r\ncontent-length: 0\r\ndate: Fri, 10 Apr 2026 14:35:28 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":149388,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/user-dashboard/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:28.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /user-dashboard/ HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://geminicopier.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nlocation: https://geminicopier.com/login\r\nx-litespeed-cache: hit\r\ncontent-length: 0\r\ndate: Fri, 10 Apr 2026 14:35:28 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":149388,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 09:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-10T23:51:37.07003Z","times_seen":653374,"resource_available":true,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/public/js/hyiplab_public.js?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/public/js/hyiplab_public.js?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 605\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2650,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"985a02810a4b7deadc3bc66df4ca163d","sha1":"d1ace6e4ef6cd67511a08efa2252c55fe0eb0b15","sha256":"0c66f2ddba5c20f5877ec26562f2a4402a68c8517cf6adf20d5e8939af412e3e","sha512":"b72838b8ec5f32b397b147af6a06c2c43595b73a525d666d9c1cce2726fd1a5b865e9a3e1595d6895f388e0e71c88ab1f21c5e729e8e4d068d8cb2b034e224dc","ssdeep":"","tlshash":"21519d6db0456272c57b7f7e2716d289f934456b7101aea63c5c62e02f32ba046f2fc0","first_seen":"2025-05-10T19:31:49.429183Z","last_seen":"2026-04-10T14:35:56.20462Z","times_seen":5,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/mavenpro/v40/7Au9p_AqnyWWAxW2Wk3GzWQI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20140\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:15:49 GMT\r\nexpires: Sun, 04 Apr 2027 02:15:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 562782\r\nlast-modified: Fri, 29 Aug 2025 03:25:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20140, version 1.0","md5":"983bb0feb829de031ab574857c119dc2","sha1":"2ebc112e1e080219eed917c71b49de3cf4877f22","sha256":"968b1a6ec61d2e6d238adbbb8ecca304cda2e251bbef7f9085df187c993195a3","sha512":"f3b457a3fea5819d9527f285c10046df5757a60845e8194c1a92042ad71ef48bb3e6253e551a4bc01a1bce72dd8013e199fd36d2854f823ff309abacd0aa1772","ssdeep":"384:FXRx3n9UoDtMpUMUk3t8dH3qrQEiCI8bgDZMJHW85SV6O0LRV1wXMUSj0OpUdWn:hR19Ryv3t8dX+Q2eDZ2f9O0LRKMUSjjL","tlshash":"c292cfe71bd17d1de88ebe3139701ac10baed4b347e6459290ac8ab6161d2cd544f3ce","first_seen":"2025-03-05T04:36:04.179611Z","last_seen":"2026-04-10T22:49:49.836112Z","times_seen":1538,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":69,"dns":3,"connect":22,"send":0,"wait":8,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/uploads/2025/09/cropped-IMG_1044-1-32x32.png","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-IMG_1044-1-32x32.png HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m; wp-dark-mode-device=light\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:31 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 24 Sep 2025 07:50:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1456\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"84bb83e4dcf699206e0883797fa0a04c","sha1":"9553d41ed129b9e507715e0214f6f116350b7cdd","sha256":"1626d9312585db1d74bc0b7da22078ae08857ad9fcd645b7e1745a10f0026b5d","sha512":"da769e50520098aa71f551610e70e1645453e551983d3e22e8ebe9f160ff7fe72ec5a552b9a2c705754f047d5e08fdff9ab89d232fe6e4527aeca050f48cbb9e","ssdeep":"","tlshash":"7b3174e7c8752579d9c04e311d59a104f926ec6a17a6d3099028cb3a9cceb8833fdb96","first_seen":"2026-04-10T13:57:00.7729Z","last_seen":"2026-04-10T14:35:56.205165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m; wp-dark-mode-device=light\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 Nov 2025 19:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-10T23:50:01.832214Z","times_seen":141089,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:35:27.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncontent-type: text/html; charset=UTF-8\r\nx-redirect-by: WordPress\r\nlocation: https://geminicopier.com/user-dashboard\r\nx-litespeed-cache: miss\r\ncontent-length: 0\r\ndate: Fri, 10 Apr 2026 14:35:28 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":149388,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-10T23:55:51.885728Z","times_seen":13598540,"resource_available":true,"data":null}},"time_used":1235,"timings":{"blocked":406,"dns":2,"connect":167,"send":0,"wait":423,"receive":0,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/public/css/hyiplab_activation.css?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/public/css/hyiplab_activation.css?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 17 Apr 2026 14:35:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2064\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"30b9b0ba0c424819d65c118ea6c74f28","sha1":"65e82d92847480f95bcc8af087e1065bf1246b12","sha256":"3a5c6e606dea12ee0f11d87a29888bc1aeab48e8718205db92247d724a89b95e","sha512":"3b3912272a01ed686825ee528d5d4413f127b043e7d147539aaabade82731e13b92b96abf504be21df98f30a7205268c01afb23439531489a02bf9a01eb6fadc","ssdeep":"384:sGDiYoqIsO+0A5HBWzbsEpCvikbvqpHibbmxJ/awhdhJRLVEkD4cRQ+6EwOz+JoF:sGDiYoqIsO+0A5HBWzbsEpCvikbvqpH9","tlshash":"d2528badd50628453473633eaba34966f9f2a4f3d1024962f98df9244f341f40b96ecb","first_seen":"2025-05-10T19:31:49.439673Z","last_seen":"2026-04-10T14:35:56.206175Z","times_seen":5,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/plugins/hyiplab/assets/global/js/bootstrap.bundle.min.js?ver=3.0","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/plugins/hyiplab/assets/global/js/bootstrap.bundle.min.js?ver=3.0 HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 23 Oct 2024 09:44:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22158\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":78080,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-04-10T21:10:40.115341Z","times_seen":1451,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/1_423_0/static/js/render.f01b3758afa36dfb54bb.js","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/1_423_0/static/js/render.f01b3758afa36dfb54bb.js HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://geminicopier.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69d77e12-191a\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 101244\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYVAM3zrZp9Qh0hYxWChA%2BCBH2u9qnMCfadPDxPefZjIvPXKDr%2Ff5%2F08cefO3Ar2JhlvOIQNRoT3HEJkszfqb2HkPjm9w53SLl4w1HqUIRciSunu7u6LlBwhD5xfyb4%3D\"}]}\r\ncf-ray: 9ea27a8409201ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6370)","md5":"4e45801852a51a9a5f2eb70249b1d87d","sha1":"3ed5407a0e743c1dc6343a44578eb0db0a0e7f78","sha256":"dac5ff6b5c9296d3cfa7cbe77c28d3871eab415d1123bec077b64de79993372b","sha512":"bc0f0ede79f7e3d0a58e16503010319d0fb36e60a7eea9cd47d9fab010274fc49e77054671672586509293802e11c90c314c9ef9df9d3a4c276565b3e18ad295","ssdeep":"96:oqyozLgwyMGBAMa4qc8uLetLu9UinoAXKNOvydcQ7fFB/41w9O9GBdYPuI:Kozjy841LeEVn6ay1qFkzYPz","tlshash":"d8d1d991316828650226966d307fb30732a9712f650e91a4736ddceebd38dc3814feeb","first_seen":"2026-04-09T13:23:20.243671Z","last_seen":"2026-04-10T23:01:50.465732Z","times_seen":38,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4/fonts/inter_UcCo3FwrK3iLTcviYwYZ8UA3.woff2 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://geminicopier.com/\r\nOrigin: https://geminicopier.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73116\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\netag: \"69d77e12-11d9c\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 101240\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ULdiySPu1iZwwNG%2FeSOMJ4fZMuAOcfiL7BKmPEgH5ikLisxQES36j3%2BAvHtltlwCyJPjJTCAD5mSHoVuGVhgXb6F0dsuiC%2BE8okBPFMG9S%2BIf%2BpVJHs5a1UrxmVO%2BQ%3D\"}]}\r\ncf-ray: 9ea27a8479891ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73116, version 1.0","md5":"60b04eb8b865c18ebc9629881225ea3f","sha1":"e011916aaea9f6cbbba00b22bd45cda39bfee2bf","sha256":"7cfebba3d553c9b143bbc3544fff388f4d1fe122604d51470fd46a4babc74970","sha512":"d8031b12558271f0e264f683df6bd6b8f3dbd8de0ed3d331604e5ec9372a8a013386f9eb870b4e8d1610f6786151fd83cd4cbc5f2cc0f8996f8d855cd69b49a7","ssdeep":"1536:iPJpJutTS+KKG4ZKUOs3S6rRVIPzAyI1cnzyuOwizntkhIqu1/HwwKeTxkHS:aSGKG4T1VIky1zVOwSUIquNHwXSAS","tlshash":"f5630228586103d080f684c8eeb6919b8fa529921ff09a8809d75677d346e57dcceb46","first_seen":"2024-08-27T03:47:43Z","last_seen":"2026-04-10T23:01:50.39927Z","times_seen":5034,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:31.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 10 Apr 2026 14:35:31 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\netag: \"69d77e12-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 101240\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3ZcOavKRuf0yNtM0HcsBO1CTIJ1fT%2BMuo7WUmerRYF6fUkuub7K5p3uRFj6VeVmSp0oF88g8LAqzNj9GzhQ8T0fjPh541fw%2FUJyzJ83TU%2BuDhD%2Bn44LzHYOrVODlso%3D\"}]}\r\ncf-ray: 9ea27a84a9ba1ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-04-10T23:01:50.373277Z","times_seen":6950,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geminicopier.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"geminicopier.com","domain":"geminicopier.com","tld":"com"},"ip":{"addr":"68.65.122.222","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:30.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geminicopier.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sun, 25 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AF:F2:37:30:55:90:5D:64:82:D2:80:7F:82:91:78:6E:38:31:92:DB","sha256":"D0:6A:1A:01:48:64:9F:54:10:E3:26:E5:3D:30:8B:AB:5B:1A:33:1D:F0:88:16:21:60:CB:29:5D:69:70:42:E0"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/navigation-customization.js HTTP/1.1\r\nHost: geminicopier.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geminicopier.com/login/\r\nCookie: PHPSESSID=mhn9bi9bcahdg8vkdfh0cah38m\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Feb 2026 06:35:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 405\r\ndate: Fri, 10 Apr 2026 14:35:30 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1049,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ae5a852b9ff48e2c8bb16c600a0e1801","sha1":"04ba0736fb6fc7f021b90772d37c9858e43403d1","sha256":"85948cb636f4fb60f5bd875629625d531b6e0bc709296f0e202d3955e0e9749e","sha512":"7a01069ff25e3f0f69aebb3dac73f14414fcd18321e283ff3935d6c96a269629df41ad00d4a5c3ac1bb62c67123ed59c9f17fb76cefed846892b9a43144bd78f","ssdeep":"","tlshash":"1511ce3c46b260750223a2ff03e7528179b09417e44688d97a7cc74d6fc0960e776b5e","first_seen":"2026-02-26T03:41:55.541419Z","last_seen":"2026-04-10T23:49:42.427234Z","times_seen":102,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/widget-v4//tururu.mp3","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.1.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://geminicopier.com/login/","date":"2026-04-10T14:35:32.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 17:15:01 GMT","end":"Sun, 24 May 2026 18:14:53 GMT"},"fingerprint":{"sha1":"31:36:89:C7:40:5B:0B:E6:E7:F4:A1:39:D4:03:C8:91:03:F3:27:75","sha256":"3F:EC:22:F7:0C:7A:FE:28:EF:F8:92:A6:E0:B1:FF:75:40:11:76:AE:EB:3B:57:20:62:6F:B5:C0:7C:4B:2A:26"}}},"request":{"raw":"GET /widget-v4//tururu.mp3 HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 10 Apr 2026 14:35:32 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 7224\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Apr 2026 10:23:14 GMT\r\netag: \"69d77e12-1c38\"\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\nage: 101240\r\ncontent-range: bytes 0-7223/7224\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MYfrJa9gn44zDtv1aBxp0CanCV14ok%2B6zVlBVEylYe0bOxT%2BJ82N1xNUPnADBeMcgqX1R4UKVVCVH00rL1X6hRQGB42o6gMOUxSs5GiuU%2BSlpGx3VOXCL3NkN67haro%3D\"}]}\r\ncf-ray: 9ea27a85fb321ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"5061b4d134a7b4d5d744f9a127b757a8","sha1":"c5e240ac60d3914cb3836ba6652105c67720b845","sha256":"12c7687514ca85ba2157ed61914ac526bb9dd15cb5a2a2d9e4d88f919349284f","sha512":"bbd050943fd3129822d687f7733034989faa672e543d5fcc0f1bfc69f5af9c7ff3a4c6e1cd55011383760cef14351527f6de22cfb91b25e8d2ac201fc9b9c7c0","ssdeep":"192:2DjGr+6EnIPwZeM/BCepDxN8XcqOBO+JlRh:CjfxnIPkjpDP8Xcg+JlL","tlshash":"11e18c1937f3e09ed620177642d43664fcd01d8017e2945b25a8baebf13e3cbc26a961","first_seen":"2023-04-05T10:44:18Z","last_seen":"2026-04-10T23:01:50.373277Z","times_seen":6950,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}