{"report_id":"c1faceef-80a3-470a-86a9-ebc12ad76f0c","version":6,"status":"done","tags":[],"date":"2026-02-20T13:31:00Z","url":{"schema":"http","addr":"geniusterminal.xyz","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"title":"Genius Terminal Airdrop – Claim Official Genius Airdrop | GeniusTerminal.xyz","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"geniusterminal.xyz","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"104.21.40.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T13:31:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"geniusterminal.xyz","ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-24","domain_rank":0,"first_seen":"2026-02-20T13:31:01.321419Z","last_seen":"2026-02-20T13:31:01.321419Z","alert_count":49,"request_count":49,"received_data":4506728,"sent_data":22288,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.tradegenius.com","ip":{"addr":"104.20.32.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-02-17","domain_rank":0,"first_seen":"2026-01-19T19:31:34.49572Z","last_seen":"2026-01-19T19:31:34.49572Z","alert_count":0,"request_count":1,"received_data":40294,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-27T15:32:00.187505Z","times_seen":3403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b06ae390b726354593013a54ba7f438c","sha1":"815f307b9f7532161b7fa899c7bffd70d7ddae39","sha256":"268a3a53f0e2da89757da656ba21eb95f63e9c15c4282413d3fa8682cb1dc50e","sha512":"8c07569caf5629ffdab13db51f3267903d3b1fae5cd828fc7d107df7c74d691276572f35a83b7cd53d5b945bdd96aec0a1c1673c95b9a2928380f0dd006bea71","ssdeep":"","tlshash":"43d0a75d6054556618cf292e18cf088a7e26981192040dcd98ecc4547fb1e6c01a0488","size":219,"data":"","first_seen":"2026-01-13T14:54:14.126281Z","last_seen":"2026-02-20T13:31:05.021602Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/aos-2.3.4.min.js","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d09a08f5304d73f38ce5c379e7be352","sha1":"c29f3ce5b9f8e36f4ec21224dcad2b356b8c0b5d","sha256":"8a756ebdaf5be1a451d3c82ac8a1d7e4fede5dd82d2b52a034f7ddbc48014113","sha512":"b8453443518013ac83f97da8c4967b2c0264d03e6ec185c9b8aa1a715dd2ac692181b709a9cd3456cbebbc726e2ad8ce3b3eb46aee79a8cd34a66ce34babacc4","ssdeep":"768:CT2WpfXcXvFZkEZk+8wxax3IDifOpDJ/eTVi7Go0R+ka6p9ErcYcnxsc2c6coce4:CTQFbKw0aDif+fgRJ9lpnBMVdZ2Ks","tlshash":"95833dda590bd0d98e1551cdd437e809e0684963cdacf093ba6cdec2b81ef62c49727b","size":82761,"data":"","first_seen":"2026-02-20T13:31:05.004883Z","last_seen":"2026-02-20T13:31:05.004883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d08b9b1044dec5533dbd09c45dd4c164","sha1":"bce6ffff3c57201cf5490afb3c92e32cff1363ef","sha256":"217c00d8d2b9aaf065a070291d7ef66f7f328fb7cb63d373431b566f1044816b","sha512":"b5b22a6716bab95a1447df08e8ff9e5e1c1c0604eb06af95f8e252c0570b3ff054c0710b46c4bf8bc25dece722f8ed409f2242baed28da809bc0a3debf991332","ssdeep":"768:t2GVf3cdjFZkkZkiIwpbJ2V1gloTiRAlw54OcycpjsOScmcoc+cXcTclc4c6nBLs:tuFXewBM1gW1d3nBMRnJQsr","tlshash":"06737fda991bd0e48e5510ced437e806e4680923cdacf1a3b96cdec1b85df62c49717b","size":79672,"data":"","first_seen":"2026-02-20T13:31:05.024328Z","last_seen":"2026-02-20T13:31:05.024328Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-25T06:05:52.500573Z","times_seen":1370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"geniusterminal.xyz/adsct.gif","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /adsct.gif HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZosMZm7GoNgW6i7R5N3Ngxuz7WugPb4sSeUiNzpVH4hv6vVSm2pLv5A0RtjpK5B8NJ73JX2S99t8h0XClz2GkmqFYeZaXCbxfc43xYdwF7kyIg%3D%3D\"}]}\r\ncf-ray: 9d0e5c083bd9acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-27T07:06:57.091098Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/Macan-Medium.woff","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /Macan-Medium.woff HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/b7344cb077201e33.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: application/font-woff\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNCgOX5ocMfA1P4fAJcXV%2BKaANBb83eT%2B%2BkHbw1zg8bSDnQ1u1db2YUMt2iZBTZtfma5VRnSWchasEkKT6k5Y%2Fo%2FR%2BdZ%2BJlvAuouNMtKVnOcgg%3D%3D\"}]}\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6976554e-12e34\"\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c0b8bb6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77364,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, CFF, length 77364, version 0.0","md5":"ec27baa8045cdc0a21da0bdf37217477","sha1":"1a77e09c41d055aa52e01bed09f28bd63bffa2e7","sha256":"a2a25c98e8ca585753a955f19ccd019c544873be56c582fbd31243c5865693dd","sha512":"f0aecfe3cafe86cc4869842e9273aef33bd19a46d28677984ef259f0955877a4a66a66f1c0bf4dcc2d4f93155e9662e33c70d8f5150d35029c858c950ab57d0b","ssdeep":"1536:TWeBrx8iMkVxIj6NcRnvvRpkGb+a8qLDZ1o14GmRA4jggNZgX42:XAiMedmZpHXU1FmS4jggPE42","tlshash":"d07301c36c104a20a95eb7fccdd42f16de4462659ac9cd2bfc4ccccaf66a4f264435a9","first_seen":"2026-01-19T19:31:41.696425Z","last_seen":"2026-04-20T19:07:58.329262Z","times_seen":7,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/sonic.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /sonic.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 542\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-21e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhShW4UQiQsosACmTXcIo2AROqEMrUipKKWeYLwfQYRwdwndmpvmV8ylNHKrdXNcqQgbR7hygNNtTuBJ%2B6%2BVs%2BfBp3F1YwIVzoi%2BibXNs4TGJw%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dacaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":542,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"3ce13faa9f3b3c6029bfccb9aad53454","sha1":"dc5cfbfb0c23196eb458d7a58d3f8e8b2eac0617","sha256":"bf04bc9b8d7d713e0a204c4ed60edb685de31664e016c71c1be50adfecc80862","sha512":"16c4adb69d5ad20566d34888b25455ee2c94a74db7cea4abfcafbcb0d23845536c128c811cc42d2dc63c16d687b4c919ed4ad0188d8afafc724fb0a57ba60dc5","ssdeep":"","tlshash":"49f020ca8faa5caa40280fd6bcee02e0002f8f082a679e47217a406a5425495f06cfc2","first_seen":"2026-01-19T19:31:41.72707Z","last_seen":"2026-02-20T13:31:04.946022Z","times_seen":5,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-2.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-2.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 248\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-f8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFAjnEzsSgAD94ma%2BrgPJS4SI%2Fgz%2F8LFT0TnaVVwKwCtXJDaMvGArUaRV2%2FCJrOmoEv8Ya9%2B39QhuE7%2FpdQTzy2YlmHVd3BLQccsfzq9EbheAw%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b7aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"1c96a8b63a6b9f200b32c45b605fe135","sha1":"bb394a562d227f7785909c35633c0f43bec41c64","sha256":"d7f15ae6976b15e704769458d92e15f5119bba3104db462f20fd64e1fe3d9aeb","sha512":"c8351c8109a63fa2667e95891a17ffc97ae3365c8a2f6ade7894947014b47f309db6b9149d9ed5211b4a90afc9734a8b3bb131b64b4364091a9ea3ecc88b6c86","ssdeep":"","tlshash":"d3d097ce0fcc6c3fc88c0878a9e84121e74b0ccd00f8a1bb91f28b00215214a826caa7","first_seen":"2026-02-20T13:31:04.949798Z","last_seen":"2026-02-20T13:31:04.949798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-4.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-4.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 228\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-e4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccz34V1YGWJxzmQ71l7Pl4R5pGVcEyyN0TWpHR%2BaXuEdMRxKGXVaLVuOILoCnP82fx17q%2F01xxPDpe9FbwOslkOHrGRwRGzAyr1HsQISvA7JKw%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b85acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"9f764682486250ecacb45950a54e031b","sha1":"d2d8bf02dfe448b219cd37e6e1bd2d9b4db1e3e4","sha256":"7019d005579aef3d604c205e861a0bd91ff3875da6fc7814e6be923c1deaa7fc","sha512":"b0d7252124cc09d69545a1dffbec874c9e929fdda0a1a8327dd6663398ec94d45b16eb3bfaaf41cd1043d4e7a3e729c3dd0417e32a1fc658ca7c11456b29f65b","ssdeep":"","tlshash":"45d097ef97102c7dc00fc32995860590c8330b2d09100ab880883010a5e2aed10a8352","first_seen":"2026-02-20T13:31:04.952582Z","last_seen":"2026-02-20T13:31:04.952582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-28.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-28.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 245\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-f5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T60sAQKYuFg57BwBHCHxwNw%2BrDtpnjR1OzCSSa1U2p9KuAwhliF9L7LOaKV3lSOH6EUt1TKY%2F1N1%2FjQJCKfQPshwLFepQfCEmjXW9le19Vrssg%3D%3D\"}]}\r\ncf-ray: 9d0e5c081ba2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"5e21461cbb2abb89a443059922ca3c0b","sha1":"6f075416f6053ce845bed18cf1a6458de184f458","sha256":"4f3296e0e913db0cdcb20adb0e8f966c0fddeeebd698eb75a603ece1fe128dbb","sha512":"280c4d1b376b60d883687c38fe991aed7fc95e86a3c63dca3e6b14498dae0770ac161ae72a3c092a4f183138cb53b5589d5a262eb45b247d0e02edf7126505c5","ssdeep":"","tlshash":"6ed097fb82e88cbbdb07223e0b080272cc1b280d0804bd0263a5800b138c95832e0aa2","first_seen":"2026-02-20T13:31:04.955388Z","last_seen":"2026-02-20T13:31:04.955388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-11.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-11.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 307\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-133\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdOXC90GjR8HYnK5zlhD5TAkjb2%2BtFrVM%2FfTblCWzxYFxBo7TcF%2B20ueJDnrAvV60txmK68uPL9P%2BZ2qtIxGYn1bfD6d6HUD3fZEt2SoKTDvbQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bb8acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"31676250bb03f30e3fdc93024bbfce55","sha1":"a8a24ec8aae8e1f28588504f078de66cf5c75c98","sha256":"979d894f80d17bfd134d85192e0f68f7f47ec2fd3c841ab9bc7266918da6c1b3","sha512":"a9ad99cf366d6da43517e273f1af93f27fe8748dc543d5b5ad2f7d32ef16798125f1092c212ef587d080780488ea5ee650637f2a6aa8a0773eda7011250732ef","ssdeep":"","tlshash":"f6e07dc92161595eb20f06725b0a88b26be7773900848a414d47a03a385059ca9bc9e1","first_seen":"2026-02-20T13:31:04.957608Z","last_seen":"2026-02-20T13:31:04.957608Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/polygon.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /polygon.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 454\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14q0Kc9rC8wq6wOthyl7iCzSF%2BjjIAda91HeqKAjvXFXYyPbFjPxz5%2BbDc0A6M0zU5d1SgheLjgncLlJFHV6Qnd4eSujFOrAuwVSUW3DVhh8Cg%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dac1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"367236f2523130ccc73d1d76468c56b0","sha1":"b11d81ff8ecb59b2eee896193f33c8f76e8941a7","sha256":"55c2595fd4180e4396f948458aca0b5e88925edcc449f7de1fb5a597a0e2bcd8","sha512":"087f5d8d15f4234ed2af400bc30f446e07c37c54560561c1cb6912c8173311197549fa51ab33387ca64b9e968e9ec8e1c0521a724547bb89189e034dd5f521f5","ssdeep":"","tlshash":"57f0dcea43718929c7864258d02b1922b4f37ec83028004ad9ea2d2265632eb3e3c242","first_seen":"2026-01-19T19:31:41.718379Z","last_seen":"2026-02-20T13:31:04.959713Z","times_seen":5,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-13.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-13.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 291\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-123\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1T559fzyXN1YP10GGy1Uo7mU5xaJcyGR1g8oDfk7vIt78ETCJyDhFqbptOCt%2Fd%2BxAs3w2XMfOR%2BlvyqsPbX8mwsW6U%2B1waeCMtPtz1wB1G7saQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bbaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"1a487bccaf79ab7d79f07d8d420ef959","sha1":"5245ff776e1073ab6dd314d85b56e6063e37ea29","sha256":"0fa0d8fea7d80584a54876b0fda50b655e9c8a29df4e1210af70ca30cfff236c","sha512":"0a16f281f7cf784f54b742d15ca37dda31e2079885e09607b2cd918b439dcf9b7d81a1e5f11157b328735a83460bcfc3cd17ce3f2d04a9672a9046230441c99a","ssdeep":"","tlshash":"5dd0ebe851e41e334b720e7320db8930e48f0cbc9ca1508a4358482930117c4d9e8efa","first_seen":"2026-02-20T13:31:04.962486Z","last_seen":"2026-02-20T13:31:04.962486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/adsct-2.gif","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /adsct-2.gif HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZ3qtbLh8137GT8bLKGXWLcX0wIIWRyWyqPMbPDlmZwnaaLFRc2v5Ry1XPrT4CLU9J6FY3F10CiSNAkeD%2BAO8j1PhdJDxD26FkrdDE6ZDd7ciQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c082bd6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-27T07:06:57.091098Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/onboarding.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /onboarding.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 350223\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-5580f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SFkmvDuliarZAcbukGKobj9WMYQ73X7k36oCW0uM64KxrKrXdxoLAC0PpKNWN4P9W%2FgEkOCSVI4reJ%2F8slQYsA8yu5CMuKV%2BHigb2OT99UkJZw%3D%3D\"}]}\r\ncf-ray: 9d0e5c083beeacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350223,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1572 x 1944, 8-bit/color RGBA, non-interlaced","md5":"fbe9defd05bbca4cb209247dd4dc79fa","sha1":"da86ea3dacf332ceb56d3347518b8125acc3518f","sha256":"50b8872b175ebb3678a2a2ec01934dd6cdfb3ee2f88e8c1bd8a24e5c29bdf1aa","sha512":"0d1eb1a8e94e4fc931d770e40aeb4b32409feb411e1425071332a436aefc138bd07efea4538b985ca713fb9afcea46308ce8077838f4f031041de0892d34a678","ssdeep":"6144:vu7pSCdHPsobIhrYw+xxdiPgjW+fERgo3WJ++lQeJsPWsuHKjEhrszPm/SGf7H/:tCdHPnExUxviPDKoo/tlOvI/","tlshash":"fe74121aa93be440cc0f257e01017f87b7e7558e630d8dbba779a06dc9e98eb0664713","first_seen":"2026-02-20T13:31:04.96469Z","last_seen":"2026-02-20T13:31:04.96469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/secureproxy?e=jscdn/getFile","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://geniusterminal.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://geniusterminal.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"tq2zxrzox0053bpv5n5y\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VD3gwShtsxoFmK6fFo8HAVMiyUNpqCwQakvJYLCkr1b58D8onxBdSK7VA1MVT0TM8eU0iHmhG5c1CYayMBaDuEdchnlgNCfh9MMGL%2FVaWvRjDA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c0cadf8acd4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2959343,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b436b5f357f56f0721e0cc0c962c61b1","sha1":"c2ef3afa1222a803e3ee0fe912f011a782c646c5","sha256":"21b141c6acd5b3ab1b86452fced6752d9ce1a56ff4727013876630fe698811f8","sha512":"a24932c547f47324a5d0064a95075d3ff1bcba984a34fd118bdd2a334c8180d5b7e3e5a6ac6cb3df3253297b1eef80aca6dc9e038af8112f6a42ae9043ea9222","ssdeep":"24576:xBFqoy06ALFIuElU8zFwh03hdBCweP2QjSZ51NSS:bHEFwUBCwW2QUSS","tlshash":"182523da9d55f9b94f688574737b0e2c4d410910859ad2cab3c8fcc32629bb1c6f6cac","first_seen":"2026-02-20T13:31:04.967121Z","last_seen":"2026-02-20T13:31:04.967121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-32.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-32.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 571\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-23b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JeUnAXmgUJ48YCCBGOPaahPei1kDwkb22pZSRxBiRTVzFk1eM2U%2BTMkbVvg2I4SLDyRUwRQ6V0JcFfiIZVHCDibP2ByqPIqQmZliRJujTnLVA%3D%3D\"}]}\r\ncf-ray: 9d0e5c081ba6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"8bc168a41ef040b408a1aa628fcbaaab","sha1":"a60d2b8f460da01d4303b5021b65604755a74646","sha256":"7bba0775e13713212fd8c2093b727a6dbc89984316c29adceca0e16e9be4aec5","sha512":"0e8e3401617cb9d65faded92b4ee68d7392ebdf0f189f77de73b2ae4ed888aaf40f5fd83dab4e8a80cc2aa5764e18e4b146a6c798f6e4e3e8ac306ecbbdf7151","ssdeep":"","tlshash":"d9f026c1632d5874d5383b128f057a72e8524e8c6b128403d50d649d3a612df36b4ac6","first_seen":"2026-02-20T13:31:04.970174Z","last_seen":"2026-02-20T13:31:04.970174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-34.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-34.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 289\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-121\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=thjL6vvYYwNlzfRKk8IDVRDz130V0WbBKFDxRmGisMn8NAv4a4irmmWaoorDpxJ63alwl2KiQvGZ8BEozKwXKKIifTe%2F1A3y%2FNASldBslrhJUA%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b8cacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"837107f097fae9a66bff7c85fc01800e","sha1":"de02e709fbba69d68f6c4b52b3fa604dfb96c3ce","sha256":"174be0d341fd769f69245fb5dc2623946f1c2bd09e5c3fffe3baa473abc95bff","sha512":"7262ba844e5afdbdd5984818e36b4cd7e4e30db5ed36d6f6c6c55fdc0cfbd56a1323b4dbe03bba23cdbb9cf2bf608db8255eff2ac433423dbe9b3a18030d907f","ssdeep":"","tlshash":"ccd0ebe9c3802dbb9a4c0923602478718c233f8c1ca1700bb006cc2822fc682d0a8149","first_seen":"2026-02-20T13:31:04.972003Z","last_seen":"2026-02-20T13:31:04.972003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/ethereum.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /ethereum.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 478\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1de\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2eaIxDf27Ox46Y%2BT4UpD1ASqbRJk7j5T4dpgiyfayy%2FilZHu9suPzgSi6mWzRzle%2Bbv74sXuk29yV6nK9%2FhBRFSNrPxe89R03ta7DhRj%2Binpnw%3D%3D\"}]}\r\ncf-ray: 9d0e5c07daafacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"0c557ffb3102d38f96e29dbf024384fe","sha1":"c7498a1a7745169f0fc7a2229371a0a16a1db1e7","sha256":"d7258d11c7081c1a4a94079f9c177644223710589903b1b86cc2ea9d2b63126f","sha512":"4180b532614360d0684617404af640da1bb9feed48d6e3819f1282c5ee1bb5104dae38e39a5d4454e956bad35d667419b4f29d57dbbe4732b21d22468c959ff2","ssdeep":"","tlshash":"d3f05cf63768849e8e480c0a308a7121daeb213880c2744295f130222f023fbe7eb380","first_seen":"2026-01-19T19:31:41.683858Z","last_seen":"2026-02-20T13:31:04.9737Z","times_seen":5,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/solana-1.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /solana-1.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 708\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTLsJTr7%2BFadnvD9ADqPoFZdar66Lq6RN53lxsFL%2BdwE%2Fm1brBLVIObh%2FCMR%2BmwnliS7EficKQNjCAu2L1aYl0ZErvMCt3eXMQ7vfdkuyd%2B%2FHQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b77acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"0752f2ca0115f2b8afc07564ccbe7bab","sha1":"71b7e45f13e78806861176f74064c2792ba7f4e1","sha256":"ed04568ed86e67dce9edc3de2fabffa23a3734bd093570c4d3fcd8f8bcd7ffb3","sha512":"d438c825f3230d0939099dbcc4af6ab7bf14ab15872b26447b69158704e62b3862e7e663a55eab3b636fa8570f2c79b1af01f21b7c4a62303a521a3b29bbf0c0","ssdeep":"","tlshash":"240194dcc2219d374a68172c0968fe1adca740cc8e1da9b924e48f097646dc2e5c42a0","first_seen":"2026-01-19T19:31:41.723431Z","last_seen":"2026-02-20T13:31:04.975542Z","times_seen":5,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/solana-2.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /solana-2.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 422\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1a6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v99ZyPhNj7Vhu1iDPRnacX6BMB7lZWcx6DkhR2C16v8%2Fm9vkg8IB9a7KbLlXpWV1mxwyFTDatYsRbwd1YinHhUBv7drn7oawPakVQ13gcIUkEA%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b7facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"4891a381fc994f5aeac7a1ab68ab7756","sha1":"be06fc86d705b26c7ecacfd0ae5c91d96cfc4c8f","sha256":"d18c487a1bb4cccbd6722b2f2d488f955000b122048f59644fac6953afef9b20","sha512":"e34926abf8a5c4439ed1246d834e6445218fe8bd26a4032575b8f58b53d8e7c2ca29866c5a1d2f73fef3b1e8c0965294dfd1f9124a55fd275bb225296b238d32","ssdeep":"","tlshash":"d8e023db53a194b981d641f92420d8069dd3c1dc383224b31d96e3143922384aab05ea","first_seen":"2026-01-19T19:31:41.702109Z","last_seen":"2026-02-20T13:31:04.977298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-37.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-37.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 335\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-14f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euWeilDyXVgg5hHq55PXMMS2Gqqm4nQJ%2B5B9%2BzekFdl19O%2Bi8Us4ahJfO03%2F7aWuNP4kfifu9WO%2Fzuhp5fsk4RsVEpFm2g%2FD%2B0j7FCgBErvcZA%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b9facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"96dd5243c1919c6683bd7159c6a122ac","sha1":"9f04448f40a3a6395de1ac2f00b67d894ceb7b73","sha256":"06eb9fdfee9ae36d5823898d041c6703a7484286330bc048d1e85947ce3b8b65","sha512":"34935e6e8b21aff3ea5cd0d638671f937f70082bac6c53052359fe6145b5092784fc1dcfd42677e214d6d22196e1df9271c6cfcbee9bd15566addc95e52bca45","ssdeep":"","tlshash":"a8e028c78440d87757dd31f50ce0006c9c2f5d19c6f0ff5705f40040154147c63a4930","first_seen":"2026-02-20T13:31:04.979075Z","last_seen":"2026-02-20T13:31:04.979075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-6.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-6.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 549\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-225\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTWm1Vgxd3Yu2k0BjlvdqGM6s14ZuPB5Ucyx5PqyW%2BQl25inObfPsEkWtivYEALhBrDVnulvq8BG4jBT%2FuycA3wuTaV%2BYqD2AY1U9LMAmYO54w%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b95acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c91c9c47b84332da1cf51bbf0eacfb8e","sha1":"cbf78318e4c7da4ab4f51a22bdafde67d17e9996","sha256":"e2ee236b8de49128196842bfe7f1319f6a9b6f50bbf4d2329fb100ecb62bee75","sha512":"240e89660c65ad48a2c733f094858bee4afcfa0ab40c1a68ef756e0a9014322f155425d302164825d14ef108f166b79ab1b5a03fc8bb5e5e059f1b8ebea877e5","ssdeep":"","tlshash":"f5f0ecf43b414f1f4d0d13f047025006a017cc1c2d116b0093455c053b31c1498b4fcf","first_seen":"2026-02-20T13:31:04.980474Z","last_seen":"2026-02-20T13:31:04.980474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/sui-1.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /sui-1.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 452\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FGBk5WzcZef0nmJkHFFpZ4nD6zxWAgSnQpU%2F%2BQ3WSXGQozK9DUOQUcnrqY9F%2FguiU2xKV7I8aFscu49tiMv9d13YHCWEtTN2K5%2F6GbU4CoYPg%3D%3D\"}]}\r\ncf-ray: 9d0e5c082bd3acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a4fef866875399f7ca5fbb2e057f035c","sha1":"14396eff3683551dd9712e00f18f1e44c036015b","sha256":"ac6cd7e4febeb210dc91b7436d653a4127a92c2598d3ea6eb30179428c2369fe","sha512":"034a1c3a0312ae601f6eae1442dabbb16c4e92cd9553154b4297d7f0070e7af7ffd053a96d21c2126bb916477145a5b0fe06adba62a5625db9d920be17a7e44a","ssdeep":"","tlshash":"b0f0dcce66899811d1162ea1430f90ad1c1242b40252e049cd852d115a277e078d176a","first_seen":"2026-01-19T19:31:41.700717Z","last_seen":"2026-02-20T13:31:04.981976Z","times_seen":5,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/adsct-3.gif","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /adsct-3.gif HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGbNzjceDYioFVOP%2FHLOrs8X9oGFqJw9b2%2FDdSKlcIsyNH326EsuTNyfJI6ZKDwgQdgoWStK0bPKz44T2X9iEqydRI%2FpOmpIV2hVIEy96AWNpA%3D%3D\"}]}\r\ncf-ray: 9d0e5c083be5acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-27T07:06:57.091098Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/Macan-Semibold.otf","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /Macan-Semibold.otf HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/b7344cb077201e33.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 134588\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-20dbc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fs2PdSWo%2BPpKgWqZQzsqg1eVKQp020Q8yQd05CGOjuGkBqKlWW7oaPxeDchbJCzhHsmX%2B6uhvfsgZBYSZq3twd45OHGLw%2F6CmVHmFo59aFdLAg%3D%3D\"}]}\r\ncf-ray: 9d0e5c0b8bbaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134588,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"d09010a169f11957c7b31b8f42ac059a","sha1":"72ef1bac5d76738370a6750cba222d5e018abe13","sha256":"ef426afb60f2b5aba02fd069fdccbfd11dad3c667a548d11774ea583c3092a75","sha512":"31be799273ddc3baef6ec404297f5515a1c734bf03cbc269f3ee06efc65474a16703f1621f62d8d37edfd201bd8a0aa3e49915b6a95cf5364d622574abb80e5a","ssdeep":"3072:LcPl6I6L7GMH8y2ggs3g41IysQEcuAksiMlVQTkdJ:Lc96IiqE2ggggwXsQEFsiMlVQTI","tlshash":"d5d3ad48f31b975cdac64d322ff563703312b68ead2ed98efa94a4505c951e608f83c9","first_seen":"2026-02-20T13:31:04.983687Z","last_seen":"2026-04-20T19:07:58.342901Z","times_seen":3,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":415,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/optimism.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /optimism.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 443\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1bb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaCR5rabki7T0eKyodHwvPHFVXtu%2BfpEjD9Jzxozm%2BYCrE5%2FA%2Fr7LpF3nibc686i%2BpafuPee5M0wxAhUYP1xjRLVdSd8DWHHIIWsMCrVGozA%2BA%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dab3acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"718cc1d396be80ac061cfcf1c2596a6b","sha1":"e6578ed38ea279abd10a2a3857b835354b2507ff","sha256":"7aa27713d2de6761b1d203a24aa84b58b825802af12122ee2db7db9f82f23f1f","sha512":"ecd990ad7e1c543f19cc417dd7a9c6b5aa2ece803aa09b6084c0e6c582bd59b1b5352f954179f4daf1e142f9ab6d7cb79618aaa4660feda874506ec93c351881","ssdeep":"","tlshash":"4df023c5b2f9c816c35705314262065c67076d0c4561958380887cf32e7308d539a1e0","first_seen":"2026-01-19T19:31:41.713704Z","last_seen":"2026-02-20T13:31:04.985315Z","times_seen":5,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/binance-1.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /binance-1.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 528\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-210\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2mfwVt04niHKFOURq3QiGN%2BC%2FJlfSKJMnt9H0i%2Fq88r1TAwyFfM%2BnFBya9IYbXzIEOIKbZoLg9f6Hiwim7pkoHiAU%2B3UKJdk92LXXNUhUZUAg%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dabaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4d97a9463f1b73bd7f4643c69ca69037","sha1":"7b2c835833d54ec12478383cd47cc8574c73b528","sha256":"2e47e85d218499676e6d00057d36e5797949560c3d46a5112d804dc81f51422b","sha512":"c78d433bb4fcd3f062308ee2aa79da36072e8879b9bbd3e70b7cffa07ad4a44236d78cf9e0fe5db6afb1e314f3f497b2aa250cd26868026e3ba2d65b96fcb1f6","ssdeep":"","tlshash":"ccf020cd87a05c674e2d8633457b060b8a226378285bd09ed1ce380135b942ec38833e","first_seen":"2026-01-19T19:31:41.709523Z","last_seen":"2026-02-20T13:31:04.986891Z","times_seen":5,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-12.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-12.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 479\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1df\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xc37G4a%2BUxzj6EZLAWGlyaGtZHq3pkuj4qvnI8b9C35O22TdNVP0wZiVGlvIqs82Rh3FjnycLL5fc43pWvv3%2B4TMy0f%2BdqV68S1oyadmhD%2F%2Bfw%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b8eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"9662d5d4c4a8eb37d8de6d9516fb0c29","sha1":"97f74199099013c4f8140b8828d8fdbcd4181605","sha256":"d751c9966645b2330edbe75dd1c726a1524f1af459c924cf1199254911694bc6","sha512":"5641a4ac9f49cf95eb9dbfd24a55178d7edc46ebecd69591bc8d77859ed7c4c1b3cc1b19488a9be8485ea1d852319e37e0ce38df22db9d78403c574e39f7f312","ssdeep":"","tlshash":"a4f054de76133ccac6da023817858121ec20cba48cb9d0434e181870e1009daa6e4721","first_seen":"2026-02-20T13:31:04.988417Z","last_seen":"2026-02-20T13:31:04.988417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-38.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-38.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 687\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WtGJV02EM9vCOiOoQsoCrjhp9pQAqRjOwTg3hQ9%2FmGTJeXEQTr1HjAuQAwFOpgnkGYgGeQf6loddBL73%2Fo3eePbVvREP0nPhFSzdaIbpDh2iaA%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bafacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"a5440ccc59eb358dd48572813ccba066","sha1":"009a3c5b563d204cbc06cfb8c12d27f53ddbc2e7","sha256":"b7f31576da5cfd07afe868ad70cbfe8db271d915bd0117b38ceebd61401dda78","sha512":"f69a4b7f55adc8b99c9e0b7cf386c81ffccb9d1cf4a1f1074a0052f4fe64029bcbe13364869c5b0e4155d256bff74b3672ae50d86179efe2f045d7334f636dbe","ssdeep":"","tlshash":"060188ca16795cffecf9d8fb4512e520ff0f0d1b0cb601191190a495a1574d413580f3","first_seen":"2026-02-20T13:31:04.989796Z","last_seen":"2026-02-20T13:31:04.989796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-31.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-31.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 475\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1db\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0DRK7n7FKR34qhqOcPOm8R8oib6KivADX%2BhgC%2BFZuOzpmUumFRpSmiOFtNV%2F6ZLILnKUXLdjfLf%2BtmS7ZV1RQ3jsjGSrlIg7cXMsmqVFXryEg%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bbdacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"6921cac600148b632672465fcc97c2ab","sha1":"d1519f232f28b39b61e428fbbe61aac6c524dd21","sha256":"a9bc91bd278d057e0569b2f3bbf1891112c51d2d79be7a84eb6a819fb9b636af","sha512":"c01967220b4748e72657502f6df456b83c9505bce328d3f9526e9e2153ef46e7a84d2f3d05f6730afaf0a156c4cbc9fbb45f4092ff984496a48000662d537823","ssdeep":"","tlshash":"21f0d4ce7972d8b6c5c54937013e1745adf75d1cb160143f045f6136f68d491b43b651","first_seen":"2026-02-20T13:31:04.991121Z","last_seen":"2026-02-20T13:31:04.991121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/index_3.html","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://geniusterminal.xyz/index_1.html","date":"2026-02-20T13:30:36.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eA0smJKkIjY8cjsLZB%2FJ5vJU5sRy%2Bf5%2BmzFguiHYRDxbtnd1e%2B1D5b7MF3x8saDBqfx%2BM15gXZfRDwQpRM69jhVLZ8wC%2Fm2Zkes2QO0m4ecAVg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c0c4d49acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7e2e971ccfd15ed3897d123edbda7bd1","sha1":"20b3335cb5031634715d673f057e491dd3c9bf96","sha256":"2e818c2351d9fda16712b676ffc63fb877909275ef48d50338685fe3102d6749","sha512":"d3167c5fb415416e2f4a53f2b8e14872ec08410521d3c9daf7f07a35f776d31e47f19acef5fe18f443bee4da9b2f7cbc2c1e617ab15e9a573e4c1663d27fc59a","ssdeep":"","tlshash":"d4e02d535251c90a08a087e01bd6f200400bed1a6002cea0bdf2e89c34d822760127d8","first_seen":"2026-02-20T13:31:04.992345Z","last_seen":"2026-02-20T13:31:04.992345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/webclip.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:37.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /webclip.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 39425\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-9a01\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69uJSYK9MZXiN4kSNn9tmo06xaqeNMhZwnJVU11eWWkVdlOnq3Mts7ptGVw7Q%2F05d0hO3fv2likAaU40EbGOv2FcVryh8FnKEUXg5t2BRrc3ig%3D%3D\"}]}\r\ncf-ray: 9d0e5c0f1b85acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6bb04dc8b9242d0fa182e76816c9dbb9","sha1":"d30d1fed2d0883d1e6aa1bfdbdb0c2700af16b80","sha256":"f49f77c8783c14ce2ee27559f20a5af5f9abfce5ab987def58410cfa2ce8b5b4","sha512":"a2718bbf5421069623ba6dea1cf44aaf537c835ccfc011cb206f68001f81e0a72424680bc2e1d135da78f731efb56b2d10798e3b220ac8341a566aa81f62e1b2","ssdeep":"768:2genoDlHYQYOtbuksst3uzQWh4GpBOiX/bibOPIT36O4pwgdwezQwEwC:JnlvYOtbhs+3uz/qYF/GbOPs6O0eezQF","tlshash":"9603f1647c838c15be67c281bb8ff88dc2d6eb5835402753f291b4b76be91158cda8c9","first_seen":"2026-01-23T12:43:35.221614Z","last_seen":"2026-06-27T09:42:50.829396Z","times_seen":6,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T13:30:34.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BADueOALBfYryDTBvZnegaKCOfiIBRd6CmA%2Bihk0iodAetirfLo1ydcKBhaYiW%2Bg13kHXKFxaG9sqqYFJyAjP65AQgLjMs5gmz7Endr5p3WEAA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 77054\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c063f2eacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":304446,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1482)","md5":"f69d502557f0edeaa70aa6606c03c918","sha1":"8d3878ed3dea3e39269a670a1e18e0a3a4f8f7ce","sha256":"5b3d256cf997d72f55d878141c3ce208200e40862a528f60b76c2cda6a36b3f8","sha512":"f8b585bc1096f424c79665274e4a3af2f9d81dbb9e19619a940d378907e9ef9ae6889396c4d10d558e6d3b14d6f112ac5cc337ad5852a750da59374f32958f74","ssdeep":"1536:tqweJMJUyZxluWyXcLo+TVUM+J/K5+CUkMDSxgP5f/qgeGdv4woOQ9sCnwzgKNXK:tRCyDB8gGPtJd9HpsB5CGp","tlshash":"ff54405861f38af3803f7aa152f063d53253e30beb4217d5745d12e29bd6da9aca348c","first_seen":"2026-02-20T13:31:04.995069Z","last_seen":"2026-02-20T13:31:04.995069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2403,"timings":{"blocked":1173,"dns":1,"connect":1067,"send":0,"wait":56,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-21.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-21.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 194\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4T46Fjmk%2FbfX1Ky%2FSjFm2mYDxQKS5J4FY2Ovrs4L63Iy7R1LkJC9n9DQT2Re7RFgrQB1u1o%2FOHE14g0BYaG34EzylnmknpEvoUXjfYHX63uBg%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bb2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"0d14441b7cb616083c5402fe8d664405","sha1":"0e9bbb1b5f770ab4a65369f9adf8631542121356","sha256":"cd0876084dd81f4b08a55e3265ce7a5a499880508f21ae86a008b40239268662","sha512":"29e067f3d421e5a90cef45473ba1794d0a9811f99a942d4fe01c86efe23745dd26ad18e098f7f42aaf933baf2168f138db956c9b783df3c5c0d439256091db06","ssdeep":"","tlshash":"bec0c0e706802cfbcf7e0237d0204c3148330d8c0892a394420edf6d280ddd8acb4b22","first_seen":"2026-02-20T13:31:04.996187Z","last_seen":"2026-02-20T13:31:04.996187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-26.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-26.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 866\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-362\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmZpiaSKq2dy55cZywCzPDeYNki3v7y5aMBK%2F%2FS0JW%2BsRpu%2FdZcG%2FgUCP9bLiVMlHpD0IyLGBYL%2BjdyUyMqkAcF2HZMKxvDMzuw9dhS5fse9Mw%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bc1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":866,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"332ab43becd2885483c952464dd97865","sha1":"f2095500a93565b82f2727c00fdfd5037cd70907","sha256":"15421aee0f36a72693d17f028fe810f3ed16cb2d4c01e107c7217963685e8068","sha512":"500b4bf18679d807e24859422ef5c7f81886e12ae6fe8a8541fbf5d8b97e952895726387656e4eeb50fea9e8fd52f6b6af210356f2d29da4eecc720aee2e488b","ssdeep":"","tlshash":"5b1163c7cbb847b7c155873048450989541b84191b7cd0bd2f5b4153857678498bed9f","first_seen":"2026-02-20T13:31:04.997336Z","last_seen":"2026-02-20T13:31:04.997336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/whale-masked-1.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /whale-masked-1.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1909\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-775\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6NjqCu3xLDYmFVWBEcckGqc%2Bh7XF4NtZYooXzRJRzI4Et25t6cNI6h1xQfZY037jeK5pdi%2BCpwhn23ERJVtKFPIwxtkDhqv1GipDFikuF4iNg%3D%3D\"}]}\r\ncf-ray: 9d0e5c082bc6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 31, 8-bit colormap, non-interlaced","md5":"c530a8fb877e9ae810d7683c6958054f","sha1":"7efdddb29ee006672a581d2f9da8aca5785e1160","sha256":"18b41740d21e49041ada5c21ab93c1962a1ac4fea309b024a8e5c67df2519296","sha512":"047b872e0951ab9ddefccf42e7a1e495366ad0d181930bcd0f4c0adc120e3711c39cd3a1c70e1d3aa9de2f064bfefc913322cb62269ee1f16cc39bfc6a5d295c","ssdeep":"","tlshash":"67415b43853ac3cfed9b2d238e9a08a1b8c64ed82f3821e51d727200107378e2e79093","first_seen":"2026-02-20T13:31:04.998515Z","last_seen":"2026-02-20T13:31:04.998515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/adsct-1.gif","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /adsct-1.gif HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-2b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGPVEA4A0Sh%2BJDtcdJcDlUiXGIIMXYPxqdTXkCC3xJJIJOMtrm3ql3AtLmSlqQ%2FkGoXc1eFhlEbHMJnPfHXNrcZvmDdWDiNICMiGcQ6gLFYj%2BQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c083bdbacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"377d257f2d2e294916143c069141c1c5","sha1":"b7cae69682cf31dd670b65088db8395acda6ed3e","sha256":"ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957","sha512":"01211111688dc2007519ff56603fbe345d057337b911c829aaee97b8d02e7d885e7a2c2d51730f54a04aebc1821897c8041f15e216f1c973ed313087fa91a3fb","ssdeep":"","tlshash":"4e900403d3c0c001c151d0300d0cc7441344f0305554030f70fc575ddc3d1550c170c0","first_seen":"2023-04-05T06:54:04Z","last_seen":"2026-07-27T07:06:57.091098Z","times_seen":1370,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/index_1.html","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bQ6043fYb5Tqw4RD5VU3Q0kJznlZFyBRUzTAE8qT7XzuR2kvAu3Pa74SZaAUibgROS5CUErdswnYg%2FgYcxMK0Fejl6iKeaYGChYGOrmgINzDA%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 47\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c0ada13acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"1876a64a7e83bdcf8eac7ba3c6337d82","sha1":"7396c7ac05a4ccfe5efd159c1a547f1a3c113503","sha256":"edf83bd28d33efc91d8b07b926c7d73751694cc732910df58bde38f2a3eebd9c","sha512":"ecab813459ea086bf76b65c81860d1e777a8c8fc66666b35a3277be6986795045b5352e88efaac90b02923ee2614a231eeebfe9923eb727fa30b73eaf3f3c685","ssdeep":"","tlshash":"1bd02272d115040ecc019aa1cbeae288404ad62df71059186df43260964d2338522b6d","first_seen":"2025-07-10T07:07:20.863939Z","last_seen":"2026-06-21T01:46:01.932384Z","times_seen":269,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.tradegenius.com/static/images/webclip.png?v=1","fqdn":"www.tradegenius.com","domain":"tradegenius.com","tld":"com"},"ip":{"addr":"104.20.32.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:37.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tradegenius.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 10:51:37 GMT","end":"Sat, 11 Apr 2026 11:51:27 GMT"},"fingerprint":{"sha1":"25:31:1E:40:38:F6:CB:AE:11:48:16:15:6A:E7:F6:39:35:48:59:56","sha256":"63:A3:81:D1:54:38:62:01:C7:AA:E3:59:DE:D5:FC:B5:4D:0B:46:05:C6:6F:83:D9:CC:79:A9:50:42:29:F1:76"}}},"request":{"raw":"GET /static/images/webclip.png?v=1 HTTP/1.1\r\nHost: www.tradegenius.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 39425\r\ncf-ray: 9d0e5c118d3356f6-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 759907\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"2138602e15d373fab8e628c650e5ff1d\"\r\nlast-modified: Wed, 11 Feb 2026 08:43:24 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 fb955bc611b3963fdb8a05aafd1ed6b6.cloudfront.net (CloudFront)\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok, orig_size=47416\r\npriority: u=4;i=?0,cf-chb=(58;u=5;i=?0)\r\nx-amz-cf-id: vh4kV9HQH_O6XiZO4iPDRAqVUTsbQo7XnG1eHJiIWjGp6f-4j_Gjyw==\r\nx-amz-cf-pop: FRA56-P14\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2x9EgoCTHRF1WFVLSRhkeoG5wBtB8nF7\r\nx-cache: Hit from cloudfront\r\nx-tg: tradegenius\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6bb04dc8b9242d0fa182e76816c9dbb9","sha1":"d30d1fed2d0883d1e6aa1bfdbdb0c2700af16b80","sha256":"f49f77c8783c14ce2ee27559f20a5af5f9abfce5ab987def58410cfa2ce8b5b4","sha512":"a2718bbf5421069623ba6dea1cf44aaf537c835ccfc011cb206f68001f81e0a72424680bc2e1d135da78f731efb56b2d10798e3b220ac8341a566aa81f62e1b2","ssdeep":"768:2genoDlHYQYOtbuksst3uzQWh4GpBOiX/bibOPIT36O4pwgdwezQwEwC:JnlvYOtbhs+3uz/qYF/GbOPs6O0eezQF","tlshash":"9603f1647c838c15be67c281bb8ff88dc2d6eb5835402753f291b4b76be91158cda8c9","first_seen":"2026-01-23T12:43:35.221614Z","last_seen":"2026-06-27T09:42:50.829396Z","times_seen":6,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":40,"send":0,"wait":64,"receive":47,"ssl":349},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/b7344cb077201e33.css","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /b7344cb077201e33.css HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0f6r4j8M%2FJK6UhXFU3AVwh2EncSh%2FLg8MhaEXMTA8Yyh7z5s4i533kllkebfb1QAiI7f5ypY6b5%2FpLclS6mwpbRFBng4DZW5abd%2Bh9pFsYvjg%3D%3D\"}]}\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6976554e-38a28\"\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c07caa0acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231976,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"59199a745a7afeb23ebab1c0b3b616d3","sha1":"ba929aeb6386168eb5db10dced885aacfd9f8288","sha256":"66e47a9eacaefc90f2f5cdead9754fc3c460a26e944b4f06aa808536b257ac3c","sha512":"172df06f76f7d74c278dbba1f839b8eec24b05f2eedb29d016f5bf0f363f021c66bb9db1775f956c82288ed118432c8170f6125d9deccbd242b40b93683f06f4","ssdeep":"6144:Gn+mASM3h7iXZvEfDSh4QePVubzZyF1j2bQ6Gm/NGePg9JtKh0raYFks3uwZ+w4S:OCsYyvIN","tlshash":"c234fd55be7a41bf3c3164f8c3e86eec190ee1805e361db97b8151321ad12f91e6da2c","first_seen":"2026-02-20T13:31:05.00214Z","last_seen":"2026-02-20T13:31:05.00214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/genius-advanced.svg","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /genius-advanced.svg HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfnH%2FNbDMP9%2FQ6Jaq51fV8ZpSfJeTMBCZNYrO3tZd0mKMsTrmTyZHp4Bu3zKDCj6ApV0vAwiZO5KUyQ5mEPdWMzD5bvOWhGNJ7HGgZChLlPg4A%3D%3D\"}]}\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6976554e-410ca\"\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c07caacacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc6d78fb8d08fa562e83d30b2dce8b09","sha1":"6788a09579132344ceb8dd02603e42e0ca5cc779","sha256":"8e10829ad71d90deb1b8489021023e395cf82baaa6118e5cf9beb6a38802988a","sha512":"d4b3c7c6a1a57dee3887796364b182d31d34e898d7c7bcbfea89804fe534835b6fc1f99be2822ffb88617f9fd2026542064556ecdb97184c849c0957f2246d1d","ssdeep":"6144:VW3Ms93BGBTYoeCQsK8j3a4n6EmWaZhn2Q:Vo9dBGBMsKo3nnGnn","tlshash":"b74412a8725d381b02cd853a869b1b0fd9419fc1d2deadb7ae7135830b6c3864f594f4","first_seen":"2026-01-19T19:31:41.712229Z","last_seen":"2026-06-27T09:42:50.817247Z","times_seen":9,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/aos-2.3.4.min.js","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /aos-2.3.4.min.js HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyZMmvHrULCCqikdQAp85xQ8CcjkcHc4LvtRvmTnFbO6w0zrfER0xBp%2BLRVX6Qt5LjEyPgBsCrt9d8w6AKpGuvbbQpL3DQdpd006cQza5XTevQ%3D%3D\"}]}\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6976554e-14349\"\r\ncontent-encoding: br\r\ncf-ray: 9d0e5c07caa9acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82761,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9d09a08f5304d73f38ce5c379e7be352","sha1":"c29f3ce5b9f8e36f4ec21224dcad2b356b8c0b5d","sha256":"8a756ebdaf5be1a451d3c82ac8a1d7e4fede5dd82d2b52a034f7ddbc48014113","sha512":"b8453443518013ac83f97da8c4967b2c0264d03e6ec185c9b8aa1a715dd2ac692181b709a9cd3456cbebbc726e2ad8ce3b3eb46aee79a8cd34a66ce34babacc4","ssdeep":"768:CT2WpfXcXvFZkEZk+8wxax3IDifOpDJ/eTVi7Go0R+ka6p9ErcYcnxsc2c6coce4:CTQFbKw0aDif+fgRJ9lpnBMVdZ2Ks","tlshash":"95833dda590bd0d98e1551cdd437e809e0684963cdacf093ba6cdec2b81ef62c49727b","first_seen":"2026-02-20T13:31:05.004883Z","last_seen":"2026-02-20T13:31:05.004883Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/hype.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /hype.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 411\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-19b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qvm8V%2FT%2BTfKhiAvhlWQ0gOZCsnDMImW7cwHd8Pgut5SdbOBBC%2B8Ez%2FOhwyG22pbSplnxwpQP3Wv8KVm99gXdpLu3fUMKMKm3I1kFZR4Coo%2Be0w%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dadaacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"ad346b3c88ad343a24e42b1399b90141","sha1":"66889f4e3cc07f501abfccf1eb3f470ccc6bef86","sha256":"3c9a5f532053cf21c0dcd56e280a1e1fece8ba56a550c91594d0ad50b264ee92","sha512":"1b2d66a3c08c60b997a434ade6be5992cd30b55b5b8c8d6a266e6962ff75895b8e07b124ee1454a4224f7f48772eb2f8864a3e74bd2922ed21c30cb3e69a9b8f","ssdeep":"","tlshash":"0fe0fad90345c49fc15110bf4f1758d017d7477c9ddf9945500158051a7b587d6d0787","first_seen":"2026-01-19T19:31:41.740983Z","last_seen":"2026-02-20T13:31:05.00622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/arbitrum.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /arbitrum.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 770\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-302\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfq1nuluPMpv3vMR00aN8GDiCQORQojoEhE1Kd0Bws87nF1z2WVJxUKzEt0UFNH0ZZS9I%2F%2BcaDu%2FtxUayrUItpxJEp7nmRBpRW7ObZS2mm0D0A%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b6facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"258017efeb0809f08a3273af4618ecb4","sha1":"398aec241bea895f31fa00f394657d0bc3a5d396","sha256":"f8086615aea72b241365f6c203b0d616216a5d608a50f6353995439da7add5c3","sha512":"68b32bd9b83c819fce5088b81ca4d3a5127ed52afd2a74e2b49c4f3c670a2591f7b97999f9dff3e9de266396b9a50999cb3f5ca7c582aa6e54de151a9475fcc2","ssdeep":"","tlshash":"480175cfa94084f48b29d07084a20855f5a25d21ff3fa46d6c2eae94599e795090e276","first_seen":"2026-01-19T19:31:41.708463Z","last_seen":"2026-02-20T13:31:05.007617Z","times_seen":5,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-7.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-7.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 416\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pz1eB84GL67T6q%2BmZ%2FHA0iPkSBCJZer91snIsz1MgYcUg8oF0l9Fy%2BZiVZHKHVxYYpmB8OLcHCQBW9mqPJ8fJM31MzpGXbg5IDcwuzQ2CI8XPg%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b88acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"754b7ddd55ebd92004c32916e98e49df","sha1":"387d7c36de3871f6a8e52bb08218fc02582c3e67","sha256":"aef1c2b62e8dc3659f535027f0d4a48ad33165be6ff54f07e3d2c216af47b5f7","sha512":"faa585a986e81be74f84da6bca377caf540b4d62b22794a743ecc2bf14191571d634793f7c54ba00a34b1b0764053bd2e7e14f64ba9b9d899474893d948c8410","ssdeep":"","tlshash":"c7e0abe4a96e6aa0d659d021f460e31bd8b70caea95a10cd487415031810e98fd94887","first_seen":"2026-02-20T13:31:05.009056Z","last_seen":"2026-02-20T13:31:05.009056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-20.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-20.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 346\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-15a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wyBLrtxB%2ByGjbweOvW9SWOkTjAtjdqzOkXNtIVef8B%2FAlODkPglnrvcVZ0xIx3%2BudM2oCoyGwuS%2FUvefproWR7LYzjbev9vzu6LsZTGHk%2B2BpQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081ba4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e408d85665f991835fd6eb47b8da2834","sha1":"9c4f9825f16e00e8884d454931060b21b4c39699","sha256":"f5091eaa3c20dafc99e51e5d5372966c6f77e8d011ef56858b5f7da3af121b5a","sha512":"d01557b96ce94e48c02fdd774f607ec4ed4421461cefb720e39d8f3b2c249bdae639a36aa9dd7436cbc6e9a2d0f90810357bb64276585ccafaf4bcca7583bf10","ssdeep":"","tlshash":"a1e0c0ca7b31ccbcce0e102260020471d09acdfc0717e91a8835a4e5d80275b2550791","first_seen":"2026-01-19T19:31:41.728174Z","last_seen":"2026-02-20T13:31:05.010233Z","times_seen":5,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/BTC.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /BTC.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 585\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-249\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m1zO4a1xkrN7yowLE2klJglnZbUnBjDskuYVJNVkpTen1Ha3dlO62d0v%2FYkIxySg4hs7ROWxsHHoQ4ABukCNlNx9sNPCd%2B%2FXYQLlXtdNmtb7gA%3D%3D\"}]}\r\ncf-ray: 9d0e5c082bd1acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a7a2d69a02433e18596c58e46bf98a37","sha1":"291f5020fc981064df20b1a5e94958a76eccc2e1","sha256":"148a5ea744bae2843fb86b37dced859bacf423ddfada50347862a3141c865f90","sha512":"b83ce907a5c5a0fb002f577a0026be20a3e05710b2af27f553adfdd4f1182c821879f65174984b5f54108dd158e8678bee05371e819edd5a90038af9944d3406","ssdeep":"","tlshash":"11f096d7cb866e1fd4bc09b914c73e20a87f29a4e075b1498db00c253b02245cfa3a34","first_seen":"2026-01-19T19:31:41.676497Z","last_seen":"2026-02-20T13:31:05.011515Z","times_seen":5,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-10.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-10.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 231\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-e7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfU6WFCTDpJ%2FgotBuiw3XSaXjS6IPVISTFOOhKhhJA4bnotj7sOwJHdiQuZn%2BmJpFuS8bbHbzj0DGr0tjWQs6nSXCOYRsi3%2Fn9UdE3pDDR4GqQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081babacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"578bb71acd8b0742d71d3b683dc29429","sha1":"047eb80bbf7f8781c44473ab6533b601d29bb1c4","sha256":"221713130c88269911e5af62adfe3447e0fbdaccc85ea0d384d0e452629c79b0","sha512":"811b18dc7731dae90a1a438129fa721f6d64098b1b7ebd1c998c691f012de07cca920be636f44c14ae62a6e1730e2b92773de2fdc0e6f5da1a622d8ee895dc37","ssdeep":"","tlshash":"37d0a7de32903d7fd9c589b9e58349542d671a2c56a44405941a491526968e80b241ef","first_seen":"2026-02-20T13:31:05.012757Z","last_seen":"2026-02-20T13:31:05.012757Z","times_seen":1,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/base.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /base.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 469\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EwZIVVSOrOHzJPgRDkw0qYHdzOvue5FzPQ2LzOAyLvx6fBlFTym%2FMfMiLaTwo27EkfSVLPGKhBIb2TBSPTwF%2Fv0R8099By1D1VWiqF9jMvOeg%3D%3D\"}]}\r\ncf-ray: 9d0e5c07dae0acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e55f4608b7c00ff4806210ef8cb3324f","sha1":"b84573d39b8267080809595d333709c02f74ecc4","sha256":"54e5fa209a54cbab50ec113d5c3843e3241d6e99134253058249e9fd19fbd24b","sha512":"f10def33dfda096a72827eb21e5f2d3bf30d6b0ee5b27c042e0e4908bcd9405c274e863eca54e158e4eea8a9b2d069591e1e681cb38f6b21a19e03375ce8f44b","ssdeep":"","tlshash":"66f0d4ef02505473415d21b25586cb55b481765d855aec63c1176826ae2f7115544351","first_seen":"2026-01-19T19:31:41.719696Z","last_seen":"2026-02-20T13:31:05.013965Z","times_seen":5,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/avalanche-1.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /avalanche-1.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 418\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-1a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wfQgLltZ7pG%2FzVc4B0TKpDid8XMXZQJOJ1%2B9i5r8weCUeiRwGPi0q0tiYAfSK8U9iuKgGXVPnUXN5Hf0qHrdQCbh4htn7OuXA74XtIfjh5Cgw%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b74acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"9a7aa8475e90d05647b50d8feafe4190","sha1":"39f2b2465ea601366e94aa2f3f6b1bde799bd264","sha256":"b8f80c4bd0cc699c37637821df84871867ac6b1dfb7f160cedb862303408caa3","sha512":"89151e327edc97032a44cd7d820856478dc448e84d07650cbd3faf1bc5531ad5cc0b9d1b77efcb9ef9b6f46ae190c935ffa2dd1f98944d90303239466237083d","ssdeep":"","tlshash":"3de023d683c859b3d81d1022418bb104e5fb09142062064380f11c253999e801ee4b6e","first_seen":"2026-01-19T19:31:41.736073Z","last_seen":"2026-02-20T13:31:05.015169Z","times_seen":5,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 271\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-10f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YelqAJl%2F%2FtKuMxKzpdNNtGlH4Dq%2BE2tBHIDjxxLGp9YkGdOzDDQtRU2ucIR5b5cnuP6aakT4cVJVj1VEHnDTlixU70cICOK0q2%2Ba7jm0fU4qfQ%3D%3D\"}]}\r\ncf-ray: 9d0e5c081b8facd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"096061df6dbe4c432ecc97445ea35be9","sha1":"fa5677899342d34481eb4c8008d4102ae0c30de6","sha256":"9a296492165b850d396284f7b986d9a98c326a0aa3a8cf91c700b0ee10e05414","sha512":"13f8989cda081869f68e23230cea5ffe50df87694b579cacd36a8e94835d304e69bb3401606085597d706de932914d17c562d317a56baa6c314924f961209971","ssdeep":"","tlshash":"fad02b8a01442c3ed63c4632d2094c4899af461e51f0439521d20c79a7e5d51a0d46a3","first_seen":"2026-02-20T13:31:05.016597Z","last_seen":"2026-02-20T13:31:05.016597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-16.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-16.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 369\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-171\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yssCSqGJRFRRj4I8OKSItbjdFTES09lNOD0fieyux903yX8izcElkHtGvhJC86CmrUNc9LoR7Layy%2B15g5Rq0daB8hh5yNUQBBT9QctSl%2BErjg%3D%3D\"}]}\r\ncf-ray: 9d0e5c081bb6acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c385d03919b4a3a634ebf46f3f759fe0","sha1":"a0f621c403ad07a9bcae313c35b97e75e2603b9c","sha256":"cf77b698955f813990c33fed7659b5086702cb59f2c2e7ecb25896c5c4a0b0dd","sha512":"ccb0a5a4c03bc00c25b0c3f299d65d767fcec0b21f502dab0b6b445a5e8f922e6bda732ec803cbe01e1f2909e36527c9e55c1b2ce671d4820345c6b7db895d42","ssdeep":"","tlshash":"f2e068e4b1600abec5094e5b44982508fa3c00a98aa66cca47f99cb93915c165adea9e","first_seen":"2026-02-20T13:31:05.017887Z","last_seen":"2026-02-20T13:31:05.017887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geniusterminal.xyz/proxy-image-14.png","fqdn":"geniusterminal.xyz","domain":"geniusterminal.xyz","tld":"xyz"},"ip":{"addr":"172.67.183.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geniusterminal.xyz/","date":"2026-02-20T13:30:36.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geniusterminal.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 21:59:28 GMT","end":"Fri, 24 Apr 2026 22:57:59 GMT"},"fingerprint":{"sha1":"7D:7F:1E:23:68:8C:9E:2B:5F:65:FC:0E:25:EF:71:8A:E4:5C:C6:B3","sha256":"B2:07:78:5A:36:CC:DC:D3:13:40:EA:A3:5C:62:B0:FF:DD:90:64:BB:4E:91:0A:69:DF:F8:33:2C:9A:9B:FC:F0"}}},"request":{"raw":"GET /proxy-image-14.png HTTP/1.1\r\nHost: geniusterminal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://geniusterminal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 13:30:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 654\r\nserver: cloudflare\r\nlast-modified: Sun, 25 Jan 2026 17:39:26 GMT\r\netag: \"6976554e-28e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cdn-cache: MISS\r\naccept-ranges: bytes\r\nage: 48\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqsJb1KvOh012hoT6RRCBRSYPPnfWSaViG4PIuNu3gB0t2LdU4biv0oxrtnmYOw80OEEvnHoJpaEr6rxMDmaEf%2Fv%2FjOjnXBn9vw8eF28PJkt0g%3D%3D\"}]}\r\ncf-ray: 9d0e5c082bc4acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"3bb5dc23516178b24fb5c5b8451e3b4b","sha1":"a39248da753326724b4c016ef05bfe0c04d9fbf2","sha256":"54cc9e1779fa0bc99bf4613fd6773faea2540798aabb0ff9b5c04c9ea13d7495","sha512":"91de615e727034cbc8c54343148e144323acaa17db27184e8a5a84fe947a1141505d7106cce1c96cdfdabd49c46257c75e3212a5cdb0d95b975d23d4e55b83f6","ssdeep":"","tlshash":"caf023cc67c80a9d96d952389f930500c2675c764912d54a21e592c4fa61698ac7c7e5","first_seen":"2026-02-20T13:31:05.019231Z","last_seen":"2026-02-20T13:31:05.019231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"geniusterminal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}