{"report_id":"fb2a3c87-2448-4aa4-9eaf-7f8bc5bc92dc","version":0,"status":"done","tags":[],"date":"2026-07-12T17:22:33Z","url":{"schema":"https","addr":"baglixa.com.curdeals.com/","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"final":{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"title":"Member Rewards Program - Get Your $750 Promo Code","dom":{"size":9032,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ebc6ea1dcc4829179906616deb3f3120","sha1":"b4456883bd7157e71a1319e3562b7a9d30d92fa6","sha256":"37c5d51fa78477062ccd6366ad01f05a3e19c0b8b04d83b5365ef40e1ae1381c","sha512":"88365167645676030bc24bc30807a22e0c77bb2f58bda9ef171e4a7e50ba405c129d1b8d9e5079864769384112dd628920de76398f0b7e01657155579f81edc9","ssdeep":"192:ClH4hg+z9YquF3z6u3j7tugmEumSkuDjzxuIVuHJ4ufPkfZ:COhg+z9YzRT0BJt/YTvXkh","tlshash":"30121f3055fa107322b280d1a7521f6b7ee4d94bd75e3208b6bd4bb82fdad42dda7009","dom_hash":"domhashf236eca2ed65194b3fa03fe88363d0f0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T17:22:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"baglixa.com.curdeals.com","ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"domain_registered":"2026-03-03","domain_rank":0,"first_seen":"2026-07-12T15:42:49.92766Z","last_seen":"2026-07-12T15:42:49.92766Z","alert_count":0,"request_count":7,"received_data":577089,"sent_data":4095,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/js/script.js","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"59eb4352407e0eee210c67c929b73f43","sha1":"38ded73ac62d034e7a52d7ad0ebea0516bd7b707","sha256":"e4f91556db642fa17335bd1be09153c4562113ef4c25a3de7a91fa135c438101","sha512":"eb3cc41adea54309e8886e632e8adb00dc4042f5b039ca086c071b919a267c2ebfb7a692767acef8a86d3d101744a63beabf8fa8f465d4498fc36b51b81d4147","ssdeep":"","tlshash":"65212120d9a6102105b3fd38978b81a96b2410837c4ff54c789dc309afa57a14cf27cb","size":1256,"data":"","first_seen":"2026-07-12T15:42:55.112279Z","last_seen":"2026-07-12T17:22:34.062298Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[v0] Costco Rewards Program loaded successfully","filename":"https://baglixa.com.curdeals.com/js/script.js","line_number":25,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/css/styles.css","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baglixa.com.curdeals.com/","date":"2026-07-12T17:22:07.977Z","timestamp":1783876927977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baglixa.com.curdeals.com/\r\nCookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 1717\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:22:06 GMT\r\nlast-modified: Sat, 21 Mar 2026 12:29:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9557,"size_decoded":2255,"mime_type":"text/css","magic":"ASCII text","md5":"ec23c25b140a40a62b96cbf7642fd59a","sha1":"5ccc019dd8e2a88ab88166cfb2129d77891a29f1","sha256":"825d373e52865bfc8716d4f6007096a25a1a5028444af281dffb481685a3dad4","sha512":"cf882c003621aa0ea9b861631dbaf0181d1fa498bbca31d5066575c2e006611f48dea38dba824adf5b06592062abdf6f85bcc5f91b4a08c19673b034fd7aef30","ssdeep":"192:AGNQ4Kj1rrfVpMWf9z6ZQGmhma5tluTcm9xc2AS0+t/FWkV26u9R50U9cibg:AT4Q60ma9mA2Vp","tlshash":"9d12cb1819b31554b84b991c27bf47c823a8904b8e0edb6cbedf6254df893b468727cd","first_seen":"2026-07-12T15:42:55.111093Z","last_seen":"2026-07-12T17:22:34.061502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/js/script.js","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baglixa.com.curdeals.com/","date":"2026-07-12T17:22:07.979Z","timestamp":1783876927979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baglixa.com.curdeals.com/\r\nCookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 519\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:22:06 GMT\r\nlast-modified: Sat, 21 Mar 2026 12:31:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1256,"size_decoded":1070,"mime_type":"application/javascript","magic":"ASCII text","md5":"59eb4352407e0eee210c67c929b73f43","sha1":"38ded73ac62d034e7a52d7ad0ebea0516bd7b707","sha256":"e4f91556db642fa17335bd1be09153c4562113ef4c25a3de7a91fa135c438101","sha512":"eb3cc41adea54309e8886e632e8adb00dc4042f5b039ca086c071b919a267c2ebfb7a692767acef8a86d3d101744a63beabf8fa8f465d4498fc36b51b81d4147","ssdeep":"","tlshash":"65212120d9a6102105b3fd38978b81a96b2410837c4ff54c789dc309afa57a14cf27cb","first_seen":"2026-07-12T15:42:55.112279Z","last_seen":"2026-07-12T17:22:34.062298Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/images/coachlogo.png","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baglixa.com.curdeals.com/","date":"2026-07-12T17:22:07.980Z","timestamp":1783876927980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET /images/coachlogo.png HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baglixa.com.curdeals.com/\r\nCookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 541050\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 17:22:06 GMT\r\nlast-modified: Sat, 21 Mar 2026 11:50:50 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":541050,"size_decoded":541546,"mime_type":"image/png","magic":"PNG image data, 1024 x 612, 8-bit/color RGBA, non-interlaced","md5":"93dddbb6479f776f635523f8e777bb86","sha1":"d4b898db60e9339add07702960d26de4054ade07","sha256":"3c0d1651f82f4eae2befd9db5ff1d16fd1a3019bff56143773e7705d5510f531","sha512":"74cc8b490e926c004bea5e3e9429e39f7251738a61caa744aee17c83593b037ae8b268c7d3beb1aea973f932842ee280aec80c1dd118b293afe47b0b0f6168ff","ssdeep":"12288:h1bkNiBXNOsVqzd4dvGVGe2c0K9Px0d1skRXAzI3ih:h9jOs8z2RG3uK9PiykaES","tlshash":"17b423dfa54b83b3c29c4576c64ebc568f77a490b01b1c4da1ed84e65bb27063d18bc2","first_seen":"2026-07-12T15:42:55.093514Z","last_seen":"2026-07-12T17:22:34.063157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/favicon.ico","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baglixa.com.curdeals.com/","date":"2026-07-12T17:22:08.161Z","timestamp":1783876928161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baglixa.com.curdeals.com/\r\nCookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1238,"size_decoded":1675,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-21T23:40:04.141547Z","times_seen":41223,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:22:06.538Z","timestamp":1783876926538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 17:22:05 GMT\r\ncontent-length: 11903\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11903,"size_decoded":12148,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4810)","md5":"56dbabf8244e00aa83a69c9e180ca7ba","sha1":"dd5dd1e18fac25ed357a3f4a5f72c1f204002df3","sha256":"953c8859d34681872311abcd7065867b75ff7595ed326ba0838c882ccbb48a5c","sha512":"9f69715439cf05ed637d5812c2a3fd7f2016c7a094e750b9e6f2ad57b7f47fbaf4261b5bd2926d47b7c278eb1e9082fd22f8c91b208b9bed3af8dcbb1cfe3f7d","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxzMjDkJe4sM0t50nArR7sDZYLC3hwM:sXX+/DV7k/33XsBt+nASYLC3hP","tlshash":"d432094ddea062b0f25703cd27ef295d1224a5c7640cc488f54d6ee0af4e68d4e56fa9","first_seen":"2026-07-12T17:22:34.064522Z","last_seen":"2026-07-12T17:22:34.064522Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":3,"connect":23,"send":0,"wait":45,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856966\u0026pdata=https%253A%252F%252Fbaglixa.com.curdeals.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783876925","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:22:07.885Z","timestamp":1783876927885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9856966\u0026pdata=https%253A%252F%252Fbaglixa.com.curdeals.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783876925 HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baglixa.com.curdeals.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-length: 0\r\nlocation: https://baglixa.com.curdeals.com\r\nset-cookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1; Path=/; Domain=baglixa.com.curdeals.com; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T01:24:25.529128Z","times_seen":17436789,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baglixa.com.curdeals.com/","fqdn":"baglixa.com.curdeals.com","domain":"curdeals.com","tld":"com"},"ip":{"addr":"185.66.141.42","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"Belize","country_code":"BZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T17:22:07.914Z","timestamp":1783876927914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baglixa.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 01:41:40 GMT","end":"Thu, 20 Aug 2026 01:41:39 GMT"},"fingerprint":{"sha1":"0F:2D:5C:5E:31:FE:0B:E0:A9:C1:DF:02:CF:C9:79:FA:E9:C0:7B:98","sha256":"2A:35:E9:FF:85:35:DE:CD:66:CB:A4:29:04:8A:EF:D1:B7:27:C6:AE:BF:10:3D:31:C4:36:A6:7E:BA:20:1C:80"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: baglixa.com.curdeals.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://baglixa.com.curdeals.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=ad175ec8372c116e39fd2c802d9b11d8e587466d.1783880526.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 17:22:06 GMT\r\ncontent-type: text/html\r\ncontent-length: 1764\r\nlast-modified: Tue, 07 Apr 2026 12:55:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9037,"size_decoded":2224,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"683a3e97363436d13ffa84f1d2d43ad1","sha1":"b644d6c2fd36fce87830b55c8c16325833f76ee3","sha256":"84b950b0133b9ade15ef36e486615715e0f907b98357fe193956105bcafbefb3","sha512":"acf561fbd0db0f0436509fc818a68044eeb9a677fdd2835cd6df0a8ec937bb13eab4e7a1f19b92932f4710545f84ff5ebea852710ecfac106cb2962533ad0b19","ssdeep":"192:UlH4hg+C9YquF3z6u3j7tugmEumSkuDjzxuIVuHJ4ufPtUd:UOhg+C9YzRT0BJt/YTvXt4","tlshash":"3e121f3055fa107322b280d1a7521f6b3ee4d94bd75e3248b6bd4bb82fdad42dda7009","first_seen":"2026-07-12T15:42:55.108025Z","last_seen":"2026-07-12T17:22:34.066118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}