{"report_id":"28e026e0-f4d0-430c-b86c-b8ef5a7c59d3","version":6,"status":"done","tags":[],"date":"2026-02-12T12:21:04Z","url":{"schema":"http","addr":"sagrolimited.ltd","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"104.21.88.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"title":"sagrolimited","dom":{"size":43044,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27697)","md5":"33069f8cff0841090d7c75bd57ba335a","sha1":"e6641ab2462a83785d86bc169524316ed20cfcfd","sha256":"bcadf1b01ea1a0a965db40e49a98ea582117d0d73ad817fdabd9f90dd2f733de","sha512":"1a84f0530a8f64026c94b37472bdc1ed0aff7076fd5e2386004b52a22ef36379cd98b3d90e2b36db63f6390d44099bc2a056cdbb7376afb7b2fa526d6bd1f65e","ssdeep":"768:4jr8FYTbfsTO+LDGBPKHs9TvfqaSQXOQqGMWYWf:4jr8FYTbfsTO+LDCPKHshqa/XOl6rf","tlshash":"241396176780462c9c5392a8f399e54ea32df684ef6359eef7c62410c2d93ff088b456","dom_hash":"domhash5a2e7b986a359100c1311ce7180015d1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sagrolimited.ltd","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"104.21.88.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-19T12:21:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"sagrolimited.ltd","ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T11:06:09.623594Z","last_seen":"2026-02-12T11:06:09.623594Z","alert_count":109,"request_count":109,"received_data":4940791,"sent_data":57413,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.3.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Bootstrap:2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.15.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"spin.js","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}]},{"fqdn":"knoxglob.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T11:06:09.58982Z","last_seen":"2026-02-12T11:06:09.58982Z","alert_count":0,"request_count":10,"received_data":0,"sent_data":4859,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-02-09T04:37:21.399004Z","alert_count":0,"request_count":3,"received_data":383767,"sent_data":1704,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":226367,"sent_data":1492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-02-11T20:05:56.47035Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-02-12T02:12:11.763945Z","alert_count":0,"request_count":3,"received_data":323867,"sent_data":1369,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.182.56.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-02-12T02:12:11.779343Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":605,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-02-09T07:15:42.209177Z","alert_count":0,"request_count":2,"received_data":83974,"sent_data":944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-08T22:29:54.459767Z","alert_count":0,"request_count":4,"received_data":25254,"sent_data":2165,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":11,"received_data":384858,"sent_data":5891,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-02-12T03:26:38.670504Z","alert_count":0,"request_count":1,"received_data":7668,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"static.getbutton.io","ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-09-03","domain_rank":386210,"first_seen":"2019-10-01T09:11:58Z","last_seen":"2026-02-12T00:06:09.533406Z","alert_count":0,"request_count":2,"received_data":885308,"sent_data":863,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-02-11T20:05:56.067957Z","alert_count":0,"request_count":1,"received_data":1556,"sent_data":525,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sagrolimited.ltd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T02:50:39.701747Z","times_seen":407514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/webpack.runtime.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"957da88059464dd1baddea5f3526b92b","sha1":"0e00a87e60bab6f1eaa6fc986c98b35842fa8153","sha256":"b9abdd503536033070a944c44e36bc18812fc38d15749606a057254b298a232a","sha512":"1e686438f7cacd94d017efbf6e3a212896f000ebf9134c267be2f2c8105b62f26136a3bf8b28420bdce269a48cdca3b2578946ebfff48c1375c22b200f39a463","ssdeep":"96:B1N6AUjqn93zgcf8FD4larNVwbVLXkqfjQezovOA8S2:LN6j493sjFDlNwdXkymOhS2","tlshash":"29a131d41b90fc6735e135c8e11aa771652fc0333d1bb8c1fa22dced98e8a9187a9971","size":4958,"data":"","first_seen":"2023-08-20T22:12:33Z","last_seen":"2026-07-22T20:25:57.719931Z","times_seen":2231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d12d58d35825299b77044854d01a1d57","sha1":"39ee67166de06d9c6ca382f4a4fa3b94b8db815f","sha256":"66dd4e5c21b276f0f6302f05a0acfaec62edc461993593a028dd7113923f704f","sha512":"f53b79afc051109cddc36ac25e1e2f1bc2e8f6f717b25e90bb80940716a98a2019a7f0cfc48cf911da91dae8bf06d83053b2bce06feca5d50b157a6eea0973cf","ssdeep":"1536:Ybgq120spmYjfsSqxHowWtsSvGRPQH0v86YxkD1a3x1KxuCySjF4kE:AgZ0AOSkRPy+mS4","tlshash":"c843b5493281393981dff1b7212f860ab2b7a4ad2441819cf9a4ecda5cfcc49547bf79","size":57568,"data":"","first_seen":"2023-03-07T01:31:41Z","last_seen":"2026-07-24T11:26:17.465051Z","times_seen":1890,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min9073.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"58f50dd658be75a2e9485a1be9807d9f","sha1":"a7cfc7b8e05c4b00500f49ab4a6914d7228febc4","sha256":"87530a2baa39b3f6f02816034c7d38a3412936b1c633783128c5f01c01dff8b7","sha512":"663d0341b45bc0844c3cd5d3dc76959fa92e06f3011bdd97fe36590175502d1a386259d2f907c0dd83e897b9b2dc46192585fb86e66bfedbc9ca3542d680db75","ssdeep":"384:IgLpcCmP+5X/JAG6bSPNVCWhzTOGIYfTZCyORZzLUr92AQPWR3:HpcCmMAlOfOYsLXuDd","tlshash":"3d72c7cc72c2b597439359b2805f104bb33e6d80689da8a0e629f1f53c3491d89b7eed","size":17475,"data":"","first_seen":"2023-03-09T00:04:28Z","last_seen":"2026-07-22T05:59:16.547558Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min38d6.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8935fb76a794d27524f8696fcba58ea","sha1":"fc8ba7554babf97bd540e5019a51663e1fd4de99","sha256":"948240da929defbe2f377b6a2173cf7c0988edc05972424cb3872abc739aa024","sha512":"dedb414250e2fbeb70ab74206cfa432eca9b8c036cb155ec3d5ec6b2b886a56a2d0f09929dc7e281f0df9a3bfd0b10fb57e8723506c0e9065cf356b22d6cd9e4","ssdeep":"192:4v6TbN3SLFNjilJ5b7kKU3JS8OH+o9MlA9aezD:4v6TbNiVio3JAzD","tlshash":"b912cac83692b5f096b36026d47f7616b135e674742cd440625ae8e06cb9dcf90b3b3d","size":9223,"data":"","first_seen":"2023-08-10T12:12:41Z","last_seen":"2026-07-26T18:35:44.041429Z","times_seen":2272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-floating-effects.min9073.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd95e280c51af098d22ffb59262dc6dd","sha1":"911e1b12c0428e8fb0a4a02f21616300cf640094","sha256":"4e54c2dd374aa5560978e77cbe5bbcdcb1593eda379f641b92519d4ab1983c18","sha512":"c3ed9bd05d1745b9543c727e902dda6483299f523725b8eab4ffb96144ba7c4195a52f0291bc364b6b265be01b0c4312cfdb08bf2990cbb521074099e7b690f5","ssdeep":"192:/DZo1tJQnI1lqvJfx7EUjdI3phfvJjp2eib6:/DS1tJmI1lq3wDp5vJjp2eO6","tlshash":"5d02f2afb4366154e0f3176791cd0f04ad3539a8b8366d40e25bae0029bddda8f4f784","size":8944,"data":"","first_seen":"2023-03-12T07:06:55Z","last_seen":"2026-05-20T16:50:42.061001Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/counterup.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","size":1067,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T01:18:38.532235Z","times_seen":12671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T01:34:03.729134Z","times_seen":73568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-27T02:51:07.921576Z","times_seen":909752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/header-footer-elementor/inc/js/frontend635b.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf77399f3133c7aabd02adffdb64f9ca","sha1":"28e9739756898a8410e2d818832bf761714e23ba","sha256":"7df5bb108fb45ffd903b10fa15e2c7b9b869898bce89408d06609b8e2441bd30","sha512":"437a75b624486947dc06e17920baf71efeec43e305326733b12b43b23c43b49ec6cf5876e8715bc227c348d72798a496d38a22ea71ed93f8f799410b3894d5d3","ssdeep":"192:ejUnO66U3rNBqnnahhnPnlLoOaTWsIsujsTrA1QUvxe6dTkLLxJEvkerJ8OlXgRB:t0ixvlLNbU2TgxdWNQvQo+iT","tlshash":"72c231c577ae1033507f3a8ea517e0ac732f84b2c51514adfeb885ad29e490833e6d76","size":27750,"data":"","first_seen":"2023-05-12T14:34:21Z","last_seen":"2026-07-26T15:38:26.376527Z","times_seen":1899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/frontend.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9b5a759ee246cf1f78475d86531a82","sha1":"a02f856652d602b3ef9491c2aefcf9851cbd4d4e","sha256":"5a85ef05aac6b235ced7b52818d4a96d33d8fa778342706baf3d98e3c1335480","sha512":"db6488455b0f42be9a2845da001b3f1376501bbed411beb9867de5c258c0b3d1d04b040ba92428e8f6ff2292c6fc78bccaf9da1455e8fa066842568aff2826af","ssdeep":"384:oTLpcV2m6WYdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOe:oTLyV2m6WYdndptaQ9HuGJswyV/pkTAS","tlshash":"29b2c7063163a87a50cfc157e067420e7b378895740570ed7abc6ceba5b8d9a32eb335","size":24404,"data":"","first_seen":"2023-08-10T06:35:24Z","last_seen":"2026-07-24T20:57:44.815803Z","times_seen":1956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AAgG/d=1/rs=AN8SPfpYUifknm5HXpc3sN6FXwwldLo-5Q/m=el_conf","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fd9cfbb758f4edd48cf14d7d0df8b7e","sha1":"78f3067e0a4211c17aeb3c5b006968511579fb95","sha256":"086358f6da42f61566f3aaac2c9d9c05a91dd47183794aa0dd883d136f4ae65e","sha512":"f06ab9f7421ecd00fede4f214daa84d9c876fcac0aadb82d5966f78b274309a42f4e91ff54607311b63433f50aa198f858e02c7a5bdc7af503ffbd56842bd844","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNeziAwNWnr:Xf+e9J3jHvK4UEgziYr","tlshash":"6c83b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","size":81657,"data":"","first_seen":"2026-02-12T12:21:12.511519Z","last_seen":"2026-02-12T12:59:57.880202Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T02:50:39.701747Z","times_seen":407514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/stellar.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"257c1e014bfdf359297cf2a80440a0ba","sha1":"c0655887944d3b358be98b7d6cd0dcdc975a6b3e","sha256":"1dd583c8ff8eaeeb2f5622845527acbf0e4a875e335b4b706b305590d5a7b456","sha512":"fad1379686aafe3c9bb763c66b199bceb7d77e94581c8fcbd8c135db10dacec15aef111164fa273335dec78b32d579168059edf530320c789875fe8041ea4af9","ssdeep":"192:t7YR5Z60POKYDhAbOWZTqkOhda3WH+TmFHPoMlgI9ru4QA37cmhBQbk:ZYRL60POKaAbOE4QA37cmh9","tlshash":"2c42ef0c72a0242676cf733b916f238d223e74585d1284bc707dadda7b2ae997053e79","size":12597,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-27T00:46:53.522062Z","times_seen":6419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb1ded9034a7c9911e6ea30e262ce4d2","sha1":"63d4627f07874be8551d3c284417e564fff0b686","sha256":"80da038bddd86935a3789bde76efac639f50d758246c1974950fb7040a823b8c","sha512":"0124a6ae9a064ece36782458c5483768fe50c8bdcdc3e52e2f63d09a2405ceffa2d1c63a6cb36521bf79811c1b5b42d3477982bd339a7c66966d23edb49d96c4","ssdeep":"","tlshash":"7e61979a3779388b317b14e3aa6f0e0beb7654371684d034d9baa7141cb14a3c379d89","size":3288,"data":"","first_seen":"2026-02-12T11:06:16.094318Z","last_seen":"2026-02-12T12:21:12.521831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/hooks.min2ebd.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bd48eb3bd568033e96caf0fb62e6690","sha1":"b38066999294b99d92d95db5f38bc15707eb1f22","sha256":"7868467c94a5aa0b3f11ef542f45287967f9627b3b5acdc86e47f8f77a126596","sha512":"7fec30cc4223c39d9ee3ccbba8cc66c90467a9987279334be43aae4c251f6c618f6b3ccf223147c79ce6c463c89f0ceb0d0e4e471ad9ab6574ab32af728a535f","ssdeep":"96:+5gEBc27Du/3+ZrURT19KrAgQNSt5s8G07AajURg/o0K:Ulc2Hq3RRB94Qkt2WAeg0K","tlshash":"dca113c474c3b420e3737063a07f5456b27e9ae5782c8481d25c94d57d73a8ed077aad","size":4627,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-07-26T18:48:33.871165Z","times_seen":22826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0163fea76e3ccb9ccd0d711bb9e71bc","sha1":"987ffd2bbec6402fffc69ca427961b052e7b3347","sha256":"7c08e4be1c459f4f4ae5ecb0e0b6042d1548bb9e0a4f287aeb5b63467e48b2d0","sha512":"12cba7035c0b0fa6cb6fff2bf50a976866e6206b956f2d6e5deebea6074580e607bc25899a52707c98b0270cc161fe4bc97e1cba597dabdbfbddd9ea48acd2ea","ssdeep":"","tlshash":"6e2148dc262cd8eac6502e6c15bc8e7358c98d3fe6772c444968cd8c477d4769b9cc82","size":1332,"data":"","first_seen":"2026-02-12T11:06:16.095159Z","last_seen":"2026-02-12T12:21:12.522437Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"536c06e0afdd8edd1b52793c99c51551","sha1":"08936563829e1d34e4881feff8d21422da8d80f6","sha256":"ba7fc836305f8a4f9994e6e446056c559acc9db88fbafe5cb8736ca99f75124f","sha512":"f7f9c0e44ea9913a725c470f2058dc750ea7d3eaf59148db7e9e5eb242d1fd9547bdc86c545f7ed23abd3443254072eed61519239f6c698b2ff5b7ffccd15399","ssdeep":"768:RPrtp7+adwdddrdDdVdydOdad1dpdLdFdWf2qMoBx7DV2dhd8dXdLdz0Cn9jXUdf:1nqaC/dRrIM4D7lv+Z27Gh510Cn9jXMf","tlshash":"42f2a66071aaca7841cfc4abf423268fa7219c9cb403f4d776fd8d92a564e876390771","size":35399,"data":"","first_seen":"2026-01-17T18:01:04.54328Z","last_seen":"2026-02-12T12:21:12.429835Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/switcher.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1b65ac45d7d892a0dba85877b9249b2","sha1":"271022212e7050fb85669b8a73ffde69e1b6a004","sha256":"a4666e4ab0d520c64a50c33071e97712a68494500afdc93fc0f0b4de5358c51f","sha512":"fa7a70f02fab5f404219c42114fbb383e45ffe265a8a271f5c5d0a792f769bdbcb360e32379d33f57a9ff3831238d6f4bda4f8168600fcf22108b7c65c4792fe","ssdeep":"192:LEriqKRTiEfE6DBdCrbGyeBXagHoiLRB60rFLwTLZLE7pMqT5709pKS4U:LE3K0EdDirTe4gZLG0ZLMLZLE7/Tm91N","tlshash":"43224d3af0ad24efa17b7069f87fb76034ba230af6104948b35d85372bdd20591a751a","size":10266,"data":"","first_seen":"2023-03-09T14:28:12Z","last_seen":"2026-06-14T12:35:14.691374Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/custom.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f484e273dd7723d973575c0064da199b","sha1":"8035c709d808d67e80edd1ed94f874444be739b8","sha256":"2e3700d72043392d40d64783cf884ee753244f055621a2d7c4c0455de570366a","sha512":"ed7aa32669e150e5315389620fa45c91b4ead2d6283bba3c9bfe7830df41161d9eec96b0304560c4378c9aeaba1ec5858a4a3db4d9d8824a6783a4712d494be0","ssdeep":"192:pbFqS5kmD/tmDT/C3vCEMBWFrysga7V+A0o00Vfz6NEYfzMPErTX1ZDoV:px95T2K3vCEMY1ys37x0o008e13","tlshash":"5892821cfe2c70699537fc2ab77f2748e22f5112b2585951751e90e40fb0b2ca3aec1a","size":20902,"data":"","first_seen":"2025-08-28T22:07:19.845991Z","last_seen":"2026-06-20T13:07:11.878435Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"388e603c242158efbd51f260800e41e1","sha1":"36ff4549171a591c68f9916de69af0a1fea758d4","sha256":"bdf8d16bbe213fdb6e827c349f1798f01b17d061396dc90474fc7d7a0ad1328f","sha512":"6d4f4cab210ec63e911a3dd33b3d143d8b0283c8f0490af1e80567d24504d56968f6321a39b4ae35ee85cbc0f82da59e4c19e25dc24b3ffac8cd1926bbb30cdd","ssdeep":"","tlshash":"cfc08c0bb071114b0087f009d38a08883134810b01390d28368c608a3fb3f8c038e6ac","size":194,"data":"","first_seen":"2023-03-08T09:46:14Z","last_seen":"2026-06-05T04:07:56.766173Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination9dfc.js?ver=3.1.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85fcc89aed6d13d0d123840277401003","sha1":"7d9a0500313e9919d88b26516fe45ada973a66ea","sha256":"cd36b730e0d73625c445a518aa7af50baa2c2de208bc45c7676bf9e81d96fccc","sha512":"42c1ab4052316f389e49beea1dc58dbd9f97a68b3ee229495f7fcb806c5547732086c0b3c7d3d1df43055ccbca9d8390d43d9a8e03602e9c091c32d92603dcd1","ssdeep":"","tlshash":"4a71304474636aa6e27b20399d2f790c35a660bb3041ec69fe0d5085dfb04a5336f9fb","size":3796,"data":"","first_seen":"2025-01-22T04:11:57.404121Z","last_seen":"2026-06-29T02:27:16.271174Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header694e.js?ver=1.6.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e2e37118cc6cb413458b7db92722a4d","sha1":"93431e41f842fdd12db7fddc2575b54819677e89","sha256":"d0e9b749370f0ce32d56543c3fd6bc25b376a46117255fb8fcd73ab7681d8ae3","sha512":"e7ecda18900adaeb52499e77d0a6d0bc40bfdef92dfddc823d2f19f1310c1b8bb0111268df2f1f4b00f8cd440bdb60114576d98f79a4a5cc5b586550ff2b08b6","ssdeep":"192:xgzYybAYzdwi2aoPqLjLCNCJy2Zz0I0y6cs4vRAqWi7KBP8K8:YfGk","tlshash":"9e82de1caeb62112509bf1bac3bf6908f406c0075259e9167e4c53bdafc487ad5bcbd8","size":19133,"data":"","first_seen":"2023-09-02T23:17:16Z","last_seen":"2026-07-03T05:11:18.932887Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/waypointsdbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0278360babe563031f14717901af810a","sha1":"f6cf7b7b52fe55227871bbb39aa30bbcf2ae5673","sha256":"52f4920ebcceb1b8a8f1553603c001846c55c14607df4df2eb749a48c875d392","sha512":"7644bcae784abcbe8e61ee3604c748d3557336510c2f88394b98113f62cdf2cf7b2c6748159024209d820d01dc706d4a0d214667e1e1b3e8568f5c57f2a83ba9","ssdeep":"192:mE5WzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEUoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"cf126189750134221bdf50fad91f434ab337582ca80680bdb4d8d4ed29f162d676bfba","size":9029,"data":"","first_seen":"2023-03-07T01:28:28Z","last_seen":"2026-07-26T14:29:40.780258Z","times_seen":1980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/imagesloaded.mineda1.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5629,"data":"","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-27T01:00:37.368454Z","times_seen":23300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/wp-polyfill-inert.min0226.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX","tlshash":"8cf102b8730569736dcba1a96077034326232027548a54287738dcff8dfce552577bb9","size":8171,"data":"","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-07-26T20:38:48.179927Z","times_seen":50491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/owl.carousel.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-26T22:58:05.127636Z","times_seen":20125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c8e4fa0e56050e65daa90573c8a1e8f","sha1":"2df13a9cc9c674fddb9270022625f6a03b35f864","sha256":"6010ff48b9452ccd38f97660ac486ee00416c21ec6a95eeaddc608e6e19421d5","sha512":"a67b4bce8713da5b1993ffb055aafae3ee58a1a651c6cf664aa442dfb9f92dbb2f876684a2cc002978fb16d9cfdb18b81d2066f9e1f0c8542fb1d042aea6563e","ssdeep":"","tlshash":"b9f02e12706a9c762e3f2652d8dd35cb69af809950c18991dd6df60d0389194018555a","size":487,"data":"","first_seen":"2026-02-12T11:06:16.096521Z","last_seen":"2026-02-12T12:21:12.523649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/ow-lightbox.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f474aaa8e218058bd1b0e9b4e230b9b4","sha1":"728c7375184e9177a34a421b53d200d62ced1e66","sha256":"b650fba070d466085d4344b435ecdfb4f450dd08dc4124be007e39c4c6d9e1ef","sha512":"0fbb7c4a471e1ed4230663a9f5901ea9eae5ca06ac537574be6bd1be925960d3c5e4d0d1eaba45d27af247bc5c5282059aa22747d0a00c656b3b486180005d51","ssdeep":"96:wmwS3E/clNZ6/BVcqHAAdMJ+T94MDuSocn:vwTUHP6S24Mhoc","tlshash":"5e81b6c9769070f603e74779807bd35273f5e4588a45ecb26ba8c9a92afcc1d0163f64","size":4111,"data":"","first_seen":"2025-01-06T23:37:30.962394Z","last_seen":"2026-06-29T02:27:16.356026Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/bootstrap.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-27T02:23:31.106971Z","times_seen":96519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dae5afb731ec3d218fbffbbab68a1b3a","sha1":"01a5a295304cc4690d025715bbdaeb57749f4354","sha256":"e5584391f5c6698e6c2d071c0fe450eef3944a53b75a7bc2518ff4174c3945ed","sha512":"73358455bfb735e6cf3866a7119753caf174621c4fef2da0115bb21cf1e7937219aea6a7e39b0513d5eee785fa7bfc807fbb61cff51215d9da8cd9288da38579","ssdeep":"","tlshash":"8011c020f1d6aaf74897efc135567413706844306044bdfee5798cbd2d674342609c69","size":1047,"data":"","first_seen":"2026-02-12T11:06:16.097351Z","last_seen":"2026-02-12T12:21:12.524225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-27T02:51:27.137064Z","times_seen":733669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/drop-down-search.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5dd52e245250392abde69b8ca13e4a6","sha1":"48a71fbc567e87ca46b6b1abf7b75314e8f9e7b1","sha256":"3384956e490e6ca7dc4508788bf5953bf3145e40f06b5955cf7aef3f2d42ff33","sha512":"20693bac4eb0e18be3b2311759f11c6b41242347411204e9b4c94f8e7af175c2d9998938c97f5f58c345ef203b85e4a0c2cd52ee3714a3365b24003ad947cc62","ssdeep":"96:ng+t3RyPsefIJ4W58JbTfkpPbSrMuL5zfqMC9ZqTg:vXf8bQdbwMuLhgZEg","tlshash":"50f1358bb0d0f0f2039791b8423b81466ae1987c154ae8e16bf89af137ddd5c9153f26","size":7540,"data":"","first_seen":"2025-01-06T23:37:30.975649Z","last_seen":"2026-06-29T02:27:16.431329Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97f39929a46ab28d95b8d5be092e6bf7","sha1":"b272f108e181f074e31b3d6232b693e203894a5d","sha256":"b82873e9441abb9739dfca31b6880855d2043b643522a4011e29474d450b9a30","sha512":"7b70cebd38604f91e9b7d3c5c0559d1ca72c910b6de7b7334af2cc4482a56947a2f4daac6abee40cc2844499701b005b7c6d617c6e175c3d7bcec6d3393e8199","ssdeep":"96:B1khqdL5MGS9hRm07DEpre1jonx4Sw2AlLs9AVULUVGOhemLR6i3Q0lx8k2:UgL5MGSzM07CrtnCMd9AiQHFRHqk2","tlshash":"3ac187d906949d5b26e439d4b0576b702e3dd0333c299a81ea12eddc19f8fc083ea933","size":5667,"data":"","first_seen":"2023-08-10T06:35:24Z","last_seen":"2026-07-24T20:57:44.588269Z","times_seen":1957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af7b834054e0429b93d891563e0c2fdb","sha1":"50d6dc75e0e8e4221f929e15dbb6fdcc13dd92b6","sha256":"dc102f4ddbc56a70a87f4a4b4aa1e815a9116bb59cfb5f961d9a6ec25fb879a5","sha512":"7f6b1647ae49d776c4758067306d1b4134b83def14fb3aa9531f5dce194e5e7facfa552a497685fe23d43067d5a58b24963bbca948c4ca1e30173cb24b11cba9","ssdeep":"","tlshash":"d090040d511d1cf55d404101f14d31d3d50005d0d0044c3c77c75445010ddd113d5c05","size":49,"data":"","first_seen":"2023-03-10T14:12:14Z","last_seen":"2026-06-01T17:52:26.214418Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","size":442019,"data":"","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/select.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80517604c8ca0eddea4424255b631120","sha1":"11e64dbae4e8fdbf8420b8e0d4178eb1b527fda0","sha256":"38e7336b4365582370ff81921c7c12b14f22e3850b79ea4dc63d2193419960b7","sha512":"2465bf811123925604ec736ac978ecfb18d23b0f42331b5018de33610d557c3d734c4db388e119d56a7775193b6424e064d44ec02cef0672dfaea15877919239","ssdeep":"96:InYM4TkBw748JDKFDqhbr8OefQMQMAYP+:9lTt748JDKFDqhbtefhQMd+","tlshash":"6db12185b1d1b4f582a781e1452b9005eae2985d4504f8e07bfc87a16fefc1c6276f36","size":5181,"data":"","first_seen":"2025-01-06T23:37:30.988234Z","last_seen":"2026-06-29T02:27:16.226327Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/waypoints-sticky.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"612415a12227cbfdef490d3abe75df7c","sha1":"1104fd74f8c54c0ef714743ff85b7a8e30058cd2","sha256":"27d05c15a13935412bdc276aa166e523b8ce8327e7761de4af653039ffc8e690","sha512":"c5112c60ae8107af8fd12cd6d9cb559f018c64616aa20cab1e279cc8c5e8431d0aeebbdd0eb3da0e5a6bed061ef5bd5a3ca8f602f9f4f75525c67eba8f11cb23","ssdeep":"","tlshash":"7a21388e39313216068b95fe24170a4db1b387386887602db0f9dadf5765c0966be634","size":1260,"data":"","first_seen":"2023-03-07T12:23:16Z","last_seen":"2026-07-19T01:59:52.492232Z","times_seen":185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/scrolla.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12936adcea486ebc10aa85f795f10c22","sha1":"ef2658054f2fdfdc974662a3f64522423e6c352a","sha256":"499ff3b7888bc44b4da9d8c215e328058852d985b86ccd1274b2f5c3dced8d1b","sha512":"0520a18b9a65cd7396a9e8d2730d6629d1d5df263d43493f8cf9637df5318bb783a071ad40fef9f05ef2623b54e1ea310e78b0d4d88bd190a84da56d0821d2e1","ssdeep":"","tlshash":"b821f0adb962161a12ef7a776e0f2104c1337cb158114001b02efb5d5f6aa619733a3e","size":1126,"data":"","first_seen":"2023-03-07T12:27:23Z","last_seen":"2026-07-20T06:28:23.808972Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/magnific-popup.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T01:18:38.54312Z","times_seen":71908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-07-27T00:15:02.167629Z","times_seen":68415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/ow-slider.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f249575b37232d51921e82536004592","sha1":"5799b78581ed5968346cade85389b82b2d6a304d","sha256":"b817c9b9bb557b34222c4598548f3569a7c8f2bb30b796a6c92d47dd740e4271","sha512":"63db83f3e2126724bbc68a12f3bded2b8f0eeae4216ce21c94f8774aa2f4a507ab097910937e5f541298ec7a01ad2f5eca36adedab07ca967706cc501e0d55b4","ssdeep":"","tlshash":"5a41318f71e074e6035752b401afd24666b1ecad5206dce2d36857f829e8c1e4293f79","size":2002,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-07-26T21:07:46.910548Z","times_seen":9675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/i18n.minf92f.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2c4e2a562e06e1cb22293a5b920aca6","sha1":"a7b5a369ac4883f1ee7fa701b238d20238b675ca","sha256":"698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f","sha512":"7117e879a8a4d8c8e1acd1a34247a7cf420128da970ed42975d6a04665ec571dc388c62fc3b50deda0b9e896f599d56ffbc28b25a45119cd79f5f45e3e58c178","ssdeep":"192:zofOLSBW36LJ2iBYDe7qBoegqC4Wxaftm9Norr7dWSjSWfYN:zofOLSk36FJBYDeubjCWtm9Norr7EgPW","tlshash":"b712b4ec71dab056238721e054afb005f13aaaa431d99cd0db90d9e17e708c961b3fe9","size":9445,"data":"","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-07-26T17:58:23.43071Z","times_seen":21402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/popper.mindbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","size":18994,"data":"","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-07-26T19:57:29.897476Z","times_seen":6842,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-26T12:04:59.564342Z","times_seen":118751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/frontend-modules.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7fcc0d272097507bfbe43d4eb9282db","sha1":"c2c6d530898b9bb75d87c99211818955a4c707e3","sha256":"f09639d5221135bf3c3c381319f9804af78bd68d84c221db1efa6bd38f0abe65","sha512":"8c363c7655c0fad9d42b856dfa307907358382ebb9f25d86f3a6f9a230c68f3d34f888087234b39429a25a4b9367cbbc55f079fe738557184b9e4773d0df1f18","ssdeep":"1536:leAjA679C+QUVYNIe8HeBHmjkBzRNx4cR8+teAWuHDPh87FO0Q5RSS2TKtoO4C3Y:4JpAgmKN2Z","tlshash":"9443e7423211b8b307ef41a7702f120af3221dd8740eb5987669dcf6b4b1d96637ab79","size":56154,"data":"","first_seen":"2023-08-20T22:12:33Z","last_seen":"2026-07-22T20:25:57.75025Z","times_seen":2226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/ui/core.min3f14.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","size":21438,"data":"","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-26T20:38:48.174257Z","times_seen":45471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/isotope.pkgd.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39258d5d7a1a2c1df44cb3a40e494e9a","sha1":"a6a23845c95b5551c3ad8850365b5200331e46ab","sha256":"f96151453bf5b861219fab32920589c930580c4f1c427f2e023e7429e7e9f482","sha512":"54304e2250dbb82e155b1189366b85450d0b8b448a903a661b2ba1006e4b4c32ddfdd27f4b458c571ae247663e0b23cbe60ce3a4de1fffa8aa595049961b74b5","ssdeep":"768:NMAyxzGdHc1zfA9ZVP4eAnmc6FumKSsCD6rD6G2UfdEhCDz2wK1Fxt:Mx6dOjARP4Nnmc6FuCsCD6rD6yVEQDzW","tlshash":"25f2d84f73403925468bf166926f160fb137e56c6a4690acba6ad8db1c79c0d6033fbc","size":35313,"data":"","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-07-26T06:28:35.57448Z","times_seen":3040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2406271c10afb5606709f3f7ed7891","sha1":"e41a81155620423e9579b17089cb2fea147fd057","sha256":"fc22d50d273a1e556e1066b17a629a201eab65e373521cca98632c6774a31d0f","sha512":"564c21744e9221a206d930e63fa48ed1919d95957a29a7d22fb607ef1fa2f0fba01ce969cb7f4d41dc7a2c79556374f92955aff5a7d94e423d62840f038e5eb7","ssdeep":"","tlshash":"9411575a2e320e245baea7cc61ca3aaf88d4033325d4b54d16d9e46501f7daef0492f7","size":1108,"data":"","first_seen":"2026-02-12T11:06:16.099984Z","last_seen":"2026-02-12T12:21:12.526451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/waypoints.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","size":9028,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-27T00:23:35.138744Z","times_seen":17974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/js/spop.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e28d2399525ea423ef20bdad40a15318","sha1":"c516a83fbdd941f6893e42811d1422d1387266dd","sha256":"9b77fce8a5c6df3ef66a7e852aa1c4578e2cce76e8aeae857df716f3834a5ea3","sha512":"9c018e4f17eab5c13ff83d92b372d7c8f858e4b3699c07e2872656560dce6f193e33b370a0a578cc14106d6871f960b68785b3aaed85c8f1d570981a7f5829b4","ssdeep":"96:GEnTeGLsAsRDK2j7PsvsjPsZlOu8uR0zIbVVCEUEI:hnbslDK2HUveUZloe0EBDnI","tlshash":"ba91521d97ac532642f622dd745a109af03c8936ea5b181fbcecc7f49ad1c1c6721e34","size":4366,"data":"","first_seen":"2026-02-12T11:06:15.97215Z","last_seen":"2026-02-12T12:21:12.479204Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrapdbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2f60e70a7c89e10fcb5a0624167dbca","sha1":"fea6d4919d9ec8d00ad46a4eaef058a10a1be6a6","sha256":"0c28b1328b50f36e646f70a0e818f268e5c41435371a5011169ea255688bf585","sha512":"02ee11b0eea70dd2602beef6d16c5d2ad4a8a043d3f48a832ca165b5e33a1c70a2b1beb634c819af82559ac9e9afbb21d3158e267c44ed60c79c0a333fa77b19","ssdeep":"768:bV4MJt+pEzsuwAHA7U2Yu1R0keF8Ubbqlw7J+E0/y2l6aNY7nW384zjMoXMy4POx:bVDJt+WYZZS8c2vLq7mt3H","tlshash":"1353630e77f57472935bb039896f8809b276904f5a4aad487d4c50e80f6883c57bafbc","size":62890,"data":"","first_seen":"2023-03-07T01:28:28Z","last_seen":"2026-07-23T18:12:31.997905Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c98ec72c4f65421553f357aa81624f4","sha1":"ad8b4558977901e242ef3c06b838cbe7fa799585","sha256":"ed95b66efd8d5f124581a23686c5cec36d05d8f603cc5aa2a355cf8676654de9","sha512":"77b1ff2febf460e3fc0a601089e47249d4cc8327cd48641c71c2c3f3ddd662ce31864c425d450783a5da6b1ca46835b3fbe243d01358481892fda981ab745dee","ssdeep":"","tlshash":"69419220794559bf83d39b51392bbb03697c09355041b8b8f4fc487e24b6a79320be87","size":2395,"data":"","first_seen":"2026-02-12T11:06:16.100807Z","last_seen":"2026-02-12T12:21:12.527072Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/shortcode.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eaac8d34018ec475eeade190577578ba","sha1":"ca815b572545176428dbfb4ba91e88b09a0d4d68","sha256":"fe59c26e0db6fd533f6092152e5d73a31414239a0e8beaa7ebc9f3363e65c32f","sha512":"952a91c0f9a764254902c60e77ea9adc51cbd9cb8a37561c89ad69c3ca5377a4f1aba067cc1b9fe42b4ba6526271ef7660ccce125af503634150255d051f7cf6","ssdeep":"96:21klBb1miOwfdf15Rmf15RIOE15RN6k25Zf15RUE15RxE15RLf15RfQf15RW6YKL:21kleilfXyM2BUlsgCOznEXPC+WO","tlshash":"c232a0c0fc2c20b5dd0afb46e55d3186f67d1836e5a770a3b0ab63840a5a72e057ed0e","size":10991,"data":"","first_seen":"2025-08-28T22:07:19.855423Z","last_seen":"2026-07-05T04:52:59.752728Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ele-custom-skin/assets/js/ecs9dfc.js?ver=3.1.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"447712f49ef92d24eda0381882e5f00b","sha1":"b041299af91182f0d7a997769cd20e3a2f7ebef4","sha256":"566d4c5dfefc9c4d867e6bef080917a4273b4228731a8700e81f1763eae3d861","sha512":"2c9892dbeb279ea236973eeee5833a0f7884ae52eb59a835ef0504005a1dd95d818cba5799611e0fcad4071dc2a10facfc9b81187397506092fe0cb7cf82c224","ssdeep":"","tlshash":"f9d05edfa451a221b4f3acd2267f7f0c29f0134f24e4e0402cd880b51ba6a2e4611815","size":284,"data":"","first_seen":"2023-03-07T12:02:49Z","last_seen":"2026-07-26T20:55:49.341691Z","times_seen":5727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/scroll-top.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"11f6d6de62ea437d6d62fd234e981637","sha1":"e0ab29df984b6ade920ff07d5b33b34a78e637c5","sha256":"a30e86b87b78f981a43fa54cfcc968088e970d033f6eceb5ed7e4e586ce5b0a9","sha512":"e46b412867798db4c4ca98fce06090e8dd0ff03403a54e1de9c733f3ed698dbd4a2f840e96790efcd9c4ba78c3f48d6da36c9f1422d4ac74a4b7833562024051","ssdeep":"192:iPtdryDtWLIZys25zcqKjW5dOM9a6NMQREX:iPtdryhWkZyR9v09R","tlshash":"6802854db381b0f112d7c26a427fd30672f55c5e1a0de1d0b3b8aab22655eae6213f35","size":8989,"data":"","first_seen":"2025-01-06T23:37:30.983951Z","last_seen":"2026-06-29T02:27:16.341634Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/regenerator-runtime.min8fa4.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4f28a615173df36cb84be2b345816e","sha1":"f709263841708d9e40268f24a0072ff4fe811b35","sha256":"6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6","sha512":"2685373f6522c039f17123683dbc4a2d6eaf572bca72b6019b7fcc9b15b2aa295cacab19b99a1161cc3e317d6bdfc3bdc2bffbfc87d9ea9086da58a013849910","ssdeep":"192:DRcpPh51vRAANNaqDHqpVSTmtqlr4YNkS:DRczPoxG+q8YNP","tlshash":"e3d174cab1c7f41543976a25951f000ae33a695ef8094049eb18ece1fcf544ea32bf79","size":6607,"data":"","first_seen":"2023-03-14T07:30:15Z","last_seen":"2026-07-26T19:27:05.261534Z","times_seen":18606,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-07-27T01:34:03.749223Z","times_seen":24216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/scroll-effect.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c03c4cf4b3c02d9298557aaef8aaf64","sha1":"161cbecf22d85688dc7d966adb2c17de38b8926c","sha256":"7c2fec2df890a32df1d508fc5578f8a3072f2912aa7c7e5c638a1aa19d25d838","sha512":"dc1956f9969d1446dc1009ffdff1f4472bb064167fa762050d0937e4d3ed5da43e7ade7e986ff3df9da5a3222c3e1aec076a2dd2e9018831e16e0baa947f11e9","ssdeep":"192:r8IQjyHtuLIZyN5zzDwjLcvBr8AZuQDMKm6wbeMhmLEN:rTQjyNukZyrK6ZO6Ah","tlshash":"b332cac87281b4f101d7c2aa417fd341b2b1fc6d5909f490b37496ba1aa4e9ea363f35","size":11887,"data":"","first_seen":"2026-02-12T11:06:15.975368Z","last_seen":"2026-02-12T12:21:12.432085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/frontend.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa5717c4d6d60aae1e9108dea4fb0c8c","sha1":"906a16a0d563857000d6a9a1af6af9c9f5952b4a","sha256":"f82b0b5f5f4aea8e8324eb89e2e0a2e6300d92ac70eda9bdd72a50091ba55fc0","sha512":"c2ed62381f483c880186b1eb72ae9e91ad71e4bf05ad8447629f6599bd4942d34172d615c997aef59abf9e155fedfefae7a9711d702a68c044be559557257c43","ssdeep":"768:rRPa/PLR8evxJMEa/sTZG8fVen5qiQ9vEAzBc5GMTSebsvHydWuUEvS75ikdXLfB:rRP4LR8QxJMEaufVlzEAzBc5fTSebsvf","tlshash":"bd0308563192d4aa419f48f7f4330219b3621dd9b406b59ef2bd6ce2a4b1e8333767b0","size":40757,"data":"","first_seen":"2026-02-12T11:06:15.953009Z","last_seen":"2026-02-12T12:21:12.487253Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/bootstrap-select.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c22600590b700e7d2a6b417c958c19","sha1":"2bcecfc314286c88c409447c4f12073ca82a0390","sha256":"d7d277ad3ded41d89d82daaa750df136efbe19dec4a0ffda83fd31d651e2d316","sha512":"c6f870ff810aa9d8fe03f7442ff7cf676e8a8b78a4b32f37cf3677e86174377e88e6225c35324d8de22a9f65bc66bc5332cf46e45c49c347f0b81b2811191713","ssdeep":"384:7rxmC2Z9Qwmm9Y9yOBUbpClnPriL950M+8Ba/yILxd+tcK0a4DXsXGKjdjyzWzTH:ACtqzfQctV4g2KjlNbnDn0W","tlshash":"bce2b7467211337122ef50d6a06f554ab532fb3de903816871798aea79bcc4470ebf3a","size":33379,"data":"","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-25T15:21:22.675569Z","times_seen":1314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","size":381830,"data":"","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3f85e08e702294354a224cf001b9074","sha1":"d57a2bfd592ec0d54b4da67aa89a551631fdf760","sha256":"92733caa458e9d3772107b898adb5074b2336aa348c86bfcf2ee88d3a4c32b14","sha512":"53f704a271956102ca2fa6e5d136b617dcd98afc3e976f65d250955ca9b54c47633c889d699d6556c6a347cc8ed4505d90bfd6bc9b3f8e762a3bf9ed840aa7f0","ssdeep":"","tlshash":"4251003cef61842bc4f9f476b5c31b03f32852468461981fbd6e089c5f4e8a4e29a738","size":2935,"data":"","first_seen":"2026-02-12T11:06:16.101662Z","last_seen":"2026-02-12T12:21:12.533494Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a5d16420ff7ea880b12f84bccb280de","sha1":"1db9f770ba00e43ddc97c3165291f2298d91c849","sha256":"4b690d605ab218ff99fc4730a44414a56f7a97c82941d4d1e4d1f6cd52c20eae","sha512":"67185428337e0cd67a87532fdf8ab41b85a11008e99d888e8d94cc16342cb22843cf968b0ee11a8001daa023598062f2b22dbac7141deb67f21ad396ed6ac95e","ssdeep":"192:vwf7yntTLIZyXqzzDeIzG/1SRAwtgdPJDQUOnYXkwStwM79oFZEvX2g:vC7ytTkZy6kSRYUwi579cg","tlshash":"6e52dc49b291b4f100d7d2ea017bd20173f9ac6d1419e090b3b8da647ba6d9d6363f37","size":14087,"data":"","first_seen":"2026-02-12T11:06:16.074764Z","last_seen":"2026-06-29T02:27:16.395345Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/theme.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"789a51014902101263096fd392885ecd","sha1":"8e6f290469f0956f2dd7e63bbafbfd5e2be02fa4","sha256":"bb17c6930d39f59bd668de259c782596e0052b5b9aeae42421aaf5b4d1392b0a","sha512":"8b076882fbc856fb907fe1a7815caf47cb9612ba95964fcd835df81a1e74031329aea84f939357e8c9cd86465e39c0af8ba64c9344b23a1c0984d2a2fc83a305","ssdeep":"384:XSmyITkZy+KMzEF6CCCbYAAcIL8oFxVjxRnRxE:X0O1MzqCCbWcC8Y/E","tlshash":"2c927484b291b4f101a7c2a541bbe34163b0acae1506f86177fc8b616bd7d4d22b2f76","size":19789,"data":"","first_seen":"2026-02-12T11:06:15.95412Z","last_seen":"2026-06-29T02:27:16.404134Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/wp-polyfill.min2c7c.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94dfdbe80f36b3be63ce74ff1135b996","sha1":"5e05077d99e736af42b2da70e428e7f7df556dd4","sha256":"4c0ced2cb3830d045cdd74f745fd4d6dcb082d8edd3a9fe46e39295e30cb8032","sha512":"628169b65f39a18f13facac9e3375eb59dbcac67cdaa7612562165d94aec1fda6cff93b1f228155c317f82a544390948f7243df330972851b49f6a45781aa2d2","ssdeep":"384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm","tlshash":"bb72748afd81b0da03f360b5012f440ff2ba9989b59e95d0e359d5e46c7d84e9027f1e","size":16146,"data":"","first_seen":"2023-07-22T18:30:44Z","last_seen":"2026-07-26T18:48:33.830397Z","times_seen":12197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"962438fd26b1bc61bfce39e1624405a3","sha1":"02c89142372917e37c0110c37a67018013800389","sha256":"de6ac0e7e93eba9855bbaa7d5f26a5ddcd2e06157add863eb76ad928304a7eab","sha512":"8d80161376f3aca75e14a06fe72900f20b4a9d8558082326c556ef0037786bbda0568b61b89b0883ae296718a03280cb5d26189ddea21ae319a35d089f1b2cbc","ssdeep":"","tlshash":"13e0ab7d3c744094079600b480a6e22a3d1730300084e917dc9ac86d18f0fc96d01594","size":418,"data":"","first_seen":"2026-02-12T11:06:16.107872Z","last_seen":"2026-02-12T12:21:12.534234Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283045,"data":"","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/jquery.bootstrap-touchspin.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba98995ae0063f0769c6c5f7d25f429a","sha1":"4dd7da3d499c7efbee03de4b7b032d8e4f7a0591","sha256":"163384dad5ade7c66d88cb020f76fff2b87491a778adda12a246f9cfc67a36ee","sha512":"526527ad75c666633841ab9d18d1a7f7274fe59b2a320e2a6c9272b3f47eba203eb93ec89991490c39e135f90a0b64beb972c7bbcd6195e1d8a623387aad7406","ssdeep":"192:d0avfAViRsjjMMypllVBnjRUsRlJGgjVqxZ9ohx:d/f+iREjMMyrXBnj2sRv9VAPohx","tlshash":"e5122d65314a36a2169361f9429b4b0277238849e8bb2190517f89e53ffdf3d2237a1b","size":9027,"data":"","first_seen":"2023-03-07T12:23:16Z","last_seen":"2026-07-22T10:19:49.591929Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1fd610276fadad492f0faaf8bd28f7e","sha1":"b626b4dcb231ff7ae9abfb03e2a439d5faa8532e","sha256":"d91d166ffff8bbd329d0523db77839f1578f16921388fc3414d903f5e77b9458","sha512":"2b59695838543a908da5307246296af18e0af1b429735d73e89f30006783fb53b846c63b307b3afc6a6498e30478ab0aee1926466ca97df5f8a64fe4b6942922","ssdeep":"","tlshash":"9b01dc8c8d027736260b61a9213f900036b4401e881ae919780ed2d09fa1994ac0a9ee","size":775,"data":"","first_seen":"2026-02-12T11:06:16.108729Z","last_seen":"2026-02-12T12:21:12.534899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/jquery.min3088.js?ver=3.7.0","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","size":87482,"data":"","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-07-26T18:48:33.875237Z","times_seen":32982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"4162a48bbd8905706671176ff124286e","sha1":"fbb7bfb5d345ac4f2a75c47e55e53a886efa5254","sha256":"e5427006119399d6a70928fe7eef9e417f6b813880cbb5fdbba7459cf5824d7a","sha512":"e1e33e56ad565d0e8baccae4c9be558e9979871cf47bee19c295a3a30cf6ceba5eab15a6ab3c86f555807ccff8a0c0614d8eac5fbbce8be6bb2126ffeb4f22c2","ssdeep":"","tlshash":"d45141a2605ca01b4513d5d0f8a23eeef4de0058c77169d07e2c29efeaeacb7049716d","size":3011,"data":"","first_seen":"2026-02-02T21:45:19.706501Z","last_seen":"2026-02-17T18:56:58.991697Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min5829.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"8a47-66ba3a1e-bcc9e3b54d1a1a95;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8093\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DtJQg7HSj%2BqeuNM4f8ttsg%2BEUS7EcvC4wPLMGpnfpk2hDjppPCHWl9kh1jbTJZcDel8gb5Cy2%2FWUhMQbXsNpwphiB9VpBN%2FCTIFuW7ca%2B5c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c1e3facd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35355)","md5":"536c06e0afdd8edd1b52793c99c51551","sha1":"08936563829e1d34e4881feff8d21422da8d80f6","sha256":"ba7fc836305f8a4f9994e6e446056c559acc9db88fbafe5cb8736ca99f75124f","sha512":"f7f9c0e44ea9913a725c470f2058dc750ea7d3eaf59148db7e9e5eb242d1fd9547bdc86c545f7ed23abd3443254072eed61519239f6c698b2ff5b7ffccd15399","ssdeep":"768:RPrtp7+adwdddrdDdVdydOdad1dpdLdFdWf2qMoBx7DV2dhd8dXdLdz0Cn9jXUdf:1nqaC/dRrIM4D7lv+Z27Gh510Cn9jXMf","tlshash":"42f2a66071aaca7841cfc4abf423268fa7219c9cb403f4d776fd8d92a564e876390771","first_seen":"2026-01-17T18:01:04.54328Z","last_seen":"2026-02-12T12:21:12.429835Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.526Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:52.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sagrolimited.ltd/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1172\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1172,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en-US\",null,\"TE_20260210\",null,null,[4,0]]],1871,[[\"1770898842352\",null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"3245F18A-64BD-491A-99B8-F92D52F184F7\\\",[\\\"https://sagrolimited.ltd\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,25000000],[null,27000000],[null,57000000],[null,57000000],[null,93000000],[null,68000000],null,[2,201000000],[2,204000000],32470,31568,217541]],[\\\"translate:page_load_to_initialized\\\",[2,204000000],[1,762000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],\"1770898852358\"]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://sagrolimited.ltd\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Thu, 12 Feb 2026 12:20:52 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-07-27T02:51:26.94133Z","times_seen":581516,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 12 Feb 2026 13:08:40 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMocHtwimUmpoFhLhI8Gitl94t2%2BthdpaOlKScMXp64sxUQB06yLOWXImXHMvt6S%2B5WSnYqBNxUspQTw%2FzD8rPScHzVzGCujdq%2BkdFw3eaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\ncf-ray: 9ccc0a9bce15acd4-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T02:50:39.701747Z","times_seen":407514,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/scroll-effect.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/scroll-effect.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"2e6f-66ba3a1c-fda2ad11bec78635;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2909\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfR4aJ8LBGMQKmcYM1G7KicvDsbGG4R1Mg7uKk1BhX1BRa7kSJU2JykanwBBWW%2BnI3e2yQtWoxOCLVJK49JbwkTGT%2Fzc7Vl4JtC1AtwdM1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee29acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11887,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11887), with no line terminators","md5":"4c03c4cf4b3c02d9298557aaef8aaf64","sha1":"161cbecf22d85688dc7d966adb2c17de38b8926c","sha256":"7c2fec2df890a32df1d508fc5578f8a3072f2912aa7c7e5c638a1aa19d25d838","sha512":"dc1956f9969d1446dc1009ffdff1f4472bb064167fa762050d0937e4d3ed5da43e7ade7e986ff3df9da5a3222c3e1aec076a2dd2e9018831e16e0baa947f11e9","ssdeep":"192:r8IQjyHtuLIZyN5zzDwjLcvBr8AZuQDMKm6wbeMhmLEN:rTQjyNukZyrK6ZO6Ah","tlshash":"b332cac87281b4f101d7c2aa417fd341b2b1fc6d5909f490b37496ba1aa4e9ea363f35","first_seen":"2026-02-12T11:06:15.975368Z","last_seen":"2026-02-12T12:21:12.432085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min5829.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"1623-66ba3a1c-b81afda54b66c76c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2385\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojGlXY76fVi9dKxDOpv%2FjAQASiLMj%2BLYpG6Uv4v5Pep4cyLuCOAFLiDRyjQNI0BFLEqgDNhAdoZBDu33k9lmTznZZtGJlE14a465BLzp7mA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe31acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5667,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5623)","md5":"97f39929a46ab28d95b8d5be092e6bf7","sha1":"b272f108e181f074e31b3d6232b693e203894a5d","sha256":"b82873e9441abb9739dfca31b6880855d2043b643522a4011e29474d450b9a30","sha512":"7b70cebd38604f91e9b7d3c5c0559d1ca72c910b6de7b7334af2cc4482a56947a2f4daac6abee40cc2844499701b005b7c6d617c6e175c3d7bcec6d3393e8199","ssdeep":"96:B1khqdL5MGS9hRm07DEpre1jonx4Sw2AlLs9AVULUVGOhemLR6i3Q0lx8k2:UgL5MGSzM07CrtnCMd9AiQHFRHqk2","tlshash":"3ac187d906949d5b26e439d4b0576b702e3dd0333c299a81ea12eddc19f8fc083ea933","first_seen":"2023-08-10T06:35:24Z","last_seen":"2026-07-24T20:57:44.588269Z","times_seen":1957,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/wealth-fav.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/wealth-fav.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:36 GMT\r\netag: \"4ecc-66ba3a14-a45050bf975f85b5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20172\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkHg7hFlpXnM%2F7Ayaw0M3XEm9BPdiRekAeSs%2BgXgLlGxsTxyvKbV2B0vZLGiBb%2BzJ0j1XKMTyFCy8s155NEWn17ZH2%2B3IJ5QIoMst0x%2BPOU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ccc0aa38fc3acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 78, 8-bit/color RGBA, non-interlaced","md5":"406768826523a2af514c961ce7364693","sha1":"33e9a437668e96c3b4f886cd63ac77baac86a340","sha256":"0a8c588465e3c4f3702fac378f94f9e2ddc6309fd45b76db6a288989e5909b48","sha512":"5718f54a1c55b912b22042663f50387fe8b9b9d31c4153d941aaf975b8d551db3b7ac257fcb03b29b827095d6f3e0991777cef270641a27d6e3f73cd7b1973d4","ssdeep":"96:ukEWMro8xNXrNGQjGnGoGrHtHeClp2FTCcX99r2zrqKI3+G5jxNFBC43+BeNyVN:ukEoi55HetFWLm5nbCa+YYr","tlshash":"c692d724fdf2b2654619763b2ad635405cb30bc3eac09d4076ce8927af24b9ecc5f295","first_seen":"2026-02-12T11:06:15.935955Z","last_seen":"2026-02-12T12:21:12.433522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.mind618.css?ver=5.21.0","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.mind618.css?ver=5.21.0 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:44 GMT\r\netag: \"4c07-66ba39e0-4f2db0e4ff35da74;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3660\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAetSk4cauUYeu%2BxZL%2F6%2BDVdGuz2IWuNyCBQ4G2%2FXQ%2BswlPpawNrNlOCSnRoXcoCBdm4rXZosNGnHpF5frt6Ju3sm7DejQoBhnRRBobcfTE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b5ddfacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19463,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19417)","md5":"b1c0e209b21aace0836b1341e851e4f3","sha1":"69e7b85c3f41efe04e27dc636527bc416f394c2b","sha256":"983534d2ab841bcec8304b800ca8ce4e79066831a67b589f83fe82c6747fda63","sha512":"6cbf387cf3d21ef12f0355cfd7c28049c4395862112ade7b55b5bf439965be0c1ba87a41931a90a82588b12ddf61669acb2dd41d26fab3007f0e143b3ebf6059","ssdeep":"192:w0877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgI8:O7iNyqEpXk8/aq8uFucbrgI8","tlshash":"8592dae4e46923c87b32c413e744f64c64d9f921cac89d19fa6f850c1ee16a316c6fb8","first_seen":"2026-02-12T11:06:16.007179Z","last_seen":"2026-02-12T12:21:12.434072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNewsreader%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMulish%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.3.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRaleway%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNewsreader%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMulish%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.3.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 12 Feb 2026 12:20:41 GMT\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225681,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a85c5eadbd9beb920ee103e25bb5136b","sha1":"af883e50ec70f0f605f70327d55957cecce70762","sha256":"d2987fa1e3dddef601f01c47909a794cc52bcd94eae7f9777d6e4cacc2a8da27","sha512":"47aadcd2cb3a9d2f9610b21f9ca8d333405b8597d3ca08685660b5cdeb8485295863a508ad2c92a4bd11dbd9d83ae862a9e1a2d6f42fd0c45128226361d0cffe","ssdeep":"6144:HtAwDIkpZaPzO+92KnX0FZ0kn8w9tOTvSChqWbL4qg4JVCZRQc1uGH78XveifUME:HtAwDIkpZaPzO+92KnX0FZ0kn8w9tOT2","tlshash":"5524fe91042ba040eb835cd233cf7e36fe4ea2557041d179abfd5aaaacdbc62136471d","first_seen":"2026-02-12T11:06:16.034331Z","last_seen":"2026-02-12T12:21:12.434969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":810,"timings":{"blocked":312,"dns":2,"connect":24,"send":0,"wait":44,"receive":0,"ssl":419},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-1.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-1.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:32 GMT\r\netag: \"33ca-66ba3a10-d1af872f48d728c7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13258\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2B%2FeFuHxNNAFi0fsbmuPLV8wJhVB2vVZHHtwM42ZecHWLYgyXoNc1gr86HEF6TcNiHlUoALeELj0D7ta1QRc2%2FSM%2BQWDxFwdl%2FLrNxDpbkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce10acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"a67827be42f2aef49dafe9850e9aad73","sha1":"4bda932bc68d9a2bac484c428cbd2d9a1b9d65bd","sha256":"e39be4cf7562964ecc665975ca98e4d8fca3acc6e18abc64c6c2b86ced8ec35b","sha512":"1755a99d7eb2492e855f2b2124bcd43b0a3832afe54c0af67446f7cef6c4c16bee05f3ffe92cf4ee3367fe7a3d134d7953184d09dc06e3354f2ae139b370b226","ssdeep":"192:pvknQi0RQi9D+awv8dM9pmMVBvfB4RjvWscEL+lEBZYHAM5faChWYWGFpjzGYikp:pcnQ/Cikaopdl54txZAHxosWexzXp","tlshash":"8852af06f93ed8116c567d109bfdfb0e4f62ca888bc0b9d7b56c886afc08209c4596f5","first_seen":"2025-03-19T10:36:51.070265Z","last_seen":"2026-07-12T17:24:07.193707Z","times_seen":30,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"4efb-66ba3a1a-527c722a08a45b5d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7046\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvgG1ayjZ%2FD%2BfNjWVkP3hVgDprO7DNoLZg%2FTy5n6PMSmDxdTAvgGo8xLkO9d%2FL64bSoLWu3VoBKS%2BoGgXDNMMX53QFrrMQyFdW0IVf1QksQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee25acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-07-27T01:34:03.749223Z","times_seen":24216,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:00:21 GMT\r\nexpires: Thu, 11 Feb 2027 20:00:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 58820\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T02:51:49.658716Z","times_seen":946688,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":35,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 19:51:49 GMT\r\nexpires: Sat, 06 Feb 2027 19:51:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 491332\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-27T02:52:03.415595Z","times_seen":283040,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min8d5a.css?ver=2.4.0","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min8d5a.css?ver=2.4.0 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:16 GMT\r\netag: \"2a84-66ba3a00-16a8bac569520f23;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2296\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bUyupS4q0npRz2w8h7xDH%2FNdHYs37RBgZWuaJ52mqJ%2ByyadTtqUMjY7RA13GMvIOKGOULhVUadKDsdIBOoZFhbSK%2FepnRl41F86z2ScazTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b8df6acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10884,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10884), with no line terminators","md5":"82777277f94c049807718fb880e5c809","sha1":"cbfea0d9ca4e0a5f75a13441cd88bc1811699845","sha256":"252085230291e204486816011f19dab5af4e2fb29330e47aadb968e08642d63c","sha512":"0d3dadec13d48170a5d090fabe91a3f48686d7b901702f666224af4da783159741ae1b31676f62dc3cfd955495aa5f5c9a71eabdcb9c2d730d298ac66ca65a65","ssdeep":"96:azC8w4WTQEKIPm+d9uGiozV9Ks29ZbBSNUgr0DXi1MkSP:azC8w4WEEKyuCDK/Zge9","tlshash":"ad2264e4e50d41ca3732c407c386b609ec99f121dde15c13f1af999c5ff236aa692a78","first_seen":"2026-02-12T11:06:16.026082Z","last_seen":"2026-02-12T12:21:12.437666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:20 GMT\r\netag: \"e238-66ba3a04-47c4c4f410498fe4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12133\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIK47SaxDj04WRKwB22JJ1VbpVcByCeJoAOK8fZJtq9nzagPHPkAPcBPzAxkUDWis7kbKRq1ORZc8KSD2Enyc2l6gAeAGhnFzN1DcOCdhsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b9dfeacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57912,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57726)","md5":"eeb705d0bdccfd645d3bbd46dd1fbab3","sha1":"066def290f42ed8c00860e573cc880bd46e9ced4","sha256":"d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9","sha512":"39d11741808e95d8ea504b2e30ab19463f771eddb741196121bf04fd7d2c6f066199ef1e530ea0f2aec077118929a91c05bbfbfbf3d7d067366ed7fb46ef1c64","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzO:0E0PxXE4YXJgndFTfy9lt5C","tlshash":"1843f9b8e54c01cab731c44bef42b2bc61b6f73de5914d95f00e691c2ad26a81185fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T01:00:37.361637Z","times_seen":27522,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:26 GMT\r\netag: \"2775-66ba3a0a-1abb4c23faf2fe10;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 651\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsMn9r9Y5AluCe5rr%2F%2F35JIMofwHCyvmN0fkF9SZE4pGS6nLMBxqNA1UB1HOhDn9Dzt6zcMh5JxiroMbQA8mqoI%2F%2FPXR60L6HERmbwQoOEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bce12acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10061)","md5":"555ec74764e4f6c50d460fc64ef9482c","sha1":"99263a2ffacd83feafbbe540771d1a9aaa2582b0","sha256":"26d2f0667cca34c4b08f5927d9a85e4a0ae34aac0b23814269f845e9a0a8265a","sha512":"77d92c17283413d6f9f4835e84ab83c1612dbc4fceef0bc15062a982d2509dc8d52bf884237e405849d857d831426aed973f6a0e101b4c638e7160d3eb26fa9f","ssdeep":"192:cNybsO1K8kXWfVcAxTJXPEac1ZFuEKguKU:AU","tlshash":"072270463d6751066a2fa51b5b83240db06048d8ecd7ed96f891e903cafedc93b52c78","first_seen":"2023-08-23T08:10:17Z","last_seen":"2026-07-12T23:47:56.317626Z","times_seen":328,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/ow-lightbox.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"100f-66ba3a1a-116b02235e6119ac;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1333\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEWBQwBvXCQgv19WMF97jJzyG3V6hLPbU2OSh3ICb4qlqb5Y5S62kjPuCPAywDK6ARaN%2FUto%2F4k%2B2U%2FqP8E2SS%2BvLZdpDOPNMsmCk%2BSH1kc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee26acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4111,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4111), with no line terminators","md5":"f474aaa8e218058bd1b0e9b4e230b9b4","sha1":"728c7375184e9177a34a421b53d200d62ced1e66","sha256":"b650fba070d466085d4344b435ecdfb4f450dd08dc4124be007e39c4c6d9e1ef","sha512":"0fbb7c4a471e1ed4230663a9f5901ea9eae5ca06ac537574be6bd1be925960d3c5e4d0d1eaba45d27af247bc5c5282059aa22747d0a00c656b3b486180005d51","ssdeep":"96:wmwS3E/clNZ6/BVcqHAAdMJ+T94MDuSocn:vwTUHP6S24Mhoc","tlshash":"5e81b6c9769070f603e74779807bd35273f5e4588a45ecb26ba8c9a92afcc1d0163f64","first_seen":"2025-01-06T23:37:30.962394Z","last_seen":"2026-06-29T02:27:16.356026Z","times_seen":16,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min05da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"2fa6-66ba3a1c-dcd58ce112139000;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2867\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwwIRKFIKlUmgstofhDTiNw5ORdTtkEnUkWtS7hNr4niKWl5CUQdifDijAOVZWfj7Ssufet0%2BsvA%2F2qhylYD2aGBimCX%2F9Yr5tG10pXLSlA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe2eacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-07-27T01:34:03.729134Z","times_seen":73568,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ocean-extra/assets/css/widgetse35d.css?ver=6.3.2","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ocean-extra/assets/css/widgetse35d.css?ver=6.3.2 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:20 GMT\r\netag: \"c993-66ba3a04-f37ba03ce263c415;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6202\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onAUA49XE1tvT%2BA0MnHbz%2BF9CsT%2B8Urw17KDVqteiCFE%2Fq6337x%2FiHGpZSyy1r682KREuLBabOTFu4C3GUwqWrfZrugUtMyfOERe2ygzHMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b9dfaacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":51603,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (51599), with no line terminators","md5":"77c41447958e1f30e01504b14023102e","sha1":"97ddc63004a554a94a557fa97a24b7770445970c","sha256":"9877a471a4ca37e46cac447346bcd14cdb492267137079f3aa94259bf39277ca","sha512":"eacc81ef159f5dd6bcb9c5f6dbc127fbf80c8c65a374e098d25839088b28357317a6bcb7d3202dc660c0c26ba0c6acad2aac1cc3a8c16f181828b986b8dae282","ssdeep":"384:t/HXG5df8zNAcvUHlL2JYsiO5k5srukT1zL0oxgPZuIA8uK8qoPpIF:T9OZu/8MxIF","tlshash":"5533fadaf7fc102e2543876415cdf7aa922c9e04ee885baa7831713c55054ee3663bf2","first_seen":"2024-09-28T08:19:01.060825Z","last_seen":"2026-06-29T02:27:16.353342Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min52d5.css?ver=5.15.3","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:26 GMT\r\netag: \"295-66ba3a0a-60e5766a22810c80;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 275\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQyzDB05BWV9AlIYEpbmWyiVPFxXhpds3PgpjO2UGj1aJF42d7SMyu9Xj7haRLqrTJJvVi1TQ5wcbh%2Fz5DCT5pgOuvj4BCGgVqJbaQ4VvfY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bae00acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":661,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (475)","md5":"5f37b3750ed3ae6789c22270816f7124","sha1":"ee367c0de71a62501ac12725d37de4d099782388","sha256":"cf3b42dddae6fbe42a4f554df1c1711650ed36b1e0132273abac071d463eb27f","sha512":"e09f7142e0568f6fb5df69706d9c0a9803076653fd4f2cb4be33c3c3abd69cc30926d15779466262dfe22409d072071aaf1a93e83c16ffd83f88e1db0c609c04","ssdeep":"","tlshash":"6b014eb98799004541910f0038e97b1dbd4aa46cfcea7e52e72ade2d0cfa91f11e4f09","first_seen":"2026-02-12T11:06:16.013153Z","last_seen":"2026-04-20T04:26:15.171269Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/wealth-fav.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/wealth-fav.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:36 GMT\r\netag: \"4ecc-66ba3a14-a45050bf975f85b5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 20172\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nE85UOVJ01V5jLZxyM3c20LkG%2BdL313tfggivtU6ge5B4iZeVwA0NuA1wcKv1eQeWOMD5Esf5%2BoMieAyeYSV1%2FCOOcqis5DzTgdH05NBnqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ccc0aa38fc2acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 85 x 78, 8-bit/color RGBA, non-interlaced","md5":"406768826523a2af514c961ce7364693","sha1":"33e9a437668e96c3b4f886cd63ac77baac86a340","sha256":"0a8c588465e3c4f3702fac378f94f9e2ddc6309fd45b76db6a288989e5909b48","sha512":"5718f54a1c55b912b22042663f50387fe8b9b9d31c4153d941aaf975b8d551db3b7ac257fcb03b29b827095d6f3e0991777cef270641a27d6e3f73cd7b1973d4","ssdeep":"96:ukEWMro8xNXrNGQjGnGoGrHtHeClp2FTCcX99r2zrqKI3+G5jxNFBC43+BeNyVN:ukEoi55HetFWLm5nbCa+YYr","tlshash":"c692d724fdf2b2654619763b2ad635405cb30bc3eac09d4076ce8927af24b9ecc5f295","first_seen":"2026-02-12T11:06:15.935955Z","last_seen":"2026-02-12T12:21:12.433522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.504Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/post-7de1c.css?ver=1693218059","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-7de1c.css?ver=1693218059 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:46 GMT\r\netag: \"488-66ba39e2-ce08fb183e094130;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 327\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVXWv4jCk%2B%2FotiIy5mqK71%2BQJT5sbcKV%2BLEvEaGwXZmPb4cQxstrJGBaWi%2F2HA0dLuzTtjh9ZSr2QtpypGIgNiDxyoS%2FEg5B%2FmDsgkQiTc8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de2acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1160), with no line terminators","md5":"348ffc47fadf69b994af5261271c667a","sha1":"e8776cd0c5631b429951217fb8a88cbd3531a815","sha256":"6205c439d1c6545055025d068ba16d4ea5a4536f12c1bd658cc9562579939d15","sha512":"aee0e41b2c0c65870ee2f5ace96d3b1f805489eed32af7a5fae4a23f24ea20d166385e5cecaa5b771afbb2e62a4bbdbb65ecdfff5c5bfaa154d4b0e9472ceb16","ssdeep":"","tlshash":"552167457a23d036e0bb092f91c3b02c012cd45b625fcadff41d8649f9bfa0a2228643","first_seen":"2023-04-05T04:47:26Z","last_seen":"2026-07-07T05:21:56.910557Z","times_seen":80,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination9dfc.js?ver=3.1.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ele-custom-skin/assets/js/ecs_ajax_pagination9dfc.js?ver=3.1.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"ed4-66ba3a1a-a45dd5875d64bbf1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1192\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1twMhpzCK5WB0JSlE%2BkqsPJ5Z10XHr1Qk2dvFMi7iHBaq01mVPOL1ApnsLBexx9HBWUjgf9EHmQgBCFbmYE7iCAyKuMvwozoPgtNJPjEBoU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bbe06acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"85fcc89aed6d13d0d123840277401003","sha1":"7d9a0500313e9919d88b26516fe45ada973a66ea","sha256":"cd36b730e0d73625c445a518aa7af50baa2c2de208bc45c7676bf9e81d96fccc","sha512":"42c1ab4052316f389e49beea1dc58dbd9f97a68b3ee229495f7fcb806c5547732086c0b3c7d3d1df43055ccbca9d8390d43d9a8e03602e9c091c32d92603dcd1","ssdeep":"","tlshash":"4a71304474636aa6e27b20399d2f790c35a660bb3041ec69fe0d5085dfb04a5336f9fb","first_seen":"2025-01-22T04:11:57.404121Z","last_seen":"2026-06-29T02:27:16.271174Z","times_seen":6,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-3-1.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-3-1.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:32 GMT\r\netag: \"2299-66ba3a10-f0b386a1347f3530;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8857\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QN0FPzVoo9VAiCaxCvGLPZ4MLrOhFhkmRJjZeZCNJ1%2FLLoUyYOzRu%2Fg7ITJzkgbuC21IpSGb1irpIwCqd2fT%2BE24xX8NU2NgcYdsh%2FQZNxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce0facd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"67e56bc11863fb56ecf7fe1420c4fdfe","sha1":"b43f85f9eb59b7bf14ad44b8c097d02a8d7a80d9","sha256":"9defb28605be176df37b4a60371c54ee47c8927d6b88b1515e3752bdfc22256c","sha512":"e80f5f901a70152ff59b3bf940d514c42c0f1427892e56f3c22ca64325e4c355d4feb437d320d6fa7dd92eee6a9103cf11987dacbd5645b905329c463e7c632f","ssdeep":"192:pvknR+iHWe2Sn2UqETCstY747iJ9+ErdzUPyloQ9BwNAe7I9r:pcnckNzn0stY7YiJggdYqloQ9Bs7I5","tlshash":"4e029e43bab39c81a5cbde15f4a9138b4965d8681c92e141feeddc87fc75138dd088e2","first_seen":"2025-03-19T10:36:51.045204Z","last_seen":"2026-07-12T17:24:07.104212Z","times_seen":30,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/i18n.minf92f.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.minf92f.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"24e5-66ba3a1e-577fd86c89bc34cd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3568\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FpPGVI9eegPpD1WhP9g7Rwg8Uitkkze10XpQ5Rgubg%2FzT%2FWaplZMRBMwGdq%2F4zX2QQuMURn%2BA6GVO92ptSDtjj58WlYpl8uwHc7ymZU0mXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe39acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9445,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"c2c4e2a562e06e1cb22293a5b920aca6","sha1":"a7b5a369ac4883f1ee7fa701b238d20238b675ca","sha256":"698e93fe491cc7bbf07a470579a33dbd0db53c19142b7be41ebfd39a23aef11f","sha512":"7117e879a8a4d8c8e1acd1a34247a7cf420128da970ed42975d6a04665ec571dc388c62fc3b50deda0b9e896f599d56ffbc28b25a45119cd79f5f45e3e58c178","ssdeep":"192:zofOLSBW36LJ2iBYDe7qBoegqC4Wxaftm9Norr7dWSjSWfYN:zofOLSk36FJBYDeubjCWtm9Norr7EgPW","tlshash":"b712b4ec71dab056238721e054afb005f13aaaa431d99cd0db90d9e17e708c961b3fe9","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-07-26T17:58:23.43071Z","times_seen":21402,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 14:10:30 GMT\r\nexpires: Thu, 11 Feb 2027 14:10:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 79812\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-07-27T01:50:25.091458Z","times_seen":75477,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-2.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-2.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:32 GMT\r\netag: \"27cc-66ba3a10-12cbd9e7f752faf5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 10188\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9X%2Fvslc9yrsPfYaw%2FKKPooOohnSsp69799cXeqGM4AjtgX0ADLycgVZR%2BgH3tEPG0d5iHFdcuEug90%2FEfcmnCB6Tm9qswLQof3PkuEAZRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce0dacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"adfb63dee461ad0898bc95272630173d","sha1":"92e3b5069f6a8d76694b173c4089276f07a9c76d","sha256":"1c2efc4eff810363ac4c02fab8b7f2b5e5ef309ad9e02549ac70de5a40ff35aa","sha512":"5cf058c47d69d925d1bd829f86e731b51f5945849eb1a2d898617c42a861a3388dff967cfd6a01a8b281d925223033b30c27776fc6ba4b5b6decb245af95f8f6","ssdeep":"192:pvknxi24x6e5wM957Bhf61DsTdNUKISq6fgD0M4g3GOa0e:pcnxF4RBv7Bx6ZsIuZfgAZO8","tlshash":"4222ae0bc134299a1966fd81bdebe20f49776590b8000d46bcfeea82b9525b1c15d3c7","first_seen":"2025-03-19T10:36:51.076412Z","last_seen":"2026-07-12T17:24:07.149069Z","times_seen":30,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min38d6.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min38d6.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"2407-66ba3a1c-3eec5e560c97c92;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3116\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3T8rSJ%2FVVRFmjRlKzk9Cf4nHWkAh15A3B7RCrCiZkt372v8hEf3ilQEufqQtEJ1VM2kGTTHE%2BiWgbbBZ%2BEd2%2FIRzG%2FmAkcXYEzuzZUrsqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee2aacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9223), with no line terminators","md5":"b8935fb76a794d27524f8696fcba58ea","sha1":"fc8ba7554babf97bd540e5019a51663e1fd4de99","sha256":"948240da929defbe2f377b6a2173cf7c0988edc05972424cb3872abc739aa024","sha512":"dedb414250e2fbeb70ab74206cfa432eca9b8c036cb155ec3d5ec6b2b886a56a2d0f09929dc7e281f0df9a3bfd0b10fb57e8723506c0e9065cf356b22d6cd9e4","ssdeep":"192:4v6TbN3SLFNjilJ5b7kKU3JS8OH+o9MlA9aezD:4v6TbNiVio3JAzD","tlshash":"b912cac83692b5f096b36026d47f7616b135e674742cd440625ae8e06cb9dcf90b3b3d","first_seen":"2023-08-10T12:12:41Z","last_seen":"2026-07-26T18:35:44.041429Z","times_seen":2272,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min9073.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/anime.min9073.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"4443-66ba3a1c-d9e6e0739fab166;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6849\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QklVonkfejspmx%2BwQvuFFriC8daMuQ2jLIB%2F3DE%2Bm8nHlwWghPGX2Ns69e8dTYws2qLNY2nhu9c1Qy0SxWCHfxGkycTtnoT8A%2BPumVkzDI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe2dacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17475), with no line terminators","md5":"58f50dd658be75a2e9485a1be9807d9f","sha1":"a7cfc7b8e05c4b00500f49ab4a6914d7228febc4","sha256":"87530a2baa39b3f6f02816034c7d38a3412936b1c633783128c5f01c01dff8b7","sha512":"663d0341b45bc0844c3cd5d3dc76959fa92e06f3011bdd97fe36590175502d1a386259d2f907c0dd83e897b9b2dc46192585fb86e66bfedbc9ca3542d680db75","ssdeep":"384:IgLpcCmP+5X/JAG6bSPNVCWhzTOGIYfTZCyORZzLUr92AQPWR3:HpcCmMAlOfOYsLXuDd","tlshash":"3d72c7cc72c2b597439359b2805f104bb33e6d80689da8a0e629f1f53c3491d89b7eed","first_seen":"2023-03-09T00:04:28Z","last_seen":"2026-07-22T05:59:16.547558Z","times_seen":251,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/client-2.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/client-2.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"5f02-66ba3a0c-4cee8edbfa24481d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 24322\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SA%2BM54LhZIXbQqADCCZzS82%2BAu5cGz2%2BQUftz1%2FQJO2z2n6tIOA8OZlyswYkQp4PEW3lgv44UP%2BM7bp3nE2ch0GX1PTDsJg6ew8tyRFX7OY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa0af16acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4492070c33a5a620c7f74f67f13ccec5","sha1":"eabfa0faaf8877499c8681aab77236dddbe948ac","sha256":"079d830b47f34df1cbfc52ad478b4ff995e0c28b20925a877c3f09f91ca8c797","sha512":"2b84b864b1bad11c6937c1fce97ec6b0c10df32cc9952a2bd5b174ab86f9fabcf09811574d1b396a682159969e68a595fd5ba625ef99beaf64e2b8bc0de4b051","ssdeep":"384:LeOMbPiVLUNSNs6C9RiTsqW/ioVwVUFtGBbzrEzKg7JIMr2hKOdCXff:XMbPiVLUNS49RUsqGiNGFUBbzKTGO2hs","tlshash":"9eb2e1572f838c8f6a3a4b3ce61e82a36911033d9523e79c2d6935c2d72b3fda45c854","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-07-26T06:29:09.0717Z","times_seen":1369,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.012Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:43.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sagrolimited.ltd/\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: 328a2bb6fa0144f5d85400b5b12df9bcac88a3e9\r\nx-77-nzt: EwwBuUwJGwH32wAAAAwBuUwKEwH3AQAAAAwBw7WvFwG3AAAAAA\r\nx-77-nzt-ray: fdb54123eb16d2689bc58d6926f0050b\r\nx-77-cache: HIT\r\nx-77-age: 219\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e73fb26e61b7779ac37a909aa465da53","sha1":"f1aa800d8470d6f52b8f1a919951d96b8c2bac85","sha256":"99edc223afd1cef944e2059f41beadcacc433ce17f52855cdf7803d197268431","sha512":"0df22279f76ba298db9c864b8853738968705515f880586293dd22fd7b4caf87cab05e9aee3dd37c350a490ba4ba1f51011b28dbdf7afc065840020a3641a624","ssdeep":"192:P4lkA+UC1IY8pZbXF/UQq29yg4zPYfXhIIdeD/F:Al3GKYKZrJA2Yg48fXPdeD/F","tlshash":"c7e1b74f9a144eb987c6438276cfb84675bc807352509d3afd8cc8b842697cda3e3b94","first_seen":"2026-01-13T09:38:59.141589Z","last_seen":"2026-03-04T07:11:45.044045Z","times_seen":1814,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":47,"dns":20,"connect":7,"send":0,"wait":8,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/css/htmega-keyframesdbc2.css?ver=2.2.6","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/css/htmega-keyframesdbc2.css?ver=2.2.6 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:14 GMT\r\netag: \"127a-66ba39fe-e4500d05bba49e5e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 527\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oEEaPCH63jOskYTQCduSlEYysG4NDECWkDiNb1uqZ2i%2B7X%2BKBQX%2BVtbG6ZTrDw0LOnu%2F3bRTSCeLgjXRz%2B6cMeZ80E7ARWyWnkDeHH8nF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7df4acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4730,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f9d59ee0895e36a14481c6c587f4eaaa","sha1":"2cd7cc7e8e2bc484d701cb897e2b98e4c0270226","sha256":"dc22ae03545c512c391d5dc7d683000cbfaf4d78a8d60b22d806d574804350ca","sha512":"07da5c86d1744f232d1c31268c16418dc1ed85eb5f402f0045996fd16a99dfe393d68da28869e6888bc22c52ef3d99d04c05cf15cf3a459448bd4ec313469f03","ssdeep":"96:s2DT5DTk4y4wHbgP214wHbgP2P9RXXkjI2ysj9RXXkjI2ysJuK4n88CxYzNEZjOw:s2DT5DTk4y4w7gP214w7gP2P9RX0jI28","tlshash":"aca150aa2db105045263c818dfdf8e78e63cf1a31019adebb3d554db8f61a9c26cc643","first_seen":"2023-04-05T23:01:44Z","last_seen":"2026-07-26T14:29:40.636676Z","times_seen":1861,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"3707-66ba3a1a-98feb417e0994f3e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3394\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLhrynL3tTxEvOm4354dRHBrHf3%2BhIQOROvXqAmJgH9nnGDQy6Bq2bhLqgOc2wJy5JTSkepSKQnFo8ULmNQcIGlLV8rwl9%2BopmoHhd5yKcM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bde22acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14087,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14087), with no line terminators","md5":"9a5d16420ff7ea880b12f84bccb280de","sha1":"1db9f770ba00e43ddc97c3165291f2298d91c849","sha256":"4b690d605ab218ff99fc4730a44414a56f7a97c82941d4d1e4d1f6cd52c20eae","sha512":"67185428337e0cd67a87532fdf8ab41b85a11008e99d888e8d94cc16342cb22843cf968b0ee11a8001daa023598062f2b22dbac7141deb67f21ad396ed6ac95e","ssdeep":"192:vwf7yntTLIZyXqzzDeIzG/1SRAwtgdPJDQUOnYXkwStwM79oFZEvX2g:vC7ytTkZy6kSRYUwi579cg","tlshash":"6e52dc49b291b4f100d7d2ea017bd20173f9ac6d1419e090b3b8da647ba6d9d6363f37","first_seen":"2026-02-12T11:06:16.074764Z","last_seen":"2026-06-29T02:27:16.395345Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/client-1.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/client-1.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"7153-66ba3a0c-b68399195fd41f51;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 29011\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fONeUeztJIeAYwpmQfmc4xDe4ddr1nhi7FdaSKGOTI0S6nZOB5ZGU4e65BRJP1mR7s5A8ov9zKG%2BirVHz9zL7hLLAAFXWtMrWPCXxBhWFNs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa09f10acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29011,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"4658267f97ddc4e728a30e1b34f3dc91","sha1":"803b36fb2ad050ade535685b5f3ac92a32a87598","sha256":"6d8b362584cdc3dfc95309e4af19147517ae92c27d28e602c212ac92913e3f0c","sha512":"883a1f2574964f274f6f0daed68f7c8f8c9194a3a0f320f56629874800146c33941d683ce5216632651af18f7937452ec937b988d2142a2a96e686f7ccb01993","ssdeep":"768:2NeLTkSwjEri/BzR+qGPiOcSni777QMa3tAofJ3:SgoZEriBGPiOmwMa3yol","tlshash":"29d2f18841e749819021c3f2107af51d678a695c6d2b031b91d93c72ccafff64f5ea78","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-07-26T06:29:09.067682Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/s3.tradingview.com/external-embedding/embed-widget-stock-heatmap.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-stock-heatmap.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKb%2FFgQGGDQfj49ouzUbmLZB4TKNWcAsTjs1yHR23VgwZvhY8uR3HKvH5yz%2FxRu1ZYVVDWBZbYZtNZzboo9aW5EKsliDVPhBDXLuSZdpj9c%3D\"}]}\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0aa0af17acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-26T09:56:55.491724Z","times_seen":41263,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e153-4684\"\r\nexpires: Thu, 12 Feb 2026 12:24:47 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:23 GMT\r\nx-77-nzt: EwwBuUwJCgH3NwAAAAwBuUwKCQH3AAAAAAwBJRPCNAGzPQAAAA\r\nx-77-nzt-ray: e2f754200599dc5c9ac58d69192ea300\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 55\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-08T20:09:52.517882Z","times_seen":4265,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":61,"dns":34,"connect":9,"send":0,"wait":9,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ele-custom-skin/assets/css/ecs-style9dfc.css?ver=3.1.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ele-custom-skin/assets/css/ecs-style9dfc.css?ver=3.1.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:20 GMT\r\netag: \"235c-66ba3a04-78e64091f9308c9b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1665\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYoMmCa8Czw7Zt6kU9gW8yuJBes1yrUTgLhNa2pLOKu9NijTpjpuh39dCvZLy2ZvjlkJSedKoEtZYSXm%2BashWCgjhajMqbvhMef0gQEo%2Bfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b9dfdacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9052,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5cec186fb803dee57455356d0b2addf0","sha1":"1a31ac36509ea589b2f9d9a48acc2847bbd308b8","sha256":"5ebc7550313f51029cd86227709777fbe6cc2c8928c595583c579cd95580146b","sha512":"d90a18fed33d878008a092384d9b775f5a6ac29ec5caddda8369653d33a5f39740da03b7187f8349addd6d069ef6e54cfe465fd889550e5404c2ce3718ff1f93","ssdeep":"192:Qqkp5+VqrIgxqMGHRpqQEpz4d444a4O4O8yp5BmbqkQsG7:LxqrIgxqMGxpqQEpz4d444a4O4O8yjB7","tlshash":"cc1224d2daca8c4a171fca5d64a6816414fc4c8be6271e6eb3f1250cf7824d5931397f","first_seen":"2023-04-06T19:34:35Z","last_seen":"2026-07-26T03:52:28.12888Z","times_seen":798,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:52.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://sagrolimited.ltd/\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://sagrolimited.ltd\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Thu, 12 Feb 2026 12:20:52 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min94a4.css?ver=8.4.5 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:46 GMT\r\netag: \"4057-66ba39e2-326c155df6585abc;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4248\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDjOdLSS9Lh774YsdUf82JQSfh3%2B4Mb1oDtE%2Bm%2F4PA77n0P9gYrsH8Welq7zz9gEusQAQP%2B%2B4SkCFsLcPGVidhuxXA2qlpJjJ%2FTWft8KLRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b5de1acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-27T00:13:19.540388Z","times_seen":138238,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/css/htbbootstrapdbc2.css?ver=2.2.6","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/css/htbbootstrapdbc2.css?ver=2.2.6 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:02 GMT\r\netag: \"d88b-66ba39f2-563a4d2df2751013;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6728\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlHh7QOurxFma0hkffOWBTygCkXV5o4bBIbbqZzXHcEnZIj38II88PMwD3EqROHwuKq2Pr71a6ohvjEJeNLzD5USnkxNIknNKdol%2BAzbhrQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7defacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":55435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1028)","md5":"d1c998b249914beb9baa778dd44d947a","sha1":"ab143f4ddb24521c2a016c8ae09d0f521a416420","sha256":"ea7b473daaa41eb7c5ac2e2410677687dfec62a8007d1d3666d3ef5126f767f1","sha512":"7b12ab8f903c5a2df6a2bb0d076affe24a4b541b6ec51943253b96d96b14c96934460513670a0da4fadc0e16a39ef74e19c7186d0dbff3f5fa17126a9e18a137","ssdeep":"768:HoENiouwCc5bedL3wKUghio/wCH5bLdLcbHvgbioMwCc5badLJI8ySioswCg5bqq:HoECi8R06OR","tlshash":"f543f011efb3280e511f811c67eda687237d1287a51efe75f69e12404fc9280eb63ad9","first_seen":"2023-04-05T23:01:44Z","last_seen":"2026-07-26T14:29:40.689333Z","times_seen":1803,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:26 GMT\r\netag: \"26c1-66ba3a0a-c649a4cc681b72e8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 861\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6YamEUSuMnxPBmK6F8wgxkXIFCEcjc03e%2BQ6EJtM2E%2FHsOGKPCx26hn08OHQaUFEOQb4Nm9PDNfUBYnv7mH%2Bdj3x7iONbjqVZIZl2GhLaYE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bce14acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9881)","md5":"732101e0981600dc9855480f7f133ac0","sha1":"159de23c6faf75847379b6b78a39467bc723b194","sha256":"93f92ece641ffb9fc245f2da30e0219a6746096ef5d8d0602684ef4b8b82e3f4","sha512":"2aa74e06d97c01ee076c7e4db44758eedf63b9b0ba219af7728ec10dcd16ff6e0f6c328ddd53878af82267345dede66d263529d7cbdbecc3f1208c678e62ea59","ssdeep":"96:BjW9CszCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:ZW9CsCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"4c22d3817d63814e16ff641b101b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2023-08-22T03:23:06Z","last_seen":"2026-07-11T12:49:31.087797Z","times_seen":418,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/public/sagrocert.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /public/sagrocert.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 24 Aug 2024 23:37:43 GMT\r\netag: \"15c932-66ca6ec7-e74df3ae95223d17;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1427762\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAfsJSKMTf6YK9xAPojX5ahg4KEWa9%2BPYwZ3SqOPtjdhmjvAKiCfRGL2%2Fi2M%2FP33XizYrntXM4NVJDqao0HCTZTkQwt8iwNJgackrYP3mX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce17acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1427762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 22.5 (Macintosh), datetime=2024:08:24 21:33:59], progressive, precision 8, 2480x3508, components 3","md5":"726b576e04d3bba61a9454fb340276d8","sha1":"356e57a8d7944074d51bfa0b6e13fe52c0e22651","sha256":"331df7bca5e5b4a8b58289f33c887c5d6129eacde96394fff55ca03735afcf33","sha512":"c78b273316c58b1dcd76ba8209b0169241b158a38b5e38909175fc13ebbc66e14e1a99e4726e25acd3b082a73b753a1d5c5c3a1c893c0c9297621968887be721","ssdeep":"24576:IvPUvr5+Z5djUWCdldhHlad23Ne7faldSZQMpKcxnomE:IvPUvr5+ZLAZ97TNeuS4cxomE","tlshash":"8a2533ac0f9b2c82dd6f40be904f562a21a07d06db038a69756cb8953fe3154e57cfd2","first_seen":"2026-02-12T11:06:16.056442Z","last_seen":"2026-02-12T12:21:12.453108Z","times_seen":2,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/drop-down-search.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/drop-down-search.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"1d74-66ba3a1a-c42988f9685ca7be;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1947\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYENJAHZB%2FG2Kv61vig63E5g0cvJ9nkwWcEQ3NEAX4taVeUG%2BP2T3M7IgjOl0W%2Bihjje9yogGiFNd6sXFAol6epxhBV0UxYw2SJsdk6sFNg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee27acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7540), with no line terminators","md5":"a5dd52e245250392abde69b8ca13e4a6","sha1":"48a71fbc567e87ca46b6b1abf7b75314e8f9e7b1","sha256":"3384956e490e6ca7dc4508788bf5953bf3145e40f06b5955cf7aef3f2d42ff33","sha512":"20693bac4eb0e18be3b2311759f11c6b41242347411204e9b4c94f8e7af175c2d9998938c97f5f58c345ef203b85e4a0c2cd52ee3714a3365b24003ad947cc62","ssdeep":"96:ng+t3RyPsefIJ4W58JbTfkpPbSrMuL5zfqMC9ZqTg:vXf8bQdbwMuLhgZEg","tlshash":"50f1358bb0d0f0f2039791b8423b81466ae1987c154ae8e16bf89af137ddd5c9153f26","first_seen":"2025-01-06T23:37:30.975649Z","last_seen":"2026-06-29T02:27:16.431329Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"e0e0-66ba3a1c-93e88983f1703723;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 13619\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmV88MUiwq0PYd%2FXMggaKi56WfYgWcX1gLgQS5hhMfS%2BjdhI3rbEpm%2Bw2SOtNQhZdJOxACcgreIEVZcRg1k%2FagQjfMEWYlXq90PF1V3YOws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee24acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":57568,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21914), with CRLF line terminators","md5":"d12d58d35825299b77044854d01a1d57","sha1":"39ee67166de06d9c6ca382f4a4fa3b94b8db815f","sha256":"66dd4e5c21b276f0f6302f05a0acfaec62edc461993593a028dd7113923f704f","sha512":"f53b79afc051109cddc36ac25e1e2f1bc2e8f6f717b25e90bb80940716a98a2019a7f0cfc48cf911da91dae8bf06d83053b2bce06feca5d50b157a6eea0973cf","ssdeep":"1536:Ybgq120spmYjfsSqxHowWtsSvGRPQH0v86YxkD1a3x1KxuCySjF4kE:AgZ0AOSkRPy+mS4","tlshash":"c843b5493281393981dff1b7212f860ab2b7a4ad2441819cf9a4ecda5cfcc49547bf79","first_seen":"2023-03-07T01:31:41Z","last_seen":"2026-07-24T11:26:17.465051Z","times_seen":1890,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/scroll-top.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/scroll-top.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"231d-66ba3a1c-8783f96820d944cb;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2149\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3mXYV55Ibuviz68hm91GGhtBkuJXJpU21FxbUJGLW%2FZsCT1%2BWYd6E%2BA%2FvfEv8DVxJzNOb4zjHLwLervYnFohYziA7%2BYta03Hy%2FLBbyEGZ1U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee2cacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8989), with no line terminators","md5":"11f6d6de62ea437d6d62fd234e981637","sha1":"e0ab29df984b6ade920ff07d5b33b34a78e637c5","sha256":"a30e86b87b78f981a43fa54cfcc968088e970d033f6eceb5ed7e4e586ce5b0a9","sha512":"e46b412867798db4c4ca98fce06090e8dd0ff03403a54e1de9c733f3ed698dbd4a2f840e96790efcd9c4ba78c3f48d6da36c9f1422d4ac74a4b7833562024051","ssdeep":"192:iPtdryDtWLIZys25zcqKjW5dOM9a6NMQREX:iPtdryhWkZyR9v09R","tlshash":"6802854db381b0f112d7c26a427fd30672f55c5e1a0de1d0b3b8aab22655eae6213f35","first_seen":"2025-01-06T23:37:30.983951Z","last_seen":"2026-06-29T02:27:16.341634Z","times_seen":8,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-5.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-5.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:30 GMT\r\netag: \"1188-66ba3a0e-40667566178198de;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4488\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgHFW%2FeVfITcbNYwqWca%2FZyskJEq22LQBuhT4QjGjbFuQIsTT2sxTTad7Ept3ECkU0Imr4WPQwSjeqz2rSmI7xiavZfMAXOMJ1tg4qb5ekU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce0bacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4488,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"ffba693a82d9ac56eb568ef713dd3fad","sha1":"a526ccb908746cd1e1cdc99d03c836bad74f3346","sha256":"23220bdc99083c897fa5f3203b2d3e98bc3fbfb0af6a99eaf1cf94c4ecb7006e","sha512":"4c83538103e2857869204eaf1b6678cc2368867cc4bd2583f17ac0731bf824b7f9c039269d3b3a3ce31844531553585a1f707021ac78eb4434c5c373bd300157","ssdeep":"96:pvknmWprXo/8mHCNHVSS/XTI/+ccWl6zS9AvoEi9PEZplcKIzN:pvknkiNImZcn6KCtljIzN","tlshash":"98914a05fc22dc8117aee36c6aa9b21b5a390bc0de4196b17ddafe4674900b1c9250cb","first_seen":"2025-03-19T10:36:51.064209Z","last_seen":"2026-07-12T17:24:07.183504Z","times_seen":30,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/waypoints.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/waypoints.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"2344-66bd12ad-2ae2219ca31cabc1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2592\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1%2BX3k0uUlb%2F9l%2Bc%2FSJiLKMjQS5VkGu6NCdMYasqfa5ANYg3ZSUFvJ3NtO3QjB40lwyCVlBseRIi97TCAdQM8byDnbBXtLfG53AadULkiv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e4aacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9028,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"7d05f92297dede9ecfe3706efb95677a","sha1":"56bdb149d9baf64474a4c24ae66445769a28254e","sha256":"368daab67b1a5b2b2802edbbac79a2aa4ba992a2ebf9c67b98ad784d8004018c","sha512":"df25e4c654002bf66cbaea0917976f75afd9e16cb22d995f371de879d83d9334391bf9e921718995664da8fdd643239210205841fda0ac691b751693d505c759","ssdeep":"192:mEBzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEFoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"55126189750134221bdf50fad91f474ab337582ca80680bdb4c8d4ed29f152d676bfba","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-27T00:23:35.138744Z","times_seen":17974,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/pexels-fauxels-3184433.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/pexels-fauxels-3184433.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/wp-content/uploads/elementor/css/post-8b24a.css?ver=1699467229\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 12 Aug 2024 16:35:48 GMT\r\netag: \"1e7b4-66ba39e4-6d82782484b42dd7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 124852\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMSzDukEI65%2BnFpu3%2FleAECg9Ba1KnWDv5j%2BR6Pw5NTirdGfCAoGV77bTOSPYI%2F%2F%2FQJDqb5lNjBSOQEp%2FT%2B8zdBKal%2FTr6r2EKKzcpXjh%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa03ef8acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":124852,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x959, components 3","md5":"4214640dbe433576cbeec79f84b4848f","sha1":"e48ce5633bef8f74ffd79e6c0a43470c9c996494","sha256":"e8dabcfeac54b8cc0155d7ba6d1d8c78ea9e7853540e173003c581046b6da17a","sha512":"f45efc1225de3ff8b965cb961b778d3d05330981043c411270193d8b83ae719a355442e16ec9765ce34b25378e3ef7b14149bddd728373aedbb672c16023a89b","ssdeep":"1536:h5RiuiNz5Jo9I/vcEDumG/lWOEHwr6QZCTIvD5Q10DqYZ+YVsBnImWYOKAMD4AM4:hfiXz6YyD0GD5zn+YaBzensPo3ac4Cc","tlshash":"72c3029d6666ecdec80eb2b5d3256791ecda3d13f9707a4c80784f182bdb5c0248ab74","first_seen":"2026-02-12T11:06:16.028225Z","last_seen":"2026-02-12T12:21:12.456443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:00:21 GMT\r\nexpires: Thu, 11 Feb 2027 20:00:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 58820\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T02:51:49.658716Z","times_seen":946688,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 06:00:44 GMT\r\nexpires: Sat, 06 Feb 2027 06:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541197\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-27T02:55:00.25042Z","times_seen":61810,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.694Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/css/style.mina7da.css?ver=3.4.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/css/style.mina7da.css?ver=3.4.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:18 GMT\r\netag: \"2b8b7-66ba3a02-ae741bd1b02757ef;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 25476\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mV%2FoXYNrd5rlXpmphvYvIQDtt6WNVBzHAm8%2BJu8F1UUWlVLojh8CE20mUzXSSPFvUioA6fSqwJdyqK2yClKfhwtDJfLyTo%2F7O6LFZGFDeCU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b8df7acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":178359,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"f30062444d2db954fb991e37605efa0f","sha1":"ff94184f9cb966e7d9e34b10085edb4863cc0a1c","sha256":"d6de76e7f73d039817a17dda8157e8371a55e93a07343ca6810138ec76dc1d6c","sha512":"2c5075ec85be814b7c6a27ac3c84d2102232de66dbad40386e4e06bbe1ebd12024b2b8be241f506174b1a5a415176d87288551172bbb7038bfa731a03ad60842","ssdeep":"1536:fskVAd7WPrStMBxB4mFfNo7WPrItMBxM7u7WPrctMBxLx4rDg39jgp0asA114XaC:jAD9cyA1n6f","tlshash":"1504e9a1f1a1216c9133c736e7c8bb58573cc651e71307daba67611e87ca38a11a3b9c","first_seen":"2024-08-20T10:10:38.25598Z","last_seen":"2026-07-26T17:16:13.742817Z","times_seen":226,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-3.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-3.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:30 GMT\r\netag: \"2299-66ba3a0e-af0e464cecc9f49c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8857\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPiwo6F83w0FrqOkf0YblmjQjnqarodxlL5PwUa%2B9E1YVDQiXZNjPptg4sWDEfzkz4lLGTrWgPM220UhLiCpvfcoQemMdbtg30TKFwswNNg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce0eacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"67e56bc11863fb56ecf7fe1420c4fdfe","sha1":"b43f85f9eb59b7bf14ad44b8c097d02a8d7a80d9","sha256":"9defb28605be176df37b4a60371c54ee47c8927d6b88b1515e3752bdfc22256c","sha512":"e80f5f901a70152ff59b3bf940d514c42c0f1427892e56f3c22ca64325e4c355d4feb437d320d6fa7dd92eee6a9103cf11987dacbd5645b905329c463e7c632f","ssdeep":"192:pvknR+iHWe2Sn2UqETCstY747iJ9+ErdzUPyloQ9BwNAe7I9r:pcnckNzn0stY7YiJggdYqloQ9Bs7I5","tlshash":"4e029e43bab39c81a5cbde15f4a9138b4965d8681c92e141feeddc87fc75138dd088e2","first_seen":"2025-03-19T10:36:51.045204Z","last_seen":"2026-07-12T17:24:07.104212Z","times_seen":30,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/wp-polyfill-inert.min0226.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill-inert.min0226.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"1feb-66ba3a1e-8a54061ab2a65dd5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2320\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDI5GVi91qhoxdu%2FRHI6tO1ddghoC145cqz7%2Fq7RrjbEqv9eqLGEi4yA0w7ewtkiAN2pvAtep40ATILQPJPQ0%2BZgiNiqIcgB6EzU8Y29H0A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe33acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8171), with no line terminators","md5":"dda652db133fddb9b80a05c6d1b5c540","sha1":"60c8514c57a5db2980c4b046b0dd479bd427357b","sha256":"c1a9a3e223bad631dff12d33b5499eb145cb08d8621c20d9d73870e78d97afe4","sha512":"05cb3673448a79aa81887c60a82aba51f9a843dc13ab4fc39b3e6d8ae7d632732d9afefaf72fc3d197c2795a3364fdfd4f83c9b628644d98f1c9017bfd435e62","ssdeep":"192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX","tlshash":"8cf102b8730569736dcba1a96077034326232027548a54287738dcff8dfce552577bb9","first_seen":"2023-03-13T14:32:06Z","last_seen":"2026-07-26T20:38:48.179927Z","times_seen":50491,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.611Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/isotope.pkgd.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/isotope.pkgd.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"89f1-66bd12ad-8d1e7b7df4422ce2;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9596\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTNlY2SoYxK6rycaiDRlMX5wRH4ugvBocYD4T2J64JPrbDCc%2BwJ%2BlMv2Fs2ZhfisXcz3QZEbNq4UgVhnTe%2BPsj6rfNjOi%2FH8iSvbe7pVkHY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e4facd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32014)","md5":"39258d5d7a1a2c1df44cb3a40e494e9a","sha1":"a6a23845c95b5551c3ad8850365b5200331e46ab","sha256":"f96151453bf5b861219fab32920589c930580c4f1c427f2e023e7429e7e9f482","sha512":"54304e2250dbb82e155b1189366b85450d0b8b448a903a661b2ba1006e4b4c32ddfdd27f4b458c571ae247663e0b23cbe60ce3a4de1fffa8aa595049961b74b5","ssdeep":"768:NMAyxzGdHc1zfA9ZVP4eAnmc6FumKSsCD6rD6G2UfdEhCDz2wK1Fxt:Mx6dOjARP4Nnmc6FuCsCD6rD6yVEQDzW","tlshash":"25f2d84f73403925468bf166926f160fb137e56c6a4690acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-07-26T06:28:35.57448Z","times_seen":3040,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/scrolla.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/scrolla.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"466-66bd12ad-a86b76a37190954e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 481\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nF4Pf5o8PKRF1wUeiEEwX28T6%2BAGRAsBplnks9t8GFyxTohZL9BE%2F01UU8oE9e4z5Dsatwax6xVfOdaTB1kxukaRMjCW2dSRQV8bSi%2Fkqcc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e51acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1078)","md5":"12936adcea486ebc10aa85f795f10c22","sha1":"ef2658054f2fdfdc974662a3f64522423e6c352a","sha256":"499ff3b7888bc44b4da9d8c215e328058852d985b86ccd1274b2f5c3dced8d1b","sha512":"0520a18b9a65cd7396a9e8d2730d6629d1d5df263d43493f8cf9637df5318bb783a071ad40fef9f05ef2623b54e1ea310e78b0d4d88bd190a84da56d0821d2e1","ssdeep":"","tlshash":"b821f0adb962161a12ef7a776e0f2104c1337cb158114001b02efb5d5f6aa619733a3e","first_seen":"2023-03-07T12:27:23Z","last_seen":"2026-07-20T06:28:23.808972Z","times_seen":166,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 10:07:55 GMT\r\nexpires: Fri, 12 Feb 2027 10:07:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 7966\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-27T02:52:03.417931Z","times_seen":383569,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.519Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/css/skin/skin-1.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/css/skin/skin-1.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"2285-66bd12ad-9d2e0fb309f5fdd0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1758\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3jKEPRWUHPpGYqNl%2F0iKq4e0bH%2BSpqMRQ7BSD27up5gxtaXuB7nNS7wyIx91y9IXYIMuNUvdU2cinpRhDLxEU1zhLG66sVBGEx8otkF5jo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b4dd9acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8837,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"25e14b0e8668ddc52509a38e7e7d0c49","sha1":"3892fd6e8fb723c2554ecafd73913451e96330ad","sha256":"2644a459d7181b3f270f34b8dfc47d24bc6022cd1a9a8b42064a99547f8ffd15","sha512":"457fd32567171dfa9a6366e590d0b29cb0253acebcbe875ff406ade84aad6f9b4a1e8c9d38f01eb8bf5039d3534961b55f8a6525da6abdf5a8d81747d19868fb","ssdeep":"192:WWQUpQgjgGgyqCqOqYqP/ZMQwl49yFVVbRKqYqgWU0edXYG7JEYKY4YNeKe4eorl:7QUOqJgyqCqOqYqyKqYqs057NlbIUmYI","tlshash":"a80230c96287367d27574478d64fb2a0ab2bb3c8df441fe8bc79605a43403885b3391a","first_seen":"2026-02-12T11:06:15.979368Z","last_seen":"2026-06-14T12:35:14.7699Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min5829.css?ver=3.15.1","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min5829.css?ver=3.15.1 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:46 GMT\r\netag: \"2c4b-66ba39e2-86e6b03359e0a6e1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1436\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RfjclpiC4sPD14ZD6CtkK1Z04JnT5W4ipchr01IBpL%2FGQUpaxJiVQ6C55XOQAr4CPTx2z7ZPAzDpqMARdUj6tMeB86kOBtTUrnxH8AfvNhA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de5acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11339,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11295)","md5":"1300e16ef217a34d1c274809ea52a25b","sha1":"968c42d3223bfe734fdfe8132f8e5eab5ab3859b","sha256":"35e22a9cee5e655c57c5752699f4aa55c950bfdfb84f8594dafae0697fd29aae","sha512":"a914dd9ea07cf75a19525c3ceb4c8f3db04622e48fc0fe4264d8a08f7466e99fb7b188ff7fea00f77691e1bfbc8973eba6aea32920316e8f69c1afb7128e84fc","ssdeep":"192:JlCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeqZ:MpkHdy","tlshash":"b0326c26bd0b485c53bf51b7908b269c0a09dacae1611cbdfb60650f41f4e89f3b9627","first_seen":"2023-08-10T09:30:20Z","last_seen":"2026-07-24T20:57:44.574536Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min5589.js?ver=3.4.1 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"3509-66ba3a1a-6c4b383ac046e733;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4678\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLrJPWxlryq516EQq%2FmahsUwaDuBWi%2FvwUQ7vmB%2FSqC%2B%2FUO4u5GVOX6Kyx3WFXgSlrzCuggUrUoc%2BVAuMiLr4uDOwol2tlsUmzWEbwd74o4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bae04acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-27T02:51:07.921576Z","times_seen":909752,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:26 GMT\r\netag: \"7efe-66ba3a0a-775bdcb9b58f7b53;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3098\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xooxMc8aG0TZ3Hi8cuDr99bZi%2BVibXCeKF2ySAadivQc3rEacr1VNHi4ejRId%2F7k0f%2BxR657%2FoCri8xEB3Ren%2BM3gEVrScQQdbZgNGA4Jyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bce11acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32510,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32466)","md5":"49755c1bd3605dbc72e07318828a5dae","sha1":"7702385190d9e2e5417f36ef5baac1decb82e6b0","sha256":"cc83059cdd6e7fde74411c51c48b998471759ff543e9e2d40a9c7ec652884fe7","sha512":"ddae775d4af072df0fd7a2a613b53daff084a3c2954dd1087bc7afef27d80f7e7a0f15cb77718255117f64dd5856e44d0ee5c2c75c3458e29221cfe4abbc19b2","ssdeep":"384:wuXJAJy/NzY2QTsy7JBmr7QoXAmY4AKVeafjvq6w:w4AmYjKVw","tlshash":"b2e299613c1b8002261f653fe407e50d1a54ecc8afe29fa1f896b90bc9b6cb43b77595","first_seen":"2023-08-21T21:22:12Z","last_seen":"2026-07-22T14:50:46.083823Z","times_seen":123,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/theme.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/theme.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"4d4d-66ba3a1a-8337116f4110d2d1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4019\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSpC2vgmOluRijfo3%2FkauJvjyDhaXgoIBVcRRhqI%2B4buOn4IhAlhQ%2FmlfyLy99Ize2AuUl49gsjqJVpDrmRbQrTsK8E2zc6ufcBGmeVKlFM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bde21acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19789,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19789), with no line terminators","md5":"789a51014902101263096fd392885ecd","sha1":"8e6f290469f0956f2dd7e63bbafbfd5e2be02fa4","sha256":"bb17c6930d39f59bd668de259c782596e0052b5b9aeae42421aaf5b4d1392b0a","sha512":"8b076882fbc856fb907fe1a7815caf47cb9612ba95964fcd835df81a1e74031329aea84f939357e8c9cd86465e39c0af8ba64c9344b23a1c0984d2a2fc83a305","ssdeep":"384:XSmyITkZy+KMzEF6CCCbYAAcIL8oFxVjxRnRxE:X0O1MzqCCbWcC8Y/E","tlshash":"2c927484b291b4f101a7c2a541bbe34163b0acae1506f86177fc8b616bd7d4d22b2f76","first_seen":"2026-02-12T11:06:15.95412Z","last_seen":"2026-06-29T02:27:16.404134Z","times_seen":4,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/webpack.runtime.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.minb73d.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"135e-66ba3a1c-63f7e4efb7d1c2b4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2048\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9vwBJqqHx4kDF0N5WxjyPY%2Fwpxa5TE6mrhvyvB1MxrHEDuyteOXRCFUQHPEfxkfipXjlRdwAjtUpwuPO8jFYH1hI%2Fika5%2F0dyV4a%2BYfztA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe32acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4958,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4918)","md5":"957da88059464dd1baddea5f3526b92b","sha1":"0e00a87e60bab6f1eaa6fc986c98b35842fa8153","sha256":"b9abdd503536033070a944c44e36bc18812fc38d15749606a057254b298a232a","sha512":"1e686438f7cacd94d017efbf6e3a212896f000ebf9134c267be2f2c8105b62f26136a3bf8b28420bdce269a48cdca3b2578946ebfff48c1375c22b200f39a463","ssdeep":"96:B1N6AUjqn93zgcf8FD4larNVwbVLXkqfjQezovOA8S2:LN6j493sjFDlNwdXkymOhS2","tlshash":"29a131d41b90fc6735e135c8e11aa771652fc0333d1bb8c1fa22dced98e8a9187a9971","first_seen":"2023-08-20T22:12:33Z","last_seen":"2026-07-22T20:25:57.719931Z","times_seen":2231,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:00:21 GMT\r\nexpires: Thu, 11 Feb 2027 20:00:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 58820\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T02:51:49.658716Z","times_seen":946688,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":49,"dns":1,"connect":9,"send":0,"wait":15,"receive":2,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/hero-shape-4-1.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/hero-shape-4-1.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"dbc-66ba3a0c-a8e80001943e1806;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3516\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftqvqumBOTdOzmtUqFaiT4jaHVTLo3oBZW8GkmhGMug%2Bfqq6NR4%2Fvrq5lotfvlSrysdRPHXSxTAQPrWRqZBGYC929pc%2FpTRrK%2Fp1rH1cKAM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bbe09acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 41, 8-bit/color RGBA, non-interlaced","md5":"ce490e8dccd4f7df31f6e539ca4a8993","sha1":"a691a280401ed5d94337721bbc6cd0788044a412","sha256":"e89f15eb7cc05661727e61475c91b9f27ab76a08cc5687951a90f1b3c3be99e6","sha512":"6a9ecc5a1f9e1ca1e5ebafe9219a51d08fb614dec0b4b649b7fb9d78615996158f5be5fbb27e13ae3d5c7b9691cb45a79bcf306d42a8ff56a1682f7f793d6bf6","ssdeep":"","tlshash":"c4717eea0ba0400f6a03e4970ecfc605657eb9a7009af90777f544a5768dad5f2e321f","first_seen":"2024-08-17T08:26:39Z","last_seen":"2026-07-12T17:24:07.166663Z","times_seen":17,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/animations/animations.minb73d.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.minb73d.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"4824-66ba3a0c-bc5c71452b760d79;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2442\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDflMrgn9HPYe113UA9RyTB8uSGZPkpM%2FK%2BlYdQZ5qGborbxbSJlUVO422p5hpCiN6LuSkPvEeKKMizistzdgK7WuoXCv41IUiNqHcZe8Io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bce19acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-07-27T01:34:03.612798Z","times_seen":42730,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrapdbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/js/htbbootstrapdbc2.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"f5aa-66ba3a1a-3b94aba3853c4f3c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10275\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1LCvkW%2BkmOP68avB3ua4yF0Hdqr7kkjIaI38Iumez1abAUQVSDFSFlZ8sVGb6cM37q%2BZjcxsrT60S%2FhvrII2jO8mXL%2BVZdtdYuPNbnZVpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bce1bacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (483)","md5":"f2f60e70a7c89e10fcb5a0624167dbca","sha1":"fea6d4919d9ec8d00ad46a4eaef058a10a1be6a6","sha256":"0c28b1328b50f36e646f70a0e818f268e5c41435371a5011169ea255688bf585","sha512":"02ee11b0eea70dd2602beef6d16c5d2ad4a8a043d3f48a832ca165b5e33a1c70a2b1beb634c819af82559ac9e9afbb21d3158e267c44ed60c79c0a333fa77b19","ssdeep":"768:bV4MJt+pEzsuwAHA7U2Yu1R0keF8Ubbqlw7J+E0/y2l6aNY7nW384zjMoXMy4POx:bVDJt+WYZZS8c2vLq7mt3H","tlshash":"1353630e77f57472935bb039896f8809b276904f5a4aad487d4c50e80f6883c57bafbc","first_seen":"2023-03-07T01:28:28Z","last_seen":"2026-07-23T18:12:31.997905Z","times_seen":261,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor-pro/assets/js/carousel.9b02b45d7826c1c48f33.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.686Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/carousel.9b02b45d7826c1c48f33.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-B-OLLYpG.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:43.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-B-OLLYpG.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:43 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-9183\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3ecUfAAwBuUwKCQH3DwAAAAwBJRPCLgG3AAAAAA\r\nx-77-nzt-ray: fdb541238f05b3619bc58d69f9dc0301\r\nx-77-cache: HIT\r\nx-77-age: 2082169\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37251,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37250)","md5":"2052cfca49186988b2bd90a4a812a795","sha1":"8c31463bec24745479731221d847ec0a6d2b8337","sha256":"f4257f5a00c3ca86166edd00fb26cd15e4051aaf442a8660c9f33570da08b8d0","sha512":"39072c2ed68b9170d5ce9f6449fc2a456b9cebb79749724e65b55d111fd9482fd5e07cb0dee42e9a4810f39fd4bd2c7bbdac9c786afc1be6b259429853c49770","ssdeep":"768:E8C94TcCWYtomXFDxrnSJPHs24vq+ggFgZ:E8W4TcCWYtdXjuPF4t2Z","tlshash":"b1f2975daad5093cec33c166e3f8e58c9229f5d1df321a9af6433a048ac27bf1987514","first_seen":"2026-01-19T10:30:28.096588Z","last_seen":"2026-02-17T07:12:59.719508Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/css/style.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/css/style.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"3d66e-66bd12ad-cc09eaea10a4095f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 43402\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3IzbO5YaUH2zwosnCZG2NLsAbyGof7H8M9zKxhE6CUnpwvJu3qPThk7iuLtu%2BWXR8HgBmvehqOXGapWr5iQ4EUdyiXTnHCY570vTaIzwr4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b4dd8acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251502,"size_decoded":0,"mime_type":"text/css","magic":"ReStructuredText file, ASCII text","md5":"6b96ed86300d58de6635cf494e5bf3eb","sha1":"db7f1e250597ab9f1cd916c30fb8f69cf15ff6cb","sha256":"75b1e1dda7d15ee1b7ab3b66f43c543c7526d94dba70c09b6f070359803383f0","sha512":"bceb67bfb3717a93ad1849b746ca5815a4ae104bae1ae26ad6bb16f560d69e6a40c4127a5e131850f105ef225f8800d252588e7f35ab333579ec9e2236d210a3","ssdeep":"6144:V2QBN7yRntHVHFN9/9ZeLsrzJOSYATvVjgofDxPfR8HFNG8xAzxxkg53HIsEmTR6:IGyR8sE6hEJgX/K43eNNhq+p","tlshash":"6534b563ad562c49b117d019ef89aa90f72d2013ee0e2faab415b52cc7c93d9413fb4d","first_seen":"2026-02-12T11:06:15.993082Z","last_seen":"2026-06-09T22:06:43.110991Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/owl.carousel.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/owl.carousel.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"a70e-66bd12ad-65607ce44694ad71;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 10649\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SioFBXvGl9LUSh2ABSuVgL0iwDV5DYQLoNfyjV%2BkzoKEiXsM%2BfyMGC5UhYkT9tpIejn6bN8Ipa0jhzSsmCnXx1RFTpB7QO4blSeG8qq3kr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e50acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":42766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-07-26T22:58:05.127636Z","times_seen":20125,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style694e.css?ver=1.6.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/css/she-header-style694e.css?ver=1.6.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:46 GMT\r\netag: \"6ab-66ba39e2-e8e30bd7d0e35633;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 400\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuPCXjAgdog5JIAjG52ln1RBoua5eRJlLOvyZPFpj%2BFLUjjZtAZxNAR%2FKKbifGbH%2BIm3UM7qxUQo6Hqpyi5EyRqpyG6zMzZFnG2ApV2aFOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de6acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1707,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (433)","md5":"7f75c970467d6f35cc0efe450644a1c3","sha1":"a2a3107a4ccf9a5483cb21d7709096b23c19918a","sha256":"9352ed445b8d0cfd4899b2b7493db41bdfc7d61f31a87ae591d32c183b05b082","sha512":"c8e36a4233350a2bec4cf3a80ac0e9806837e0ec50368adafbe20d7cae5f4b8297e4b538deeeb7edf2030d220741eed69ea7f93c8ba1f1214518ca4585938287","ssdeep":"","tlshash":"8f3118c17d6b2d1c2337c65ee0c36728eead09c5e3010d99e799582f03e9dc1653e954","first_seen":"2023-09-02T23:17:16Z","last_seen":"2026-07-03T05:11:18.955012Z","times_seen":42,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/custom.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/custom.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"51a6-66bd12ad-1f6a5581b9cc3927;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4523\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5FlgOZoYopL%2F3KtKbG4WNcA6zD96bi0bQmtJutRCJaBGwpS6vZSECLxDhiseJ4YrQYOgYPBEGojvuI1gt%2FqGSTBFS5BHsH1Jk0bdyLsyLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e52acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f484e273dd7723d973575c0064da199b","sha1":"8035c709d808d67e80edd1ed94f874444be739b8","sha256":"2e3700d72043392d40d64783cf884ee753244f055621a2d7c4c0455de570366a","sha512":"ed7aa32669e150e5315389620fa45c91b4ead2d6283bba3c9bfe7830df41161d9eec96b0304560c4378c9aeaba1ec5858a4a3db4d9d8824a6783a4712d494be0","ssdeep":"192:pbFqS5kmD/tmDT/C3vCEMBWFrysga7V+A0o00Vfz6NEYfzMPErTX1ZDoV:px95T2K3vCEMY1ys37x0o008e13","tlshash":"5892821cfe2c70699537fc2ab77f2748e22f5112b2585951751e90e40fb0b2ca3aec1a","first_seen":"2025-08-28T22:07:19.845991Z","last_seen":"2026-06-20T13:07:11.878435Z","times_seen":24,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/pexels-christina-morillo-1181435-1.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/pexels-christina-morillo-1181435-1.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 12 Aug 2024 16:36:32 GMT\r\netag: \"3bfbd-66ba3a10-1076a208440ddc10;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 245693\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sEuDbgPIofLIdk3QLkznd82ZGcfcI8Dlaj5MyZ%2BK7u7j94NZlDo5MHr0DjytcMf057D%2BurClbSt5I3177qLJri18O3WnTiH9lRnKF%2F8DG8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa0af15acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":245693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=427, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=640], baseline, precision 8, 640x427, components 3","md5":"36a08f29478f73e08a25fd1257f68c8c","sha1":"dd8e9a2923c5cbc1d78f13a56623ef37978bf525","sha256":"70adb2eac672bfa82652da33ea39d0e4a4a07396a198f54b2b00cd16c1c85a57","sha512":"f0862a2503cfa3ba6f03aff3fe2f6db2535032380e74e3f287642bc77c2a3c0b2d7cd6f88fee26a092b0f326ba7a801e3ea31d1a3d8300e426c4962341ea2250","ssdeep":"6144:b7z7GJB2+8KFRAgE4hv7rx2W1SODK5nAXvI0Nh9b:N6RAgfv7roWYR8D9b","tlshash":"2b342310ef65e067fd97383e54378746a173a23a0ba768423a0d2142b7f0591ba5bbc7","first_seen":"2026-02-12T11:06:15.991471Z","last_seen":"2026-02-12T12:21:12.475132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend635b.css?ver=1.6.15","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend635b.css?ver=1.6.15 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:00 GMT\r\netag: \"127a4-66ba39f0-21b7ae0a32e2a43e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7374\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5GTyaOrlaF%2BYkIC%2B6qg4i4fRhg1Xq3lVRcPF1d3HMMzmcNdFU72EvZhZJy76b0f69KehJURFohb1MX5ffiXioTOz2BaWFH44C%2BiECRtn8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de9acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75684,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"2395c81e72a52f14588816b4f72a7f17","sha1":"711357e8d49c28be7605fcfbf881b90567decee1","sha256":"ea14d1b1233e6cbc9b1a156ac532f076f7adafc309726fca7bf8833f882ac872","sha512":"1e39451de9cd1a5484c1e507c085aebcded77467926fc52e6436de506c5ca698cda6eecd202b36f7ba63fa7bde576f0cb866bad8d4efebbc3c1fd5d02f2817e2","ssdeep":"768:22+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/T:22+Rm5ufoqDr1GLa","tlshash":"4e73b8c61dc229749a16681ea2ee93a457b60047cf34adac37ed811ccf82341b7f6b57","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-07-26T19:20:14.81087Z","times_seen":4537,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header694e.js?ver=1.6.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/sticky-header-effects-for-elementor/assets/js/she-header694e.js?ver=1.6.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"4abd-66ba3a1a-e6dcae1077f1a755;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2547\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsh7sT8hubZItUaMf2h6nklkGRhdcGLHJI58fSObR%2BZnWJm3dUEq4df73LYl1olC53KewgXstr0%2FOHk%2FuabIvlRwwY8JeEsM4d31nnlk3Xg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bae02acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19133,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9e2e37118cc6cb413458b7db92722a4d","sha1":"93431e41f842fdd12db7fddc2575b54819677e89","sha256":"d0e9b749370f0ce32d56543c3fd6bc25b376a46117255fb8fcd73ab7681d8ae3","sha512":"e7ecda18900adaeb52499e77d0a6d0bc40bfdef92dfddc823d2f19f1310c1b8bb0111268df2f1f4b00f8cd440bdb60114576d98f79a4a5cc5b586550ff2b08b6","ssdeep":"192:xgzYybAYzdwi2aoPqLjLCNCJy2Zz0I0y6cs4vRAqWi7KBP8K8:YfGk","tlshash":"9e82de1caeb62112509bf1bac3bf6908f406c0075259e9167e4c53bdafc487ad5bcbd8","first_seen":"2023-09-02T23:17:16Z","last_seen":"2026-07-03T05:11:18.932887Z","times_seen":45,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/bootstrap.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/bootstrap.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"90b5-66bd12ad-d0611502777383b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9515\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3lVdSfgKiS3qJB0EtW8a3yyQtD%2BMxJy8Y74R%2Bv1Ih36iLfB5Fy8kO7bOO0f01yvDv5HKjXN46CyxhDjO3idxJn2rE5GdRjBAb%2BpWptgKlE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c1e45acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-07-27T02:23:31.106971Z","times_seen":96519,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 06:00:44 GMT\r\nexpires: Sat, 06 Feb 2027 06:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541197\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-27T02:55:00.25042Z","times_seen":61810,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.182.56.33","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:43.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://sagrolimited.ltd\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Wo3Ydw85Ym3GqO5alwSetw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Thu, 12 Feb 2026 12:20:43 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: FSdMP3e6GXnKYkf5GTpQJTyT3V8=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":331,"timings":{"blocked":0,"dns":131,"connect":151,"send":0,"wait":22,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/popper.mindbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/js/popper.mindbc2.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"4a32-66ba3a1a-53437683e6bd17f7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6545\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imotxxAfOa%2Fu1Fu92rc%2FvVFG2Jw1hpinYo7j5SBr9HwzBVjB2eWQHPbP4V3yn%2ForLAoXP6M9Zimlw%2F437LIGkvGpVFeiQnAM07M6dSbq70M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bce1aacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18860)","md5":"3621381129597bf34d48a9e2623e05c9","sha1":"edb00146d1636c247c7afaa61f11aad0c0fc5120","sha256":"3675f226f985b64eea6ae8544d5496a32d19993aae1ac4a3fa101263ef3206f7","sha512":"a6bc3381a6b80d4f0420b147898bbdc05dbf908a870ff51b2850b17e0fed55aa17c6af33d65d93a2c8501df220d2e6072c7cf99f9583e331287011026b5e6e4c","ssdeep":"384:++vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnM9:T17bd7iq07ftxivbuzGQvBx1jknrTcbr","tlshash":"228291dc3290b06647a79067a06f960eb2335879604e9420f29df2d97c30dfa927fd79","first_seen":"2023-03-07T01:03:31Z","last_seen":"2026-07-26T19:57:29.897476Z","times_seen":6842,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/funds-removebg-preview.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/funds-removebg-preview.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 18 Aug 2024 23:27:23 GMT\r\netag: \"9689-66c2835b-d965e86dd015c33c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 38537\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PW82foMBGioHZhlf173IpPkwFnT4hx1EOzvzODMYl%2Ft3SZ0Ph9VHJE4PTtIWjDnvCjCsgIWQF5VRyGCZJ6Phx0mai1uUCnZ5PLDZq%2BGkbO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bbe08acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38537,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 856 x 293, 8-bit/color RGBA, non-interlaced","md5":"fca5ca5ddf91f7ee00cb7232680d497d","sha1":"1359ac2050108d4e0bd7dd98fadecbdd23bda54b","sha256":"7b48cb5b1cd6e46b96aaca03f12e0b3bffb42d0870a60a0d16ca6fc55d0c39cb","sha512":"e8d800c56b7dc80707cf827ea8ec46374c03912017cc2939d7355f28175429ad788a08dc79deed1f52c9d6b192aaf1a6b3844799e24aa06ad809318cb8e4648d","ssdeep":"768:DEJjKTietiuhiQQqk+W3N+w8he/YFkjtSarZU0GNfg4J2c7vORM+1C:DXue7thV5w8hkYFkjtnAWC7qFs","tlshash":"1a03e1076c2c3e72de82ae6443fe014b6eaa46f0b7c4d6114c5b7de21c0e7b555abb06","first_seen":"2026-02-12T11:06:15.973522Z","last_seen":"2026-02-12T12:21:12.478012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/js/spop.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /js/spop.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"110e-66ba3a1e-434de7de610c0d2f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1375\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GhmXM8GOdBAn34TXOygQgFL11yjDQ%2FiLKf7Fe9J28zxpgW3TD94CGykfafL7d6CxeBVCoMqDr3tLLyPjWoaY9mUMXOmvulsjUyxRio%2BZgRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c7e5cacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4366,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e28d2399525ea423ef20bdad40a15318","sha1":"c516a83fbdd941f6893e42811d1422d1387266dd","sha256":"9b77fce8a5c6df3ef66a7e852aa1c4578e2cce76e8aeae857df716f3834a5ea3","sha512":"9c018e4f17eab5c13ff83d92b372d7c8f858e4b3699c07e2872656560dce6f193e33b370a0a578cc14106d6871f960b68785b3aaed85c8f1d570981a7f5829b4","ssdeep":"96:GEnTeGLsAsRDK2j7PsvsjPsZlOu8uR0zIbVVCEUEI:hnbslDK2HUveUZloe0EBDnI","tlshash":"ba91521d97ac532642f622dd745a109af03c8936ea5b181fbcecc7f49ad1c1c6721e34","first_seen":"2026-02-12T11:06:15.97215Z","last_seen":"2026-02-12T12:21:12.479204Z","times_seen":2,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/x-font-woff\r\nlast-modified: Mon, 12 Aug 2024 16:36:22 GMT\r\netag: \"13174-66ba3a06-89c8da316a6f6ce6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FG3iE%2BK7kCaEXsMVg8CiEnWhmm6cwACrAkI8G%2FcodpfsGOKTLBswjdOTLPDVIuheEn1AOPZQ5Qkuac9Pxgo633SH34HIL%2FwwdsTqxNKLeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa03ef9acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-07-27T02:43:10.657459Z","times_seen":162370,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget-send-button/js/init.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:57:34 GMT","end":"Sat, 21 Mar 2026 00:57:21 GMT"},"fingerprint":{"sha1":"2F:33:3A:58:2C:0D:D2:E0:A3:35:99:D0:60:FD:56:1D:AD:88:F5:4C","sha256":"CD:EE:0C:2B:45:7D:D2:FC:B5:19:9F:5E:16:DD:EE:8D:7C:CA:97:E5:BF:F1:C7:F1:A3:3C:55:3B:9D:BF:47:94"}}},"request":{"raw":"GET /widget-send-button/js/init.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncontent-type: text/html\r\nlocation: https://static.getbutton.io/widget/bundle.js\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b3v1d35qIO083CmwsrkDhwaC68vTOX1xd3SpvNEVA4joHMUgXpHUd9uLJJWMUj8hL%2Fz8dhNin1YWFECwYWvi6A7V7Qm6HCKe2svYF2l%2Bu8%2FhJw%3D%3D\"}]}\r\ncf-ray: 9ccc0aa289454435-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":55,"dns":16,"connect":9,"send":0,"wait":55,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260210","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:36:59 GMT","end":"Mon, 13 Apr 2026 08:36:58 GMT"},"fingerprint":{"sha1":"17:F1:21:AF:29:27:FD:80:6E:A3:7E:FB:1A:93:24:56:A0:37:E5:9B","sha256":"D0:96:28:C5:B0:56:0B:27:84:97:37:B2:78:5C:2B:FB:8D:40:93:2F:58:86:E1:F0:89:89:F4:92:5E:EA:A5:BE"}}},"request":{"raw":"GET /gen204?sl=en\u0026nca=te_ap\u0026client=te\u0026logld=vTE_20260210 HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: image/gif; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport, script-src 'nonce-IkbOoXRtQIT4bqg6mOeLKg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self'\r\ncross-origin-opener-policy: same-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/_/TranslateApiHttp/web-reports?context=eJzj4tDikmJw0ZBiEOLhmNW9_QybwIn2c4uYlJSS8gvjS4oS84pzEktSi1OLylKL4o0MjMwMjAwN9AzM4wsMAA6DElY\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: __Secure-ENID=31.SE=LxT5w5A4I7fAoZ-Achy9GXnr9Z4isa-vhGfK0EB5pMS_BKTnvKjdc366Roge8qdtm-o-MDTW37WnnReJ-oehDkLjKCBwLnPFrcA-nJb0zWBN1pyw8FdVBva9UUkDNSoK8O6fbEi7AdCEjojgJjHVYPoJiFaSHDy7SyGEpoeqtAnIp_7E5olZ7NxannnEkaWZAxFZnSEvj6yftEvP-55WsSKlNDR0IWBt1h5is_PX7YhixPI9uSsJtQ; expires=Mon, 15-Mar-2027 04:39:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/gif; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.651Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/css/frontend-lite.minb73d.css?ver=3.15.3","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.minb73d.css?ver=3.15.3 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:44 GMT\r\netag: \"1b4ec-66ba39e0-7889babf862a706f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12576\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fs2T9Hj6Tpi76TVVhy8EhxNWwxymLiD41mz3%2FTunQrXZdUnOGQpT7O2eSoQgo5Il2vonWkE7q%2FBXOG%2BDAC49sfcvtbPPSbBZK8taZoxb7kk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b5de0acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":111852,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"d1af26b20bb935b169455f88c7dce4df","sha1":"0fe640c4fd31df4216364c3fcd1f8a71732dc496","sha256":"972341a5962040766949a0ab1517e1e9e02137e793c80ca98994b8f8e66c1189","sha512":"56bea4c6c39cf004b42309e91b115424e05b119cd478a57c15aa561fbaada9e3274db9edea88bfd683c6c03de77757be207a6855b6cd3134fb9e832e5ccf17bd","ssdeep":"768:ClnC5Kb3tgnlKGT5sZQ8tQfJjuqnk1gjN:CRTtQxiqnkk","tlshash":"94b343923d07622a662f5e3f4a87769c53a445c1de437adaf442c403d6fede1372a823","first_seen":"2023-08-21T20:00:19Z","last_seen":"2026-07-23T23:15:44.922696Z","times_seen":1462,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/frontend-modules.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.minb73d.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"db5a-66ba3a1c-f4701f5ba4e3c9ad;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 15972\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UqTiT7sD0kG2FVxyiKjfX8OEIQm4uIoYvzIwhnijg3upivhgDHoDUfN2cL699ffg9IkAz%2FeeNHb0F4Yugvr2%2BfiP1wuHr6aN5dc0sVKblso%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe34acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":56154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56113)","md5":"e7fcc0d272097507bfbe43d4eb9282db","sha1":"c2c6d530898b9bb75d87c99211818955a4c707e3","sha256":"f09639d5221135bf3c3c381319f9804af78bd68d84c221db1efa6bd38f0abe65","sha512":"8c363c7655c0fad9d42b856dfa307907358382ebb9f25d86f3a6f9a230c68f3d34f888087234b39429a25a4b9367cbbc55f079fe738557184b9e4773d0df1f18","ssdeep":"1536:leAjA679C+QUVYNIe8HeBHmjkBzRNx4cR8+teAWuHDPh87FO0Q5RSS2TKtoO4C3Y:4JpAgmKN2Z","tlshash":"9443e7423211b8b307ef41a7702f120af3221dd8740eb5987669dcf6b4b1d96637ab79","first_seen":"2023-08-20T22:12:33Z","last_seen":"2026-07-22T20:25:57.75025Z","times_seen":2226,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/magnific-popup.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/magnific-popup.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"4ef8-66bd12ad-7cca6e727653fe9e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7043\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2Bz8%2F7nnN%2FwgfCmVLRmMNEEQdeAnf%2BvK4H%2BMk2rIrltOBWntQaq5aTP%2F%2BBBtZCSADqVg0pofCuEx1xFXfPwyNnHNkRB23pLMACnP0ScoC9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e48acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T01:18:38.54312Z","times_seen":71908,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.546Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-DPeQuegu.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:43.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-DPeQuegu.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:43 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"696dff7f-451a5\"\r\nexpires: Tue, 19 Jan 2027 09:57:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3ecUfAAwBuUwKEwH3DwAAAAwBWd59LgG3AAAAAA\r\nx-77-nzt-ray: fdb541238f05b3619bc58d691be6fc00\r\nx-77-cache: HIT\r\nx-77-age: 2082169\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"2e8e460e4a7b5a4e1bdac0267191e947","sha1":"a1cf3748473f5309edfbfe1bd84c7d2761798879","sha256":"b81b8adf25044581520d741639f60e62fae743579ee2ccbf6e8de79ead435394","sha512":"18c3a79099a98321c76010a8a1c7bcc19c4505754a596330625ca630b141a7e09db9750a8011a9b02b4956719d79780df6bb5bbbf57a4583fc595137dc2b7a95","ssdeep":"3072:xapZYwdzJN0dcSSVBViZd1aKVnVwsz44rslm85uBTFSNElhPDU3DuG4ZgQuQo/uV:xDqU85ul+Exaz4ZgQuQgurJePR5VYY8P","tlshash":"605449d47295b47443a700e4507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-01-19T10:30:28.11344Z","last_seen":"2026-02-17T07:12:59.71892Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/css/dist/block-library/style.mine35d.css?ver=6.3.2","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.mine35d.css?ver=6.3.2 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:42 GMT\r\netag: \"19824-66ba39de-c56e2847b55c768e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12962\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dq07PBox5CAzvpyVfRY34VkDnJk22hgiKCvhQFQW5t3uenM8ejbeF3hQPQ9vnP0NbagMzVcJP6RYglX2VQ23QKSq3wBCkNXie4F5hka658s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b5ddcacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104484,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53449)","md5":"03c0f2128c8dd615b1691c168f1d4456","sha1":"defa44bed1f35ec899cfd358ca911390bca53e67","sha256":"67447c3656caad630373253691f3e8f64467eafd6e7305c9b0e98111b0b41694","sha512":"01485475aec2d490e75dc76aea6e011541edcff527e85a773644accf101175b619e10b4d3a5cdb5926669559782bc33df483fe9cc3de9d3431e08123ce5d0853","ssdeep":"1536:6LeJFfvhk2u5SOV+UQ3Zo/xHHbweEEQze:6LeJjk2u5SOV+UQ3Zo/xH7weTQze","tlshash":"bda3505413b0dcf939ffa73a5e5ee248a513aa41c64a9be7e076d190614ca490cf3b0f","first_seen":"2023-08-08T23:54:07Z","last_seen":"2026-07-26T18:48:33.807549Z","times_seen":18068,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/post-450a2d4.css?ver=1693847902","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-450a2d4.css?ver=1693847902 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:00 GMT\r\netag: \"20cb-66ba39f0-331a7e87f494db06;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1035\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ie7k87jVr6uu2runY2ewnEaIkWLbWRuB%2F%2FjOqvi1EMtE2rWOOrNhsys5SUQGO%2BxbJFCWnWE1HXEDizBLQSijRMthfZFUqSvWvbvkL3%2FdpcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7dedacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8395,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3537)","md5":"4cb67f811c4a8035de4bae70237dadcf","sha1":"6b63ee48040aac86f01eec2ec115f69ee3e20d6c","sha256":"e2a4637774b6098c21c821b8da24bd98e5abc958d1a8e70dac09b49a1c0e7adb","sha512":"ea5a25e93458efcbe9ee695ca84c398fb4c66704579f31a15459f769849ce98b6546d959f4ce7d857a2008e6ebe921cd3cbefc1aa74ababf0295f53982d7cf4b","ssdeep":"192:5iduM0u2b3HKH2PAfinlYiduE0uYuc/Zx8jR://Isc8jR","tlshash":"f202f7997c93047cb06f320f5007e29d3aa42cd9d93d31eae6792607f4b1e503be59a6","first_seen":"2026-02-12T11:06:16.064652Z","last_seen":"2026-02-12T12:21:12.483531Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/ow-slider.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/ow-slider.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"7d2-66ba3a1c-40759221ddf1ae9b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 815\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiKxT%2FHFJqi9JlRxFbwakZsjQbVex%2BTvKcSXtenS7Ddt%2BYjXQ%2FjrvpjaHreZ7jKqnKxjkhgXRMs9LcN8sD4yiOYftTnDF97pqnUInCc%2B4Ns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee28acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2002,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2002), with no line terminators","md5":"3f249575b37232d51921e82536004592","sha1":"5799b78581ed5968346cade85389b82b2d6a304d","sha256":"b817c9b9bb557b34222c4598548f3569a7c8f2bb30b796a6c92d47dd740e4271","sha512":"63db83f3e2126724bbc68a12f3bded2b8f0eeae4216ce21c94f8774aa2f4a507ab097910937e5f541298ec7a01ad2f5eca36adedab07ca967706cc501e0d55b4","ssdeep":"","tlshash":"5a41318f71e074e6035752b401afd24666b1ecad5206dce2d36857f829e8c1e4293f79","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-07-26T21:07:46.910548Z","times_seen":9675,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/shortcode.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/shortcode.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"2aef-66bd12ad-2ea5aa0c0e972c7d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1129\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7s8Odx5ZvCMi010AsMLQ%2FUGmjpbCU8S6%2BCly%2FpSeC5YkbkTUei67XbRBtB4eTYLi%2BIKLRqxQ1lj%2F0V%2B%2FV54vJylWKVSxnfbx%2Buwa%2BvdewjQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c6e59acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10991,"size_decoded":0,"mime_type":"application/javascript","magic":"magic text fragment for file(1) cmd, 2nd line \"/*--------------------------------------------------------------------------------------------\", 3rd line \"\t1. Tooltip function by = bootstrap.js\"","md5":"eaac8d34018ec475eeade190577578ba","sha1":"ca815b572545176428dbfb4ba91e88b09a0d4d68","sha256":"fe59c26e0db6fd533f6092152e5d73a31414239a0e8beaa7ebc9f3363e65c32f","sha512":"952a91c0f9a764254902c60e77ea9adc51cbd9cb8a37561c89ad69c3ca5377a4f1aba067cc1b9fe42b4ba6526271ef7660ccce125af503634150255d051f7cf6","ssdeep":"96:21klBb1miOwfdf15Rmf15RIOE15RN6k25Zf15RUE15RxE15RLf15RfQf15RW6YKL:21kleilfXyM2BUlsgCOznEXPC+WO","tlshash":"c232a0c0fc2c20b5dd0afb46e55d3186f67d1836e5a770a3b0ab63840a5a72e057ed0e","first_seen":"2025-08-28T22:07:19.855423Z","last_seen":"2026-07-05T04:52:59.752728Z","times_seen":23,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 06:48:21 GMT\r\nexpires: Thu, 11 Feb 2027 06:48:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 106341\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-27T01:50:25.097398Z","times_seen":70570,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"knoxglob.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"knoxglob.com","domain":"knoxglob.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.637Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: knoxglob.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T02:51:03.003348Z","times_seen":17554215,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/global4256.css?ver=1693218060","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global4256.css?ver=1693218060 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:48 GMT\r\netag: \"1c393-66ba39e4-a5c6ae99c489d390;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7664\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2F0zFFl1cmBAm0piZ0xih%2BN0Y9%2BsfWR2gh33BI4I%2BnHbrZ2gR6YqviiSnMhjljbNvF8Kct8Bd%2B%2FboEx1jbpCQ6js4QmnPSilocCX3Rujt6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de7acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":115603,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21085), with CRLF, LF line terminators","md5":"c4b4d16c20fcd30d3601ef3036e86c35","sha1":"822936afc46290d96ff5992cb0500b3a700c0f10","sha256":"50e6126f7c8e0f68329cc3371dfc3d3fc928caf1b32cd8ca53c1009f22c8cf8d","sha512":"fd99526679fb90f1cd8e6db51dd879a1173d4d4d20d9aaa4a7a29135373558de54698bfd7559fe8496f591e58ab936d2173370fe7ad864c5561e7d59eaadb056","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6H/:QqRDyWWd/pMjX8jY3ox7F2OUU","tlshash":"54b38c997833d12af5b7045fb1dff038181ca8d96c5acee7f45a850659eff269328220","first_seen":"2023-12-02T03:13:57Z","last_seen":"2026-02-12T12:21:12.485741Z","times_seen":3,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/css/animationdbc2.css?ver=2.2.6","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/css/animationdbc2.css?ver=2.2.6 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:14 GMT\r\netag: \"1167c-66ba39fe-c72364dae226c4d6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3997\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGw5XFTnK2WiofKusqMJqail0y%2FitVaCfFG8HSzMz%2Bo4cqUcIrjmsh7wdr75lRlXi9uB5rt5MQ2umHTF41JrPGIZfSv%2FRwMMkxYnHDNfZVQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7df3acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71292,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"07250d3980bb58ba190eb0495a6699c8","sha1":"8d2820bcd4a35ccbff24e71a44d9e6d5c54c1c25","sha256":"65984ed028c8220f893d5532579dced7d1b20911edaf53364c93777c9902d1a1","sha512":"b5572fb0c7903a6a8c4d9c274195175045c2c52468b603c412a73af56705b87ea0374dc18bfa18e256765aaa742ae3f21e0b1efd75a9b9ff8026346bef401475","ssdeep":"384:xzHuaubH2fqftulucfwf7l3lcGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVrib:ZHuauqfqftulucfwfe+1fHf7SpS/fjfp","tlshash":"97632f6d2991118453234a6d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-05T23:01:44Z","last_seen":"2026-07-26T14:29:40.802463Z","times_seen":1932,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/header-footer-elementor/inc/js/frontend635b.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/js/frontend635b.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"6c66-66ba3a1c-ac307e99ca980397;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3645\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SwFpHcd5iGXq%2F9OL3blgJ%2BAyZhA7ITZk%2BGbdAYzxjmji4vCVba5XnwXridmmHj5ATLJA0aefytMhdRVWldoP7cbhjarSb3LSPS9Fd9bh3A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe2facd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27750,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cf77399f3133c7aabd02adffdb64f9ca","sha1":"28e9739756898a8410e2d818832bf761714e23ba","sha256":"7df5bb108fb45ffd903b10fa15e2c7b9b869898bce89408d06609b8e2441bd30","sha512":"437a75b624486947dc06e17920baf71efeec43e305326733b12b43b23c43b49ec6cf5876e8715bc227c348d72798a496d38a22ea71ed93f8f799410b3894d5d3","ssdeep":"192:ejUnO66U3rNBqnnahhnPnlLoOaTWsIsujsTrA1QUvxe6dTkLLxJEvkerJ8OlXgRB:t0ixvlLNbU2TgxdWNQvQo+iT","tlshash":"72c231c577ae1033507f3a8ea517e0ac732f84b2c51514adfeb885ad29e490833e6d76","first_seen":"2023-05-12T14:34:21Z","last_seen":"2026-07-26T15:38:26.376527Z","times_seen":1899,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/js/frontend.minb73d.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.minb73d.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"9f35-66ba3a1e-9caf6aabd5f988b6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 11909\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pd5Oaok4TCa2eGJcxMk8NRL01yn1G8wdxYnIe4PiuPGulM6gVO6FLWYml8sb4CMBn0RnKqJlWC%2FsgeyqvddHbOYVPN5q%2F9b4QRH8m9dg1vc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c1e40acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40757,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40717)","md5":"fa5717c4d6d60aae1e9108dea4fb0c8c","sha1":"906a16a0d563857000d6a9a1af6af9c9f5952b4a","sha256":"f82b0b5f5f4aea8e8324eb89e2e0a2e6300d92ac70eda9bdd72a50091ba55fc0","sha512":"c2ed62381f483c880186b1eb72ae9e91ad71e4bf05ad8447629f6599bd4942d34172d615c997aef59abf9e155fedfefae7a9711d702a68c044be559557257c43","ssdeep":"768:rRPa/PLR8evxJMEa/sTZG8fVen5qiQ9vEAzBc5GMTSebsvHydWuUEvS75ikdXLfB:rRP4LR8QxJMEaufVlzEAzBc5fTSebsvf","tlshash":"bd0308563192d4aa419f48f7f4330219b3621dd9b406b59ef2bd6ce2a4b1e8333767b0","first_seen":"2026-02-12T11:06:15.953009Z","last_seen":"2026-02-12T12:21:12.487253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/jquery.bootstrap-touchspin.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/jquery.bootstrap-touchspin.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"2343-66bd12ad-37526790058d1f03;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2263\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VBLBIwouVrw8Rl1sjAUDSVOcGMXVMthNVRy0n5AFQQ3wyy6QUVcG%2FldxW34Ij9rP2r9zZRWqUrh4Ot4ga3rg5jDVwTKOz5LX1lA9ovo4HM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e47acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9027,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9027), with no line terminators","md5":"ba98995ae0063f0769c6c5f7d25f429a","sha1":"4dd7da3d499c7efbee03de4b7b032d8e4f7a0591","sha256":"163384dad5ade7c66d88cb020f76fff2b87491a778adda12a246f9cfc67a36ee","sha512":"526527ad75c666633841ab9d18d1a7f7274fe59b2a320e2a6c9272b3f47eba203eb93ec89991490c39e135f90a0b64beb972c7bbcd6195e1d8a623387aad7406","ssdeep":"192:d0avfAViRsjjMMypllVBnjRUsRlJGgjVqxZ9ohx:d/f+iREjMMyrXBnj2sRv9VAPohx","tlshash":"e5122d65314a36a2169361f9429b4b0277238849e8bb2190517f89e53ffdf3d2237a1b","first_seen":"2023-03-07T12:23:16Z","last_seen":"2026-07-22T10:19:49.591929Z","times_seen":227,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 06:00:44 GMT\r\nexpires: Sat, 06 Feb 2027 06:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541197\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-27T02:55:00.25042Z","times_seen":61810,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":24,"dns":1,"connect":12,"send":0,"wait":39,"receive":7,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/client-3.jpg","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/client-3.jpg HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"95cf-66ba3a0c-39f5e632026e9158;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 38351\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3V6EtjFU6I0b77h8jwkQwMuFmiIaCPMtPI%2BjiU2%2FN37cmsCzrb%2F1KHPU6BOHGAfd4UbUDZItaqM7g8jPQh%2FayWDnb33MaRTlOWXVN6icMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa0af14acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":38351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 200x200, components 3","md5":"0b0594273fe1b0c138afaec55d626365","sha1":"42fbe28cd4401ff7905592ef8aed7e257de18c41","sha256":"ae7da33946d2beb7729ca295821719219230adec8515594ddc697edb228df028","sha512":"f4af1f08a8c8337f2710e438a7c9dbf02486ab24f9ce916d4b21305bb1ab5c64a88562608bfc67880fc3ab870e591a3b5f5c7b021da4e228201f5459303e456d","ssdeep":"768:efjnuv39PX16ZmtIET7ST7XNzGU4jtku6pzL+iePBObysNY7z:QjK3lXamtHOoPt34iObysNYf","tlshash":"dc03f2a4bb4f1c2ae6535488548d87de950bff4c396f36812ce845636c1b3279c1d19f","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-07-26T06:29:09.09397Z","times_seen":1372,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-12T12:20:38.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: CameFrom=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; secure\nPHPSESSID=2d2d623e961883ae97fc519eb5ca88b8; path=/; domain=sagrolimited.ltd; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZYwpmSAlFPVVe06Iq6rcthTR3mXCMVrdXaMMFnwgkv20lfTgcpZORnPEoYzwjdHXnKIYJoksOcEHCHSSocxFp0soYgNs4Cl1FfxvzjMYBE%3D\"}]}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ccc0a8c7fac8a18-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.3.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Stellar.js","description":"Stellar.js is a JavaScript library and jQuery plugin specifically designed to deliver parallax scrolling effects for web pages.","website":"https://markdalgleish.com/projects/stellar.js/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Elementor:3.15.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"spin.js","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]}],"data":{"size":217541,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9462)","md5":"7fe935ed36afd3ddc4b18392cf936565","sha1":"9123d2fac612872adfa042e28ed7090fc7af8844","sha256":"7602edc917080a40c544a9b4d2e13822806dcbb1405623ceda5fb51a189e71af","sha512":"5de9ba33531e676d1dcb4cd02fa25a34b5d4c6181b62f13ea2bca79fbb8fbc416078931daa04e946883b2d9d9fc2d1fc2fbdfa10624f588e9e7bddff4321cf91","ssdeep":"3072:2XRtFEPb6lXUi6x7dLOpDDdBmTfO2gNUfgswhg2egpVd9ucmNuWeG0H+ohiLN8OY:P6lXUzx7dLOpDDdAq2yU5U","tlshash":"94241f507da72c3a202f22df9007274ca0c7dfe6e662a6f5b4bf912453b4c953ba3165","first_seen":"2026-02-12T12:21:12.489056Z","last_seen":"2026-02-12T12:21:12.489056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2240,"timings":{"blocked":66,"dns":30,"connect":8,"send":0,"wait":2107,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/jquery.min3088.js?ver=3.7.0","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min3088.js?ver=3.7.0 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:40 GMT\r\netag: \"155ba-66ba3a18-76ea8cd57621b35f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 29712\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dmoepYm%2BcuTTf6INIOIS0R5DuVUwcduJ3Q%2Ba9MzC19BbQgV4mnX6NaGGOLfzswkzpSXoHk0DAleq2fNPgFVtS3f6HPEFRJrOiKh3PtoXeQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bae03acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":87482,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"ff04dd1ef5c67998d8652330c0441689","sha1":"5e6ff5bd5240181a8bdea983837f39ac231dac4d","sha256":"5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164","sha512":"15b29b5a106ebad320aa419675e1d7415b56276ff8ec04b8dcac845630fdcaf3ee7ca7b9d614ea415d3facf065c2608ed62359d3ccae510f5527b2965c8d7b06","ssdeep":"1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKk:/u1zNwcv9qBy1HOg8SMpQ47GKk","tlshash":"6e83f8df77ca702247ab30b9406f550bf276199d684d4400f259d8e9bc78a4a823bf7e","first_seen":"2023-06-13T23:41:38Z","last_seen":"2026-07-26T18:48:33.875237Z","times_seen":32982,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/regenerator-runtime.min8fa4.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/regenerator-runtime.min8fa4.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"19cf-66ba3a1e-77e23ab3738cfee5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2398\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTy%2Bi3AsFFT%2FLIVNmCJkUKbXh5UX83ll6nENEdHYG7Qk2DQ7A%2BKQrYiC7688X8XU47q3A8K2nOUEZYc9TSsFGE%2F2I6A%2FW%2F0tn%2BjVoqyi4%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe36acd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6607), with no line terminators","md5":"9a4f28a615173df36cb84be2b345816e","sha1":"f709263841708d9e40268f24a0072ff4fe811b35","sha256":"6974bfd8fa06b7831f05cb4b25860c851a5ad3f02a6699ebe688987dd7a6ebe6","sha512":"2685373f6522c039f17123683dbc4a2d6eaf572bca72b6019b7fcc9b15b2aa295cacab19b99a1161cc3e317d6bdfc3bdc2bffbfc87d9ea9086da58a013849910","ssdeep":"192:DRcpPh51vRAANNaqDHqpVSTmtqlr4YNkS:DRczPoxG+q8YNP","tlshash":"e3d174cab1c7f41543976a25951f000ae33a695ef8094049eb18ece1fcf544ea32bf79","first_seen":"2023-03-14T07:30:15Z","last_seen":"2026-07-26T19:27:05.261534Z","times_seen":18606,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 06:00:44 GMT\r\nexpires: Sat, 06 Feb 2027 06:00:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 541197\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-07-27T02:55:00.25042Z","times_seen":61810,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.ajM2Shw_wfo.O/am=AABA/d=1/exm=el_conf/ed=1/rs=AN8SPfryCKsqN91J9ksOvYE0MAHN9V2Chw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 108675\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 18:17:04 GMT\r\nexpires: Thu, 11 Feb 2027 18:17:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 10 Feb 2026 00:10:13 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 65018\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":381830,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"7def5c80176b6c25973b1233160ea2d7","sha1":"9b8ed0e76f7c4e8751ac8b6012478d4edfb4cdc7","sha256":"33c1376dd026bfa89865cfac908758bffa349513e593d7231e4967c8d44d8d23","sha512":"bed64a1ff0f6f91daabecddc48a81c06a452f6651aadf14be3a12ee30594f551998b35e0db05b9b6e3bc60a41edc6f29c67dd189b64787a21b38ae221dd478c5","ssdeep":"3072:EhKxvogNR1cPmzRxp673A2zC8VYOf/xZ5YAjuIGTHLdZVVb7Nmoq0hn:+2iky3xSvb7v","tlshash":"4784d9cab266b8939262f8a190bf004bb93ddd57b4484c6cb149d8ee5db08094177f7f","first_seen":"2026-02-11T21:35:34.930944Z","last_seen":"2026-05-26T07:44:40.853401Z","times_seen":638,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":34,"dns":10,"connect":9,"send":0,"wait":11,"receive":27,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/css/bootstrap.min.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/css/bootstrap.min.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"1d978-66bd12ad-2f509b433735faf7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 18273\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECyHC5GYQGJxdoDlBLYVLuABvQM68c3A8oDHnvdXfxEaCe9oIdK1zVlxY2P5FRc43RNKIfBFkVN29slLwxKLZtpnfxQq8%2BSWcP6yi8Rj0ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b4dd6acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":121208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"b93fc020e2c3a13e998ac048cc95fabb","sha1":"50ddbca45711fadad91fc0717a425bd32051270c","sha256":"9bb95018b3208e9898617a2f6542eb50e1d6b3113a4d1c053e27abdd546b7e61","sha512":"d549f9952e188657c130a46eb532d1fef452c86dcce701e3949147e3e31ebe648b26271e49d987808f11ac528099fae0d6f04ad22fd5431aa09053b9bba676f5","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:3w/a1fIuiHlq5mN8lDbNmPbh","tlshash":"47c3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-05-09T01:54:36Z","last_seen":"2026-07-03T05:05:54.665385Z","times_seen":37,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/post-518ec09.css?ver=1693908396","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-518ec09.css?ver=1693908396 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:00 GMT\r\netag: \"2e92-66ba39f0-59af016259a3c3e8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1035\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aus9NkpjC5LB7Dxq6RAYqicksDNpbCUaViW98NeAopjjM5Nm9cBTISe1aSJsqmksH92iSM4R9FvcISo9%2FKe5GnIDLWQqqICbknH9xd%2BCnZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7deeacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3981)","md5":"51803c8ece431a1c90f396bf365761fc","sha1":"a208a651d7cde20c4ee067601beb6333dd343531","sha256":"74fba302577d052c7dcefb5878e6cb929a5696a1c808e3a93bf0ec4a0a89b35e","sha512":"4195534880cf0c11e2790729eb079283c95dd4ea67cefe02b8d9539809cddeee8958036354b8b9b2fcc14d9dff390f93251d2f54157f4cd5ad218727a35b6ae1","ssdeep":"192:R0cscNdKvj+qzNEdEr+CKNDqXIdS84qHody8iidus0+HYu4:Ifa4Il44ohon","tlshash":"b532d0907d83103874af248ba047e6ed22700dd9da3932eaf57a153bfa70e5433d2e95","first_seen":"2026-02-12T11:06:16.041161Z","last_seen":"2026-05-25T23:29:04.334001Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/js/select.mina7da.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/select.mina7da.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"143d-66ba3a1c-355791911b65d121;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1400\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjQMs%2BwsTRiYl1H6qQG9Dp970lfz2JIXC2bHFIkVXzkRXLfWx52acNT9unv0T3ZmW9rR5XW1eEvIYcpivIgpKdepy%2FQ8CHGAsOxYYBSaQfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bee2bacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5181,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5181), with no line terminators","md5":"80517604c8ca0eddea4424255b631120","sha1":"11e64dbae4e8fdbf8420b8e0d4178eb1b527fda0","sha256":"38e7336b4365582370ff81921c7c12b14f22e3850b79ea4dc63d2193419960b7","sha512":"2465bf811123925604ec736ac978ecfb18d23b0f42331b5018de33610d557c3d734c4db388e119d56a7775193b6424e064d44ec02cef0672dfaea15877919239","ssdeep":"96:InYM4TkBw748JDKFDqhbr8OefQMQMAYP+:9lTt748JDKFDqhbtefhQMd+","tlshash":"6db12185b1d1b4f582a781e1452b9005eae2985d4504f8e07bfc87a16fefc1c6276f36","first_seen":"2025-01-06T23:37:30.988234Z","last_seen":"2026-06-29T02:27:16.226327Z","times_seen":15,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/switcher.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/switcher.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"281a-66bd12ad-d8004105b2493522;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1057\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nD0xwfE0JiWOQM2c%2FvpGUx4Wyz55LZ477bnXFwG30cppPhpSi72ztEMvC%2Bui5itIgDnfNAI1f2CL7Rp1GtyvP%2Bv8edJdqazhGGBOWdse9w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c7e5dacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10266,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e1b65ac45d7d892a0dba85877b9249b2","sha1":"271022212e7050fb85669b8a73ffde69e1b6a004","sha256":"a4666e4ab0d520c64a50c33071e97712a68494500afdc93fc0f0b4de5358c51f","sha512":"fa7a70f02fab5f404219c42114fbb383e45ffe265a8a271f5c5d0a792f769bdbcb360e32379d33f57a9ff3831238d6f4bda4f8168600fcf22108b7c65c4792fe","ssdeep":"192:LEriqKRTiEfE6DBdCrbGyeBXagHoiLRB60rFLwTLZLE7pMqT5709pKS4U:LE3K0EdDirTe4gZLG0ZLMLZLE7/Tm91N","tlshash":"43224d3af0ad24efa17b7069f87fb76034ba230af6104948b35d85372bdd20591a751a","first_seen":"2023-03-09T14:28:12Z","last_seen":"2026-06-14T12:35:14.691374Z","times_seen":30,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-regular-400.woff HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min52d5.css?ver=5.15.3\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/x-font-woff\r\nlast-modified: Mon, 12 Aug 2024 16:36:26 GMT\r\netag: \"33dc-66ba3a0a-72d37b5c38b8d836;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13276\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WV4RFBjbdRgNB5dkN3mnhk0u8Muxz%2F4TG0cDdMUsRucuSnq2cFDwGTGsAsPTlJ%2FshEs1uo%2F0fuRUa9SvS1bs%2FiDiHBCz1fT6qHkQhwfzZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa11f39acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13276,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format (Version 2), TrueType, length 13276, version 331.-31261","md5":"f0f8230116992e521526097a28f54066","sha1":"0447c6b10bbf73f97b23dcfd6e6a48510822cb6e","sha256":"8afc6e5e842baab16010c2ce6fcf48ec4ded8e1579a37c1f1bc027e120d04951","sha512":"8d16904f9bff3e0660c960bfc63cfbb649fa656f1e0b24112578da414cdd141bc2ef766612dff765b58497c260e013cbd333c3a75ab2bd2ee861be4c8a538f36","ssdeep":"192:VWXmua5PVVX/EWyrSEnAxzot9ACR1uTa+3u4FcOorKgtwiPDlfjfYbnNPGwmpn:buaGrTAxkt9xKTi4gHtwiRoo5","tlshash":"0452d154054d49cae0086c730246e2a26ff0b4998fb1e9e29c6616836eb2ff40fd7f06","first_seen":"2023-04-05T11:05:25Z","last_seen":"2026-07-27T01:59:30.370461Z","times_seen":52886,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min5829.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"e89-66ba3a1e-40b25d479b77837a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1442\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdKRd0OYpNoW09129xygd3K7BZQZIWgasLem3GitgMPX6dboa%2FrSU6UvDh9fUiIG3dZU1OJz6TmuJm0yZtGhFz%2BgtxzdbF7QTVEU%2FjSamA8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c1e44acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-07-27T00:15:02.167629Z","times_seen":68415,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.Qrtd5lGlzn4.L.F4.O/am=AAgG/d=0/rs=AN8SPfpGDb9uXE6O_rZu88d4u6s743ROmw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3969\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 06 Feb 2026 22:03:43 GMT\r\nexpires: Sat, 06 Feb 2027 22:03:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 15 Oct 2025 01:09:54 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 483418\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20298,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20298), with no line terminators","md5":"183cb263396f0b39789db1ae3f1e1b20","sha1":"502fcf18fa8d865213e282824ab2dfaadb9b8beb","sha256":"6a91c12a6fd1664f4d594040374fda61fe5b02fd3aee5f0c877ccbfc49488ec5","sha512":"ef280b60fa9f4bcb446d952f59a9b89442b6da6737bddc20a8fb38fcf0b4083170c09c008d7d221cf205084c8342da1f995bdd99ce907d70e8e14fc62d827acf","ssdeep":"192:nvqx/EhNINclXsfg0S0Q8CqA3ukLzSJFzvQVMZnUIfIxIRhpTpeuHjPtcmx4v78l:gM78Sr3fWJFzouRUqWQhpTpdHjPtc5G","tlshash":"bf92972047aed01967efa82364d36dff71d444db90523eeaaf5a7352cd821f231ea214","first_seen":"2025-06-11T00:07:11.687997Z","last_seen":"2026-07-26T10:49:23.995329Z","times_seen":37900,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":66,"dns":1,"connect":9,"send":0,"wait":9,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/stellar.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/stellar.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"3135-66bd12ad-e46a054cc5703ef1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3189\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcoseJ3Y6tUih7c4RsSVqEVt1yPh62PMekNq6QQk4kq3quGeCdL6m4ODQhkjc9461WtfFEU6yf%2BQEXhHmQgL7JXHCgY1bHYwIuvusaKmuuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e4eacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12453)","md5":"257c1e014bfdf359297cf2a80440a0ba","sha1":"c0655887944d3b358be98b7d6cd0dcdc975a6b3e","sha256":"1dd583c8ff8eaeeb2f5622845527acbf0e4a875e335b4b706b305590d5a7b456","sha512":"fad1379686aafe3c9bb763c66b199bceb7d77e94581c8fcbd8c135db10dacec15aef111164fa273335dec78b32d579168059edf530320c789875fe8041ea4af9","ssdeep":"192:t7YR5Z60POKYDhAbOWZTqkOhda3WH+TmFHPoMlgI9ru4QA37cmhBQbk:ZYRL60POKaAbOE4QA37cmh9","tlshash":"2c42ef0c72a0242676cf733b916f238d223e74585d1284bc707dadda7b2ae997053e79","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-27T00:46:53.522062Z","times_seen":6419,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /images/branding/googlelogo/1x/googlelogo_color_42x16dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 910\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 14:22:27 GMT\r\nexpires: Thu, 11 Feb 2027 14:22:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nage: 79095\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced","md5":"efa6bb2bfe459bc6f4bdafa3db0383f6","sha1":"52d15ce52fe50643e542c17812de43f4ed1b6ee0","sha256":"6318394f737c66f0e2ccfcd88e3935c6667633a1b95fa29fba2b75431d55eef2","sha512":"e23c04d8997f5c2f92070e09261b7ee50d9df8753f45cf66f604f0874ffa8d99e947c97c528ec02a2c3fbe8e43d840b343a7d0225532980d5da95031216415b7","ssdeep":"","tlshash":"491184a73cd1dc6854a47a87aa91b864ec250f1b91a220981237b42277313444fdc8f7","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-07-27T01:50:25.107087Z","times_seen":53338,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ele-custom-skin/assets/js/ecs9dfc.js?ver=3.1.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ele-custom-skin/assets/js/ecs9dfc.js?ver=3.1.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"11c-66ba3a1a-ed89e2b412871fd6;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 145\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlasFXVl%2BKoxh5Txjn%2BMKg1RQbNEL6FoJ4oRORN5%2BoPWUg%2BFi%2Bgv65%2FI%2B2IMGI05TtPoExCzVGQwzE5BasQ0SqkPWeju%2F39vgsFeH%2FkCozc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bbe07acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":284,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"447712f49ef92d24eda0381882e5f00b","sha1":"b041299af91182f0d7a997769cd20e3a2f7ebef4","sha256":"566d4c5dfefc9c4d867e6bef080917a4273b4228731a8700e81f1763eae3d861","sha512":"2c9892dbeb279ea236973eeee5833a0f7884ae52eb59a835ef0504005a1dd95d818cba5799611e0fcad4071dc2a10facfc9b81187397506092fe0cb7cf82c224","ssdeep":"","tlshash":"f9d05edfa451a221b4f3acd2267f7f0c29f0134f24e4e0402cd880b51ba6a2e4611815","first_seen":"2023-03-07T12:02:49Z","last_seen":"2026-07-26T20:55:49.341691Z","times_seen":5727,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/s3.tradingview.com/external-embedding/embed-widget-stock-heatmap.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-stock-heatmap.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=atIY3WXoQnzDLjhS58Z1JmL1%2FSMaK6D%2B3vnNiGromd%2FnUtSYNGZbowLEDkMvnWNvsnSsdTNmOQZTcbTDSLukBLC8aNpGaVZckqBrs5t9iVs%3D\"}]}\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bce16acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-26T09:56:55.491724Z","times_seen":41263,"resource_available":true,"data":null}},"time_used":702,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":702,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-floating-effects.min9073.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/premium-floating-effects.min9073.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:44 GMT\r\netag: \"22f0-66ba3a1c-bd725933a0b37094;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1994\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lmCFLsKXbV4SfT74aJsYa58fXyOsVvDRFcbx3NzixnBGeN06Qrwn0D2XrjdxZ0p6hTz8s%2FcECyo5UHMiTeFY8OEoGnD3je5WwT6kPP7xfmo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe30acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8944,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8944), with no line terminators","md5":"cd95e280c51af098d22ffb59262dc6dd","sha1":"911e1b12c0428e8fb0a4a02f21616300cf640094","sha256":"4e54c2dd374aa5560978e77cbe5bbcdcb1593eda379f641b92519d4ab1983c18","sha512":"c3ed9bd05d1745b9543c727e902dda6483299f523725b8eab4ffb96144ba7c4195a52f0291bc364b6b265be01b0c4312cfdb08bf2990cbb521074099e7b690f5","ssdeep":"192:/DZo1tJQnI1lqvJfx7EUjdI3phfvJjp2eib6:/DS1tJmI1lq3wDp5vJjp2eO6","tlshash":"5d02f2afb4366154e0f3176791cd0f04ad3539a8b8366d40e25bae0029bddda8f4f784","first_seen":"2023-03-12T07:06:55Z","last_seen":"2026-05-20T16:50:42.061001Z","times_seen":22,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor-pro/assets/js/frontend.min5829.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min5829.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"5f54-66ba3a1e-bfb241009846fb2d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6351\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OawdHGKDf8zrAk2SOTL5zQoL1vcSBI%2BjsQxwmppj6IVlxwG4Ejn1LVLZhrRERbWwQuyf8NDOsaw7zRkbESLkvY7AJMHpHfYNi%2BTIhFfv7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe38acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24404,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24360)","md5":"dd9b5a759ee246cf1f78475d86531a82","sha1":"a02f856652d602b3ef9491c2aefcf9851cbd4d4e","sha256":"5a85ef05aac6b235ced7b52818d4a96d33d8fa778342706baf3d98e3c1335480","sha512":"db6488455b0f42be9a2845da001b3f1376501bbed411beb9867de5c258c0b3d1d04b040ba92428e8f6ff2292c6fc78bccaf9da1455e8fa066842568aff2826af","ssdeep":"384:oTLpcV2m6WYdndptaQ9HuGJswyVO+pYDTWmMo7YtDT6HJiwkkohmvFsN7KOljuOe:oTLyV2m6WYdndptaQ9HuGJswyV/pkTAS","tlshash":"29b2c7063163a87a50cfc157e067420e7b378895740570ed7abc6ceba5b8d9a32eb335","first_seen":"2023-08-10T06:35:24Z","last_seen":"2026-07-24T20:57:44.815803Z","times_seen":1956,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"696dff7f-7b0\"\r\nexpires: Mon, 19 Jan 2026 10:02:39 GMT\r\nlast-modified: Mon, 19 Jan 2026 09:55:11 GMT\r\nx-77-nzt: EwwBuUwJGwH3CAAAAAwBuUwKCQH3AQAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: fdb541238f05b3619ac58d69181b253a\r\nx-77-cache: HIT\r\nx-77-age: 8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8f3d4385bf1f53862c2dc167f484da76","sha1":"d8e9223208068d2ae39a78ec3081efbd7c77b0db","sha256":"04e59729f1fee45b1a187e06a173a6a56c8652ce93fa6e08f7393f99ca2e60c4","sha512":"f34befc3262a83623a0067045ae26514e73ea58736ac4fc008b5a331544b3190dbeb2eaaf3a12913efcd6eeedfd80497ce1c0f58c0ba360dcffbf240849642d9","ssdeep":"","tlshash":"fd415783c4f80d531b9c622bb89449114d50c3c7e88a3d5d36ad8a7f2f4ceb910e6b6d","first_seen":"2026-01-19T10:30:28.095864Z","last_seen":"2026-02-17T07:12:59.724571Z","times_seen":1000,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":20,"connect":7,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/imagesloaded.mineda1.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.mineda1.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"15fd-66ba3a1a-cdfb38d569417937;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1733\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdCW%2BxmdN%2B52RgZNWjzqfh9OPSqRmbBpLeUh0qlJT4yyWo6fypeDHe0Iy0GHbNEqeQ5otG0m7AXBYLZ5PJMKA37Fa1hNlDSbhwKgKf6TTZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bde23acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"3a56752b736635bf69cb069b8818cbfd","sha1":"42e0951fe74bb3f56a30f51291823bcd4a84d76e","sha256":"ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869","sha512":"a255d61de4e6cec2084aae0f027ccc0259039aef62268a27072c8097d348d76bb725ca35563386ceb068387c9ad3ab0e331bd270ba754a38a2a2d33944f305f5","ssdeep":"96:PwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:Pwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"90c122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:02:40Z","last_seen":"2026-07-27T01:00:37.368454Z","times_seen":23300,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/hooks.min2ebd.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min2ebd.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"1213-66ba3a1e-fe2051679fa6767b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1486\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2vOm%2BK0w%2FWo1fOFsSf6MuFjnhm4Hj%2BLC1ln26Nxo114PMAc19TSQeZeF50RIY4cRvfrb2q0mwtiMGY5BItc2b90ktZw7UuhYjFjd5lI3ps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe37acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4627,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4592)","md5":"7bd48eb3bd568033e96caf0fb62e6690","sha1":"b38066999294b99d92d95db5f38bc15707eb1f22","sha256":"7868467c94a5aa0b3f11ef542f45287967f9627b3b5acdc86e47f8f77a126596","sha512":"7fec30cc4223c39d9ee3ccbba8cc66c90467a9987279334be43aae4c251f6c618f6b3ccf223147c79ce6c463c89f0ceb0d0e4e471ad9ab6574ab32af728a535f","ssdeep":"96:+5gEBc27Du/3+ZrURT19KrAgQNSt5s8G07AajURg/o0K:Ulc2Hq3RRB94Qkt2WAeg0K","tlshash":"dca113c474c3b420e3737063a07f5456b27e9ae5782c8481d25c94d57d73a8ed077aad","first_seen":"2023-08-08T23:25:56Z","last_seen":"2026-07-26T18:48:33.871165Z","times_seen":22826,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min9e0b.css?ver=5.15.1","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min9e0b.css?ver=5.15.1 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:12 GMT\r\netag: \"e7a4-66ba39fc-1f7c504befb51770;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 12370\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FHp2jMu9s%2FzDfZ38FvhUF61xTBcvEB5sBeUsQzzmP%2BprclrT%2B2MzULCpUGuALeWdNKMpTmpBSmErjHh6LtZAT1zZMiR9JUZikjkobVXE33U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b7df0acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59110), with CRLF line terminators","md5":"d6efa362a4007df0a562280ac1b8ba1d","sha1":"eb0fd9dd977d10c4315c5a3c5976a2b63fa2cce4","sha256":"78332e7c5357b00356d63fbf8dfeebd5fd4d28d309894e585129738ce08b5619","sha512":"ea8871bc843bf4c0ee77ef5ca18db04d8726d6ccd80bb8c12cc3fb34d333d46ca85dd2e97264a97ecf16d7957c31c8623e98f5eb7b0df3aa1f9b02cd9fdcbe5e","ssdeep":"768:QYh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzS:QY0PxXE4YXJgndFTfy9lt52","tlshash":"ab43fbb8e54c01c9b731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2026-01-22T04:26:35.98251Z","last_seen":"2026-02-12T12:21:12.505583Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min38d6.css?ver=5.8.7","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min38d6.css?ver=5.8.7 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:18 GMT\r\netag: \"d73-66ba3a02-fb44874d06acd42a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 724\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9cXoM7skIA2JUlFQ1c4LtSrsDEz9yuzXOpgCchOWd0wQUHCsL5pioipPSzsxC6cFfazzqbVnhYXs7Q5dWBA4UfYFW4ih98R8z3SApmIXAN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b8df8acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3442)","md5":"ac793cfd8de80e4763d4f9ded0d96508","sha1":"49cde1c37571cba1f76f9d038b4670e7f023a3b9","sha256":"3e584003b5c6df9bc2854b2775e527ef7240f3d1cae4047e9aa504cdfbc109f9","sha512":"198ae98dc93e728a0d4dc680cbbdcb6da804b7c0949b90b35bdccf6f43b8ed08c6a7960e7f3be96264592830fd423260d897241eb80a411a5bfb961a8f986306","ssdeep":"","tlshash":"83619d17276973c42073d93552deaf49b332e52293471dc9f5a27638c7ca9c84a32acc","first_seen":"2023-07-06T18:21:56Z","last_seen":"2026-07-26T18:35:44.117116Z","times_seen":3497,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/kelz-4.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/kelz-4.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:30 GMT\r\netag: \"1598-66ba3a0e-cdb3d123a07933e1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 5528\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXgptUVn9AKz%2FolOf6O2Aj2RPiDY%2Fo1T%2FDs5Bl0pn0MXcscPrsEsu5YSoVAJJXZ5V3OeN0Fgs1yVW%2BYrVcxFgonz7UGxuwCVlzsIq8ufWRo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0a9bce0cacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 69, 8-bit/color RGBA, non-interlaced","md5":"2f6c07ac6177ab1332b4179a0e4c1a9c","sha1":"f2d2a10d813aaa0b31581e017cf8ac48faf9f8fd","sha256":"2edaf8ec452000d6994a2b6bfe4ff3fc0763215d2849407a71a178abbee8b8df","sha512":"c92488556601d702c05f562e0c9b0b34146d8dd8f8586cf51fc1d2c3af92dff960b04d94f9897bdd31564c05d549a6eb420c06bc8a9d89cb6f4d1db47b1e57a9","ssdeep":"96:pvknmWprA2Z/DHCDNtHVR+Z/qkvrjN/xQuBufd/vDPInZEUDFOVHcD2EO7e2i6nE:pvknvinD+PRBufd/vDPInZE60SD2de2K","tlshash":"35b12bc8dda0ac10d249ae941ce471a72eb64b50d9a1e4d0fda5fac261511f9d94e1d0","first_seen":"2025-03-19T10:36:51.090865Z","last_seen":"2026-07-12T17:24:07.096719Z","times_seen":30,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/counterup.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/counterup.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"42b-66bd12ad-54d66c9a50926e15;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 496\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fth4NoDEbw3JMeFX83wXC3IuyQn3GARVM32nDsZ5NVrCxflxwB%2Fzpu%2Bdb5AGcZnk2YjZlPnBecPXlGNaHBmvmdxC1dMhGbn39ucVjmOBVxM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e4bacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (917)","md5":"ef36cca760bf1cd76cfcd0e4dc10cef1","sha1":"ef38469f60d58850fe55c4de2ec7e289a2415d71","sha256":"26d40f8ffdf1b9bf286a954c6888a33cda0cd031e802d821fe0c0562e379ae29","sha512":"77c175276932891a30041ffcfe9016b2a525d304843a41b92804e4555e2c95f6e5abd55143a3320d95715a5dad59dfa63e1b826e94c1e0ceee53fc7d165810f5","ssdeep":"","tlshash":"37118cb93a0a298daa80e459f1efb0989176bdbc0c80884b91c558401fa5abc3b5b730","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T01:18:38.532235Z","times_seen":12671,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.getbutton.io/widget/bundle.js","fqdn":"static.getbutton.io","domain":"getbutton.io","tld":"io"},"ip":{"addr":"172.67.74.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getbutton.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:57:34 GMT","end":"Sat, 21 Mar 2026 00:57:21 GMT"},"fingerprint":{"sha1":"2F:33:3A:58:2C:0D:D2:E0:A3:35:99:D0:60:FD:56:1D:AD:88:F5:4C","sha256":"CD:EE:0C:2B:45:7D:D2:FC:B5:19:9F:5E:16:DD:EE:8D:7C:CA:97:E5:BF:F1:C7:F1:A3:3C:55:3B:9D:BF:47:94"}}},"request":{"raw":"GET /widget/bundle.js HTTP/1.1\r\nHost: static.getbutton.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://sagrolimited.ltd/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 06:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68c7ad0e-6bea3\"\r\nexpires: Thu, 12 Feb 2026 14:32:30 GMT\r\ncache-control: max-age=14400\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 2891\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9DVtJ8MopGwaKyNs9bk7TmQPWxxNzdCTacVCGtFIst42Rx08iUKeCcs0DwZaHQsfrJYnL2GymNrxAcjMr0RWWr%2FQUykmywDbDm%2B5QaB17R8rA%3D%3D\"}]}\r\ncf-ray: 9ccc0aa2fadb4435-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442019,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475)","md5":"5b50120b4395b8e757e4857c24421c50","sha1":"1dd7267d8437564b5f7efe19f553e33a3548d37d","sha256":"9f31455e280dfe62030657efe10be565b34716a3655d27869621e2c65e50c049","sha512":"1cf4fd1eb8187b36d47d10a0fa5a4b6fb61e2823598ca3f8ec7715f577c346b775807efd6c6fe5f8f42e3b06f621bcd985e681a5c544f0000f70af65ce87c10a","ssdeep":"6144:HSFryQhY3HpsS+U6qAcXha0oPKiqLVwoNbsR5LoQGnEI:xQhY3JsS+U6qASoPKiq+oNbsRFoQGnEI","tlshash":"fd946de93290f0a653b352b700af240bf379641a785d8860a215ecdcf8b94ed513bf6d","first_seen":"2025-07-22T21:56:55.389579Z","last_seen":"2026-02-13T05:13:50.572376Z","times_seen":3232,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:19 GMT","end":"Mon, 13 Apr 2026 08:38:18 GMT"},"fingerprint":{"sha1":"F1:9D:07:D0:16:5F:B5:2B:B0:D8:35:9E:A2:61:22:81:10:E3:EA:4B","sha256":"58:9C:D2:99:D3:49:E4:DE:C4:A1:20:FF:EC:1F:07:F8:A1:86:34:E5:25:AA:24:F3:5D:BC:11:96:1E:52:88:C8"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 11 Feb 2026 20:00:21 GMT\r\nexpires: Thu, 11 Feb 2027 20:00:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 58820\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-27T02:51:49.658716Z","times_seen":946688,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":25,"dns":1,"connect":10,"send":0,"wait":14,"receive":19,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor635b.css?ver=1.6.15","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor635b.css?ver=1.6.15 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:35:44 GMT\r\netag: \"308-66ba39e0-371bcbe6ea7b4e6f;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 259\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktmcSnBQ75CfjQ%2BScUMFvoAv02kI2%2BEXHQUKqnqKm5n1NYMxlVgtgix%2BDrJGMj3zuTfhKva3uyFAXuMOgQCW5hoYKZ78lNSmae%2Fw%2BDGU3wU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b5dddacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-07-27T00:23:35.144106Z","times_seen":39481,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min52d5.css?ver=5.15.3 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:24 GMT\r\netag: \"28d-66ba3a08-658af1594327b348;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 279\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EY%2Fmd%2FWbShhGKC1%2BCRIEvwuC%2BYLh25d1zIWPOM06U1HMsu%2Bqbz9mOcMoPVh75%2FfaZv8YMjuVUOyQQ9EYOwVOLYF4oaCbx6KbFD1DVcoplqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9badffacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (467)","md5":"988d32895095de3d425f1b24dc1bfcf6","sha1":"0b9fe002899a4a80739c401aeaf0c8ca743b73ce","sha256":"33d25d387077be7d982a0b005f5da958016c5866db3e333afbdffc6a18c01bd4","sha512":"d39f8b6f48e9c1c5e695bef318ee262f3af72a39abf646bbc1d332ad681967a25334161d4a9e2691258761a98e4a54af77a5ae9a122a8963f333a1002542388a","ssdeep":"","tlshash":"79f0492d0642294141810f0038dafa1dee46f0a87c582f32a22adc3d8cf9e5f2179f09","first_seen":"2026-02-12T11:06:15.959098Z","last_seen":"2026-04-20T04:26:15.086478Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:36:59 GMT","end":"Mon, 13 Apr 2026 08:36:58 GMT"},"fingerprint":{"sha1":"17:F1:21:AF:29:27:FD:80:6E:A3:7E:FB:1A:93:24:56:A0:37:E5:9B","sha256":"D0:96:28:C5:B0:56:0B:27:84:97:37:B2:78:5C:2B:FB:8D:40:93:2F:58:86:E1:F0:89:89:F4:92:5E:EA:A5:BE"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":81657,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2082)","md5":"4fd9cfbb758f4edd48cf14d7d0df8b7e","sha1":"78f3067e0a4211c17aeb3c5b006968511579fb95","sha256":"086358f6da42f61566f3aaac2c9d9c05a91dd47183794aa0dd883d136f4ae65e","sha512":"f06ab9f7421ecd00fede4f214daa84d9c876fcac0aadb82d5966f78b274309a42f4e91ff54607311b63433f50aa198f858e02c7a5bdc7af503ffbd56842bd844","ssdeep":"1536:X/v4TufUB2+e9JCTUHdBjHvK4e7yrk3N4eOdDNeziAwNWnr:Xf+e9J3jHvK4UEgziYr","tlshash":"6c83b7ccb6a671658263f5b5413f000eb23f59a9f8084dacb288d8e1adf4949417bf7d","first_seen":"2026-02-12T12:21:12.511519Z","last_seen":"2026-02-12T12:59:57.880202Z","times_seen":3,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":307,"dns":25,"connect":26,"send":0,"wait":46,"receive":0,"ssl":386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/post-490740a.css","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-490740a.css HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"1475-66ba3a0c-17075a06afadf974;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 718\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSMuCsYRLv7IxBZdywDWN0%2FKyo%2FLbWsvcng2HNYgeLeAa1svAzZAEUoQtda1GPhWRi8gcrWak8EjHxfYHqJRJSvkoZQFlk9%2FAkmz5rje%2BxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9bce18acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5237,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1654)","md5":"df939a664684a37a726527a601793cd3","sha1":"1b34e7cf83f61f376f47c3842a2ecb0b1bf54127","sha256":"1fc96381a61e98a3b5a87542ffff2e699e9967a243b90fc87578fb35066b3838","sha512":"9b53f585590e70c12c45da8b3b491484ec8d87c52970168b3afaa6b10b3fe6b6494d1c5a3a6c888a400d10aec0d7f7bb6cc192c8393cadf979b0439edc96ae0b","ssdeep":"48:yMOtOJOjX5OjQvOjxtO6OtLOPODFO6OFNOIOyOfOAGO6OfOlO9OrORUOqOdOoOcV:yVXeQ4xSJci3lfynlVdI1mRd8voTIdFH","tlshash":"ebb1d1c27c43153ce49f201ba047a39d26622cd59a3e35eefb74150bf8b0e9473d195a","first_seen":"2026-02-12T11:06:16.015882Z","last_seen":"2026-02-12T12:21:12.513098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/dist/vendor/wp-polyfill.min2c7c.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min2c7c.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"3f12-66ba3a1e-856e7ea839ab9ed4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5718\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HseTZ4pc14xeJEclzh7R2eZQ8LSd0upnEm3yQkZx9AzwPvLlGWK1v9Ta7tUDPedDMspxF8Ty5MR22EZONp10pgeiaiiJ6ZGuWrmnSO6aFO4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bfe35acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16142), with no line terminators","md5":"94dfdbe80f36b3be63ce74ff1135b996","sha1":"5e05077d99e736af42b2da70e428e7f7df556dd4","sha256":"4c0ced2cb3830d045cdd74f745fd4d6dcb082d8edd3a9fe46e39295e30cb8032","sha512":"628169b65f39a18f13facac9e3375eb59dbcac67cdaa7612562165d94aec1fda6cff93b1f228155c317f82a544390948f7243df330972851b49f6a45781aa2d2","ssdeep":"384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm","tlshash":"bb72748afd81b0da03f360b5012f440ff2ba9989b59e95d0e359d5e46c7d84e9027f1e","first_seen":"2023-07-22T18:30:44Z","last_seen":"2026-07-26T18:48:33.830397Z","times_seen":12197,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/2023/08/hero-shape-5-1.png","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/hero-shape-5-1.png HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 12 Aug 2024 16:36:28 GMT\r\netag: \"4b4-66ba3a0c-b4190e70122025cc;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1204\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4494\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOrIP20BydnIFwr5XgqivyJK6fRzX4UiOvBHFbwLdB5etkDZC6qHJ%2BQjocfIgf7cO7ufNxXch%2F36tWM0FFrY4M8LM%2BOs2llbiVuHpA9kwSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ccc0aa09f11acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit colormap, non-interlaced","md5":"15cdeabd4f3cd0386e7557ab0c2c2fbd","sha1":"b85c817311204185520d819bfba5b2d68aaae19f","sha256":"817769cfe84fed4edce7451771448f921384e09f73364ea105924ca25a01c305","sha512":"86561281d81b263b73a1f94295f6e37380d074e05bd46cdb6bc7bbb907c09a45d52251e30d42dc64ddda2b4ea0955c0a0c155a803bfc6b18726997e5eeb825de","ssdeep":"","tlshash":"1421ba897809bf1ac6df763d4640b878cd4d78149f00c6060fc55a6c0e96bdd37d4516","first_seen":"2023-05-19T22:55:22Z","last_seen":"2026-07-26T06:29:09.08675Z","times_seen":1338,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/uploads/elementor/css/post-8b24a.css?ver=1699467229","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:40.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8b24a.css?ver=1699467229 HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 12 Aug 2024 16:36:00 GMT\r\netag: \"217d6-66ba39f0-adb9e120a4b4b744;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6820\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pcK%2Ba9IpM2LKUbv6A%2FKrtvsRQ75f9kTJWfg5PmlbPSbzyqkVavxvymq0bsVhJX%2BLX5AYb1ZLV84wpQ5nUdQnEy8oYWAvn%2BhZf1L9BH6oo%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ccc0a9b6de8acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":137174,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"10ce0543bef57612916c6cd53a4da400","sha1":"74631b2bd94c97262e5618fb48c1811557c9c6bf","sha256":"fec6baa163746f21efc001d14db6513e1c46d68f7f2b64e47c0dd2c358dbe424","sha512":"0935c5aace2eb9bd268c632b2218e9fdb7a2b5a1d784231ee604fcd687b318763f662ceb7972e5a75d36c4e4f06660291e92a7bad6dde72b02fd331e2b643fe4","ssdeep":"3072:bFHyeYzj5Il79sWEnXogQuF1kSil9vZpLeJD9xTmfRUPB1H82xHiYP5R73WkX2Q9:bFHyeYzj5Il79sWEnXogQuF1kSil9vZW","tlshash":"09d347547d435128712f694b6053b6cc70344ccee6b9b6e6f8316863f0b6ce5b3e1aa2","first_seen":"2026-02-12T11:06:16.081062Z","last_seen":"2026-02-12T12:21:12.517591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/waypoints-sticky.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/waypoints-sticky.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"4ec-66bd12ad-d7acc053a63e155a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 514\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qRrf2zrF0NYrEzOWptwtEDYSgrICEVuWpjDAGGUJmQoWiN4ACHVK5F%2Fhx%2FsIf6OCSjQxKHSRKbIL5qn4A1QK%2FXu4NjE24ui%2Bj7nkvuI8ucY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e4cacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1057)","md5":"612415a12227cbfdef490d3abe75df7c","sha1":"1104fd74f8c54c0ef714743ff85b7a8e30058cd2","sha256":"27d05c15a13935412bdc276aa166e523b8ce8327e7761de4af653039ffc8e690","sha512":"c5112c60ae8107af8fd12cd6d9cb559f018c64616aa20cab1e279cc8c5e8431d0aeebbdd0eb3da0e5a6bed061ef5bd5a3ca8f602f9f4f75525c67eba8f11cb23","ssdeep":"","tlshash":"7a21388e39313216068b95fe24170a4db1b387386887602db0f9dadf5765c0966be634","first_seen":"2023-03-07T12:23:16Z","last_seen":"2026-07-19T01:59:52.492232Z","times_seen":185,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 12 Feb 2026 13:08:41 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cNsTt3TyzsGwLRHfbjbK%2F0SGJX0FkAtZjeNI5WM9XMyve9oBx86v%2BQGG1yw2yTuH%2B95LIKgHdIAyOjYkhZ%2BTvkGFBHXKrTd5dsID8UaVjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\ncf-ray: 9ccc0aa0af18acd4-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T02:50:39.701747Z","times_seen":407514,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/temp/js/bootstrap-select.min.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /temp/js/bootstrap-select.min.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 14 Aug 2024 20:25:17 GMT\r\netag: \"8263-66bd12ad-9c2ecdbe21a3a171;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 9504\r\ndate: Thu, 12 Feb 2026 12:20:41 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ksj4h12W%2FTLl1LZro7Pu4HZQazvt61zNqREhaweUkLLp%2B5hpRkWKt%2Fe%2BvPkT%2Foucdh4AVH3tpAr114yiFmVrnsVbBMpqg2xs25u0W2tUPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c4e49acd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":33379,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32004)","md5":"08c22600590b700e7d2a6b417c958c19","sha1":"2bcecfc314286c88c409447c4f12073ca82a0390","sha256":"d7d277ad3ded41d89d82daaa750df136efbe19dec4a0ffda83fd31d651e2d316","sha512":"c6f870ff810aa9d8fe03f7442ff7cf676e8a8b78a4b32f37cf3677e86174377e88e6225c35324d8de22a9f65bc66bc5332cf46e45c49c347f0b81b2811191713","ssdeep":"384:7rxmC2Z9Qwmm9Y9yOBUbpClnPriL950M+8Ba/yILxd+tcK0a4DXsXGKjdjyzWzTH:ACtqzfQctV4g2KjlNbnDn0W","tlshash":"bce2b7467211337122ef50d6a06f554ab532fb3de903816871798aea79bcc4470ebf3a","first_seen":"2023-03-07T12:04:16Z","last_seen":"2026-07-25T15:21:22.675569Z","times_seen":1314,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/1607f12be721b1ac68a993cf2fe2bdcad94e4c09.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"3.69.68.147","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:42.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/1607f12be721b1ac68a993cf2fe2bdcad94e4c09.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://sagrolimited.ltd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Feb 2026 12:20:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4ae-Jt95KB4lhLcE8+iQwCNZPCueNIE\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1198,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f18805e17e4c1e8e9e07a360e4a69d2","sha1":"26df79281e2584b704f3e890c023593c2b9e3481","sha256":"6281c13b7e0567048cb6d2f22a76664459e11449f8de893a5852cbd5b5f202f9","sha512":"367418c85fe832ff0d1c662bcc9c08160f6bd9e7fa17da26c06a5620f111a62eee9ab949fb41b9cdad283bca566c40db697449e3c99b7fc3865936d14c504043","ssdeep":"","tlshash":"9421686d4a6822fd5245c7d6c5047a076bbcdcb371043e7eea0d0a4e70db2e5223646b","first_seen":"2025-07-17T12:46:19.667078Z","last_seen":"2026-06-09T14:35:11.404451Z","times_seen":5255,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":100,"dns":15,"connect":21,"send":0,"wait":24,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-content/plugins/ht-mega-for-elementor/assets/js/waypointsdbc2.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-content/plugins/ht-mega-for-elementor/assets/js/waypointsdbc2.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:42 GMT\r\netag: \"2345-66ba3a1a-910a64f639b6429;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2593\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4496\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5WrTtMKSpACElAXHyNCXiFURxZyvKyCDQR%2FRFxftZJi2KAy%2By%2BDKixserOm0qpmSn8F0uVbAUvbW6cVfGlr%2BaZyemQKqJXmQ%2BGABBzvz7e4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9bce1cacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9029,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8864)","md5":"0278360babe563031f14717901af810a","sha1":"f6cf7b7b52fe55227871bbb39aa30bbcf2ae5673","sha256":"52f4920ebcceb1b8a8f1553603c001846c55c14607df4df2eb749a48c875d392","sha512":"7644bcae784abcbe8e61ee3604c748d3557336510c2f88394b98113f62cdf2cf7b2c6748159024209d820d01dc706d4a0d214667e1e1b3e8568f5c57f2a83ba9","ssdeep":"192:mE5WzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mEUoWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"cf126189750134221bdf50fad91f434ab337582ca80680bdb4d8d4ed29f162d676bfba","first_seen":"2023-03-07T01:28:28Z","last_seen":"2026-07-26T14:29:40.780258Z","times_seen":1980,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sagrolimited.ltd/wp-includes/js/jquery/ui/core.min3f14.js","fqdn":"sagrolimited.ltd","domain":"sagrolimited.ltd","tld":"ltd"},"ip":{"addr":"172.67.153.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sagrolimited.ltd/","date":"2026-02-12T12:20:41.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sagrolimited.ltd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 05:04:16 GMT","end":"Thu, 07 May 2026 06:01:15 GMT"},"fingerprint":{"sha1":"40:76:E0:93:F2:12:9B:2E:17:0B:15:B7:67:2B:E8:80:AC:A8:26:8F","sha256":"43:9D:11:68:31:11:A4:07:CC:AA:62:D3:89:45:22:AD:2D:D4:87:33:4F:0F:2C:44:15:58:E1:41:C6:1E:AF:3C"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min3f14.js HTTP/1.1\r\nHost: sagrolimited.ltd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sagrolimited.ltd/\r\nCookie: PHPSESSID=2d2d623e961883ae97fc519eb5ca88b8\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Feb 2026 11:05:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Aug 2024 16:36:46 GMT\r\netag: \"53be-66ba3a1e-5f676b6f7e6fd394;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 6801\r\ndate: Thu, 12 Feb 2026 12:20:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 4495\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3l2o%2F8b6Qa4fU3VJvFzFWwvOVLK2ZdU7JRvohWNMFnkJm5dgArfN4gQli5nwFBwZ652k3Wj2CNfmlOJ60rrzLucLF6nU8eu0Ynoyu9ORoaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ccc0a9c0e3bacd4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21438,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"c4e68a0f3463c0bd3c39eab38815e881","sha1":"0ce58644e9f3c5063a11453ff287c5ec096465a7","sha256":"ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f","sha512":"e871f258f625a5c8e8ec3848242352fd75dcb0f0b580333fce07625a6a2f53e83f22e4dd7492f2d12a880709d540de0bcdd9b335d853fe9cccfc0efccf718bce","ssdeep":"384:Sdw5JLVFVS3dufvQNaHCip8fuxNhBGX0CiS+w/pf2229FkFvd:XS36Z5vkO7kv","tlshash":"66a2d74db2053805c6f7a265503f525fb132e29cb106889df4a8d8ea2c7ee995073f79","first_seen":"2023-04-01T10:26:15Z","last_seen":"2026-07-26T20:38:48.174257Z","times_seen":45471,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-12","alert":"Sinkholed","trigger":"sagrolimited.ltd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}