{"report_id":"995b52f7-2035-440b-99a9-3b3806727b71","version":0,"status":"done","tags":["microsoft","phishing"],"date":"2026-07-23T00:27:35Z","url":{"schema":"http","addr":"loginlivedrive.com","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":0,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"final":{"url":{"schema":"https","addr":"loginlivedrive.com/","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"title":"Sign in to your Microsoft account","dom":{"size":78098,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (22959)","md5":"4ca5cb22d5a87fba11e37ab22afa8209","sha1":"d7b15d1a4260219888ce1dce8d1c0c3113f5a2e9","sha256":"53014f622d44afbb05182543b12016be87227eae04b6c7b18dbb32da29c5824d","sha512":"ff69aed40125ac5b2a60085e63bd79e6aae0f37bc5dca5fac13a75efa8d8f741cb3f96d51071d04275cc64d295ff0a6c40efa73e79dad850a1cd4aba42b5bf60","ssdeep":"384:wMrxDi2PV31kO92d1HFleaL777777coKRNwN8Y7NmZDGNggNNNNNNNNNNNNNPNNj:bQe7OJ0zjHQyMUQdzw7imgeQYCjMosc5","tlshash":"9d734cbb29a1607c0b1f763ab1da1c142fe5e143a90bae917fcc5838cf4abc06d5d654","dom_hash":"domhash6ed2f05fe48ba92496d579cdd8c68fe4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"loginlivedrive.com","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":0,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-27T00:27:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"summary":[{"fqdn":"loginlivedrive.com","ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-07-23T00:27:35.657223Z","last_seen":"2026-07-23T00:27:35.657223Z","alert_count":125,"request_count":25,"received_data":89675,"sent_data":12847,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"loginlivedrive.com/","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"800a7032e4f6ee92666c07960dac6d8e","sha1":"3ecaf940231c07d9eebb19d6a621930c6ef537c8","sha256":"eff39244fe3e58f2cccfd9d353e3d2db19eb5146919cd7326c00b9c48227ac36","sha512":"0cc19c56939665b0b0dbb7fbe01a59faa9a6146aabc6b81eb9c9a361e1505efb572e41e52f94c27d715019112e2611677cbb2fb761481a55e692c54d62eff866","ssdeep":"","tlshash":"9541ac9a74b224b84b6bb47d63afa505313a21133c4de8483e2c5b045f98d2c69f27e9","size":2313,"data":"","first_seen":"2026-07-23T00:27:39.020925Z","last_seen":"2026-07-23T00:27:39.020925Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"loginlivedrive.com/","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"introduction_type":"scriptElement","is_inline":true,"md5":"04944954171752c5ed1ed1a419e48be8","sha1":"3b50e2b3c976d76d9b13a7b242dbe141aafc5dd8","sha256":"1a648bfc606fd3ae29bc12ee3a13646578b0477a1b5b1b4ede0f97cbddecacfb","sha512":"a616f10d15685c4877ec9e5954c127458318c1cac8de1c1b1e0d470a61a39bf9994239db4ecbc61ce3bb6e430552503da7022b0e57db1eb20443366c397e2bae","ssdeep":"","tlshash":"2af0a2ce70b5615d5e4fe0385abf900f201351031c5edd18bd4c76103fd8b3a4962ad9","size":637,"data":"","first_seen":"2026-07-23T00:27:39.02185Z","last_seen":"2026-07-23T00:27:39.02185Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"loginlivedrive.com/","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-23T00:27:08.316Z","timestamp":1784766428316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:08 GMT\r\netag: W/\"1436d-YXouZgmG0wurhxu6GurUvLqx6Yg\"\r\nserver: Caddy\r\nset-cookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ; Path=/; HttpOnly\r\nx-powered-by: Express\r\ncontent-length: 82797\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":82797,"size_decoded":83171,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (22937), with CRLF line terminators","md5":"c9e127bbe783fdc451c63add254d8f79","sha1":"617a2e660986d30bab871bba1aead4bcbab1e988","sha256":"ad21c658796d17204be3ec2011d11a902e63492552d7dce1014695348a12ea4d","sha512":"e79af8929bc0474ee92ef0f4e32c451693e00af2e3a3ba1177a09f2abc6b0f651a9da514ff9be721e66a8e27a260ee37a5fe5ad10d6f2e9cad989e23e73ff280","ssdeep":"384:PFDU1fvmenZZaikD9OVCqPJp7jT+IvvvvvvYjxYwhw/8AawlcOfwbbwwwwwwwwwu:9u1f/rJzdiHQyMUQdza7TwgeQYQ7s/U","tlshash":"f9831cbb290260bc4b3e7736f9921c08efd69163a50792913fdc69388f757c0a91de58","first_seen":"2026-07-23T00:27:39.019374Z","last_seen":"2026-07-23T00:27:39.019374Z","times_seen":1,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":75,"connect":90,"send":0,"wait":100,"receive":131,"ssl":87},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:11.972Z","timestamp":1784766431972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:12 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:15.028Z","timestamp":1784766435028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:15 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:17.083Z","timestamp":1784766437083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:17 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:31.251Z","timestamp":1784766451251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:31 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:20.249Z","timestamp":1784766440249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:20 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:27.250Z","timestamp":1784766447250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:27 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:14.028Z","timestamp":1784766434028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:14 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:33.250Z","timestamp":1784766453250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:33 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:28.250Z","timestamp":1784766448250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:28 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:21.249Z","timestamp":1784766441249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:21 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:13.028Z","timestamp":1784766433028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:13 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:18.178Z","timestamp":1784766438178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:18 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:19.178Z","timestamp":1784766439178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:19 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:30.250Z","timestamp":1784766450250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:30 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:16.028Z","timestamp":1784766436028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:16 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:25.250Z","timestamp":1784766445250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:25 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:29.250Z","timestamp":1784766449250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:29 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:24.250Z","timestamp":1784766444250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:24 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:32.251Z","timestamp":1784766452251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:32 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:09.884Z","timestamp":1784766429884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:09 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:10.884Z","timestamp":1784766430884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:10 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:22.250Z","timestamp":1784766442250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:22 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:23.250Z","timestamp":1784766443250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:23 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"loginlivedrive.com/user/check-redirect","fqdn":"loginlivedrive.com","domain":"loginlivedrive.com","tld":"com"},"ip":{"addr":"102.220.160.83","port":443,"asn":328528,"as":"NetIT-Solutions","country":"Nigeria","country_code":"NG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://loginlivedrive.com/","date":"2026-07-23T00:27:26.250Z","timestamp":1784766446250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"loginlivedrive.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 18:13:02 GMT","end":"Tue, 20 Oct 2026 18:13:01 GMT"},"fingerprint":{"sha1":"58:A2:2F:E5:1F:93:01:46:64:93:F8:64:55:3C:96:05:01:24:C9:86","sha256":"69:37:DE:DE:2E:17:AD:FA:DA:2B:96:AA:ED:41:C1:62:2E:CC:15:9F:6B:AD:28:FF:FB:CC:A0:DE:80:B0:E0:17"}}},"request":{"raw":"GET /user/check-redirect HTTP/1.1\r\nHost: loginlivedrive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AKBnU8WSvnxmE4ZF9Q9QXqD-jbZg7-82J.SwWxMGCgwBfIhkHrgdw2gHVw6JJId8QXXkbwqpx7wrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Thu, 23 Jul 2026 00:27:26 GMT\r\netag: W/\"14-KQBOzsPQFclYtlJE18g8YCXeack\"\r\nserver: Caddy\r\nx-powered-by: Express\r\ncontent-length: 20\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":20,"size_decoded":271,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9056a80bcafa761426ae826a7ae01d14","sha1":"29004ecec3d015c958b65244d7c83c6025de69c9","sha256":"f28b9c0f4b39c8845f3ce8fee7f071d00f8ef161ef54e4bb6af46351fd2e162a","sha512":"76c58ed828752dd339c6a84c7ed1b505087e1f7f4593058ab30e7468e59a32dc2799df8c00e1bd705d659ea26acfcd1b82c6e8e676167d356ba955d86eb801e8","ssdeep":"","tlshash":"7a700000a0ac2020200e80c800088800030a0802a02c0c28c0080b080a882220020802","first_seen":"2023-04-26T21:10:33Z","last_seen":"2026-07-23T00:27:39.020335Z","times_seen":107,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-23","alert":"Phishing Block","trigger":"loginlivedrive.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-23","alert":"Sinkholed","trigger":"loginlivedrive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}}]}