{"report_id":"e73ae78e-e8fc-4e6a-afb9-ea589a3c4322","version":0,"status":"done","tags":[],"date":"2026-07-20T13:12:42Z","url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"title":"Новый руководитель инвестиционного направления сделал важное обращение к гражданам.","dom":{"size":99054,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1134)","md5":"20157cfe2711dda51357333f9da39465","sha1":"db3d22c66b7d9d26ab3d8f0e78f1581f086acd9c","sha256":"d17074e88a31b3a1052ddb37e8279bcff0f432ac0c7681aa0a8168367ad75011","sha512":"1f18a6c481773ddfdaf5696d78c6b9e6ad33d16fc5c2fb4ff9b9d89c2cae6fd489a4a272caedb386c56e43ba5f64c5c5a1ffa4eb125dace3723b9ee9d4ed6bce","ssdeep":"1536:9mTw3IILrckUO9WchRbBHkbQe3f/JnaA8SI:fBsO9WchRbebtP/JHu","tlshash":"15a3a6a151f605a31143f095ee59ab0a3ee0927fae0aca443bec1b9d9fd2dd0c52734c","dom_hash":"domhashc98af3fe4e532786cf9407cd9a32d648","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T13:12:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-19T22:43:25.336158Z","alert_count":0,"request_count":4,"received_data":373157,"sent_data":2178,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"userstatics.com","ip":{"addr":"94.154.32.91","port":443,"asn":210538,"as":"Yusuf Kemal TURKMENOGLU","country":"Türkiye","country_code":"TR"},"domain_registered":"2020-11-05","domain_rank":262534,"first_seen":"2020-11-05T23:01:51Z","last_seen":"2026-07-20T13:08:00.339613Z","alert_count":0,"request_count":1,"received_data":534,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":2,"received_data":63158,"sent_data":1144,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":146145,"sent_data":1423,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.0.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-07-18T07:49:19.593058Z","alert_count":0,"request_count":1,"received_data":985,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-20T00:04:33.448739Z","alert_count":0,"request_count":1,"received_data":90118,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"growdrive.digital","ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-20T13:12:44.564878Z","last_seen":"2026-07-20T13:12:46.827187Z","alert_count":45,"request_count":45,"received_data":2731410,"sent_data":38621,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d1926d09b37791532dcf1fb9a6bf6f6","sha1":"782382b39747808036b67e12965109f902a282f1","sha256":"2c171718f4251034b8e89eed40795ea4bf69bcc0f2d87d96faf0309ca1d5c62b","sha512":"4fa23d74f2a9e839fdccbb73b6b51206d21c26d8c0487d110ddcb808b3b9d23419a77eb5d82ae091da87eda48b8a9a2b8aa61f6201aaacb9de2d5e32ec6ba462","ssdeep":"","tlshash":"84f0278a4e492687b517e0056b26e81c00ee02fb3cc7df223e7c65167f8e425403c6d0","size":575,"data":"","first_seen":"2026-07-20T13:10:05.589864Z","last_seen":"2026-07-20T13:15:27.609131Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1518773d212a9438fa931629c2f63b93","sha1":"adaa9b38f91e6069207bf407bb2593a2d746244a","sha256":"a78bb4b1e5bb2e9f8fa7352d06b0a552657c2629cb0421aca5c74277bef62ac1","sha512":"7fbdc57170bb07bd3cc7fd2c1191e0ce34fb2fafa451d81a59d030dee67021b58e7452b5a7210965edb55325b633ce170180fd367c302160262f0b1060d4a8bb","ssdeep":"","tlshash":"e260000000f000000c0f0300c00c000c00c000000fc03330c00c0c00f000c00c0fcc30","size":15,"data":"","first_seen":"2023-08-21T00:10:38Z","last_seen":"2026-07-20T13:15:27.609924Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"280a7b199607201f09cc9e44f6f59438","sha1":"f1d57a127f38b4873d6ff11750f45004e8853b51","sha256":"0c3ae0c8601c5ff22b73d3b3cba54d8427eac03b7f7405e8b738f0c419207ca4","sha512":"8e207eb438822518b2894fefd924ed220d9030b51d2ef50dd0e92ba1ce0e6fe36c8b5e9d892f0c3cb29f1ac224fedde2748646808bbf5f5b2a9d0e07fe080733","ssdeep":"","tlshash":"fb41ad9b70b712700e8f916b7b5f83883861112b3a82d1883f2d87254fa1dd151276dd","size":2423,"data":"","first_seen":"2026-07-13T09:35:14.322058Z","last_seen":"2026-07-20T13:17:24.138335Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"12bdeb2177ac8c0784ecc943fb9e61b6","sha1":"f59b5e3084f27d09514c18a8d63aff64700ef3a0","sha256":"efd9f7d2079ddd0681fd7326206de20e935a480643366e5a36378f6802daac72","sha512":"a571ecc1ac5587b6b8e8bb6fa3b6e3738f4a5f67565d3e6dd6352f9bd79906ad54dd3e168e6e5d04f37b952715096513bbb4ba52c4437438c4ba17e4ca9382a4","ssdeep":"","tlshash":"cac001a9b4ed5240402329662ebed94aebaa782b25499840fa4ca4908f699285606998","size":180,"data":"","first_seen":"2026-07-13T09:35:14.323879Z","last_seen":"2026-07-20T13:17:24.138804Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"10ebb563c4eb856d515b97b21b86cb7c","sha1":"ef12494d18d0329dabd5821c2b1884ac7fce80d6","sha256":"5149ea18200d31207bee7d3ee0f4035c330d1b3ac2e4dc6800c6992220ef72df","sha512":"9bc82cc660ca1de1e0d12648cd89cc6873bc1531b9d9889b2bc2d6a026186cbe2983c4d670ff663a4da77f7c33b503141843caaa937d0b060fa3cdae125b5627","ssdeep":"","tlshash":"f911e59834720e29c0db61ce82476a18393a13273df5d6553e4de28d6fb6944c13d6c8","size":979,"data":"","first_seen":"2026-07-13T09:35:14.325527Z","last_seen":"2026-07-20T13:17:24.139271Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"09c3fbecb76c120259c0355dd6a4d65e","sha1":"54259e45d00e9187f97884330b171bc62a6863ce","sha256":"1a2bada43f6e1d8204a87d5d28e8b70177821428646dae9d75f213a6b4d667d9","sha512":"dd45947445b5420a476c9d3eff8bd3394b3f134f2959561b4661fa5a5f4d587fc0d7453bb26301b954f83e0bdbcabe670b9aa748d534802057f9691a902dee7f","ssdeep":"","tlshash":"f2416d77e2e28a3305af76a51bcba27435f0524be9048d0d3f1c869e4f25f81947668c","size":2165,"data":"","first_seen":"2026-07-20T13:10:05.593093Z","last_seen":"2026-07-20T13:15:27.613208Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3ea05ef57fe999084450a64268f3131","sha1":"8aefc4a04f05258676f01fbc027922c99fe3e9e3","sha256":"49e87222ab3881fdc057f9d86376b0669d657b10bef043dd0d8706f996b83583","sha512":"f9fbc2b2a0e22639d26a1fde561204f97c206548483a8b6f0df01220f3ca963f1623bd35788ed02a302dad2796c10e1ec0267413288e7edd0b9698ec131ff136","ssdeep":"","tlshash":"f441ad9b70b712b00e9f915b7bdf838838a1112b3a42d1893f2d87250fa1d9151266d9","size":2155,"data":"","first_seen":"2026-07-13T09:35:14.326755Z","last_seen":"2026-07-20T13:17:24.139825Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1911209f5a558a74af38c45622a6e6c5","sha1":"4772ed739bd7980ceffa5c9a3122c00a7261b6ec","sha256":"8921c33670835013a397ff91aae5fac85b8a1c303cc8388abc78fc726d9055a4","sha512":"9bfaf6a96e3fd0ac791b87acacc2e98d9d0a79dbd1df04ff6ba1021154f8ba2866042e09e1e1dda56ecd3711723e60f39da127dc3113bd2ba1f499d8fff34391","ssdeep":"","tlshash":"b751e19e74b292a77ab3b1be76ef80906564411f8814c9003c8c63c02fa06d5afe17d8","size":3099,"data":"","first_seen":"2026-06-18T16:30:30.856877Z","last_seen":"2026-07-20T13:17:24.14485Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b7efd4472c1160c81d1b66ee5457f04","sha1":"c54fa9cdfbcde9695cb51093579b1905ed85243a","sha256":"5ed4bf8d74fd40f7c7bc876332d04b7efd48704490ca805780c05804355b7c7d","sha512":"11dc4fcc5d4ef2114b3b84e22e96a55884e6c8e0480093eee5b08393dc357f212dc4a4f761eede2195be33734db1bf09ef38bcf1d354d5175874814bb0e87088","ssdeep":"","tlshash":"ede072d450b226b21a373a3ac28f7204b2b230876018ed003d0c0cf82fec8021499fab","size":334,"data":"","first_seen":"2026-06-08T02:32:48.53422Z","last_seen":"2026-07-20T19:19:30.199013Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"8df4c249f0eb0cb86f3028534816a92d","sha1":"c9adabd13d5d0584cba8fafa8421908d841524f4","sha256":"e01c9ce61a4b38b707f8dcddd0bb4cccbe7338c2e6430bed5a020c35dbd28f55","sha512":"eefbda1e05354ff97b1ebdeca206513a16e656130d0c1d9e551b3d940c490050b46756e49c541299143b6011f7a1706234e98db697d349699db6f841b82c6d4c","ssdeep":"","tlshash":"17c08c2e3ab6047f223731631d409b89e4220206c505bc823b6f43801fe38330ba2e61","size":169,"data":"","first_seen":"2026-06-08T02:32:48.535375Z","last_seen":"2026-07-20T19:19:30.199761Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"76c868e4cc5ef78bcdd47a464a1ae4ed","sha1":"88838045b0cd967178f7c69234734880a5c2ab12","sha256":"7e03a7dc0f752cf22c15267fd0c1fedd741e3fb2611ff1e22bde86f1e248ad51","sha512":"81c5e086fe1ca094cdff2241c26d7960628e8a4a49e59ecf4dafeee535ec75c5d381de4d740f1314c8c82f9fd80d2c37f5fd0b665163b9b393537b1d1261875c","ssdeep":"","tlshash":"e0e0828ce2a100715d22b0208e29a2c5a2b2b233ad0888313c0e0ec01f8842292e2ad8","size":301,"data":"","first_seen":"2026-06-08T02:32:48.536438Z","last_seen":"2026-07-20T19:19:30.200245Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a2bf168ec006e67567155403c269ecf","sha1":"31395351970cc54ec88380b939efb4478c288bf8","sha256":"613622b0962b0e3ec16f03340f1b2a20513cef7ec947787c35ea4cb982cc2bde","sha512":"4d40149d85b4d9436c597861b3f2f0740d766ac62de43e9b5cec55eb898ff43288557fab6d88b9b9155cb976e1ee4eca3ac91dfbfc834be057d70770ba2c2085","ssdeep":"","tlshash":"b821e72e72b041f903677665ac4f8220ac7242cf3a410e59bd0d5ad06fbed3766d260d","size":1157,"data":"","first_seen":"2026-07-20T13:12:49.089872Z","last_seen":"2026-07-20T13:15:27.618137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/js/jquery.min.js","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d500178e4ae719b668b8f3b20ed06ea","sha1":"6e4279c18714235b7a201c51908302ad2c1ed0b7","sha256":"cd8637ad4fe40b3e7c605f3441c7137b379fcbde59ea5a8e67fe15b2fb2f2bf2","sha512":"01685258ee5bc1991c79b4f6448685129ee2fdddb2e51459ddbbc614bb1b459052ab5964ed343fd0c00d4afeb617e50b73b10c09485afed27377ef0ba2fe1d09","ssdeep":"1536:EYE1yVoiB9JqZdXXe2pD3PgoIiulrU4dZfa4tfOR7WpfWBZ2BJda4w9W3qG9a98E:K4J+WlfOhWppCW6G9a98HrI","tlshash":"fa83d6d9b2d6715297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2c","size":86062,"data":"","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-07-20T13:17:24.134117Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-21T20:21:48.915761Z","times_seen":262292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/js/jquery.bxslider.js","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"703d1fcffc9a9e9e3e62e8127d929d3c","sha1":"3e6520092337cd79b29d3cfe61cb6a46df37fa14","sha256":"22fff7b8e0afa9d970f1a9b36b879ae1285ba992db8a290703b838d0aee16f5a","sha512":"abfeab3c07c9060dae40612318e431e4db7249691d6e6c6e802a2541b3a0835dc7b229304a69faa4030bb43711b4d5d95391d04e05a483a80f902981a57ed5b9","ssdeep":"768:WXE/gd1wzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOj:GEO1wOx1l/L2dy5oMnfNWVqCivA","tlshash":"b8335245e32c227e5566126cb28dcec4d7fd8236c82694b6eef0dd3ce18092901af9d6","size":50559,"data":"","first_seen":"2024-05-27T23:41:21Z","last_seen":"2026-07-20T13:17:24.135671Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","size":243661,"data":"","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-07-21T19:46:21.375815Z","times_seen":2020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","size":29362,"data":"","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-21T17:00:30.657836Z","times_seen":11710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://growdrive.digital/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"94.154.32.91","port":443,"asn":210538,"as":"Yusuf Kemal TURKMENOGLU","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","size":133,"data":"","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-07-21T09:52:28.118348Z","times_seen":5188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/16.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.528Z","timestamp":1784553134528,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/16.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1940\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-794\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1940,"size_decoded":2276,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x101, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"747fddba98d5e3cfbdcbbf68f70c1cb5","sha1":"96e16586a31433e5fb64f6ca9db683660dba63dd","sha256":"9b8584b4ba41b1b98cd87b38477c6457aace2d278fd3b464e072c8f26ee3118e","sha512":"1066030ec8d4701616c7fda496696bb4811efbe7359595f3b4f965a1b0f7144c9f2dd0c101eba5672972a57e8dbf8239f98d46ab620ad6310690589809d83b11","ssdeep":"","tlshash":"f6411bbc310d31876928cbde2268207974d8dd1817c58e73760159e03706b76bb4eaf4","first_seen":"2025-06-06T16:30:55.409052Z","last_seen":"2026-07-20T13:17:24.115904Z","times_seen":98,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/1.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.531Z","timestamp":1784553134531,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/1.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4292\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-10c4\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4292,"size_decoded":4629,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x108, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"556dd27ba7687ef55d5551c418fdc985","sha1":"601ddcd5535c895d010fb6979f9456898bd0eeef","sha256":"58ea1a262e71abe7fbfe03c6eead14d328bf064d0a45edd36a284cfc90b63878","sha512":"fd2b7cdd29e9ad46f6a0abc8a81825b5dcc1c133d05ff4565f196958eace6a3ffa5e134321f57574be3e7e963193e31dae5d77928a2bacc435934c4455221abf","ssdeep":"96:gTfhlKqKMXaPwbXN0I6zAsDz6iRz0FsdJuHdFqoVsJ:uhsDMXa0XFixD3uaQeoVQ","tlshash":"15918cae035b083c1ae416f616f8ca677d98a3612532a340c4d04ea3161f95eacbb16a","first_seen":"2025-09-07T09:06:37.514483Z","last_seen":"2026-07-20T13:17:24.109Z","times_seen":81,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/Roboto-Regular.woff","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.332Z","timestamp":1784553135332,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/Roboto-Regular.woff HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: font/woff\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":868,"mime_type":"font/woff","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/css/aqua.css","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.484Z","timestamp":1784553134484,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/css/aqua.css HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1d679d-1a85\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6789,"size_decoded":1941,"mime_type":"text/css","magic":"ASCII text, with very long lines (6789), with no line terminators","md5":"f264ec6de22f3d0c6f4d683cd6e71f5c","sha1":"b239627981330f228b6dd4697c25e0466afb42fe","sha256":"51db0ed83c892eb4e2d9329b6dc201e1dba85b4801f626f199944e3b687a8df8","sha512":"953918bda1eb23e5acb843b5dd87049cf36fbbf100cc3a366137c63a042e9f6607f2e8bc478e5e9712269985f9e849bfd54b99bb4cb74975f9f701b57621a910","ssdeep":"48:baTprgd8o9dpgPhdCby146BkEhtpx0XxfANloilojEKE9DVDGJTvJJTvnRvk/HR/:baTY5gGO0eHKfVrcejGGJUB","tlshash":"59e103cddf45168a85574ac687d8dbb8422cca933a226cfb72c2014bf74279852f790f","first_seen":"2026-07-20T13:10:05.55203Z","last_seen":"2026-07-20T13:15:27.605811Z","times_seen":7,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.495Z","timestamp":1784553134495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8889\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRWTekvBAjwtK7Km566hFukIn6rZLjJxzFaoePyIxWPn7bpqkN0MRkh63D6LRkkiWZuu%2FgvqvX8wBIlpYDzg6MPL22qljB%2BXvM5eUZPTrx%2FOGBUTwWU%2FbScycDq3M9yLPcLneElm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1e23762ab9f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29401,"size_decoded":9895,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26959)","md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-21T17:00:30.657836Z","times_seen":11710,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m8.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.524Z","timestamp":1784553134524,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m8.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 30668\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-77cc\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30668,"size_decoded":31006,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 495x382, components 3","md5":"8f3cf99304a26c908cf18c1a26f03ce7","sha1":"c9a03b6cb9b6959e44259e0a81b4ecd4dd28944e","sha256":"494ca18993c83c5ce17a4d85179e1d7b537618f85bc4fb6163edff9e72cb5c72","sha512":"d3cf130533ddb27625c5cfb7e20979d71d8cfccc3d44798fb07c7846ebcd3df8bbef8d178273984231c36c9e2d0825f80dcef0d56c152ba2fe1a5dbdbc5335e3","ssdeep":"768:lTzF+fuWHawj23VpI2pI7idR814GfvGyk+LnVyydXeAJ:FzF+fuW6wje423GUydRJ","tlshash":"d0d2f235fad436efea551c3641f34485d792a17fd7279b3ecae80b3822014e68e64a21","first_seen":"2026-07-20T13:10:05.538502Z","last_seen":"2026-07-20T13:15:27.5804Z","times_seen":7,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":664,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/BBCReithSans_W_Bd.woff2","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.942Z","timestamp":1784553134942,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/BBCReithSans_W_Bd.woff2 HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/cssInlineStyle_index.css\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 59740\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-e95c\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59740,"size_decoded":60078,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59740, version 2.-31982","md5":"a119e2352736b09277d0ebb23b2e1c91","sha1":"5b968e385a615cbcf7eb3af9c60d9161a8c5a233","sha256":"c2daf1f588a2908c2be252977f1ede62aef30dc7f7cbdd1802a05899b45dad3f","sha512":"c812dbc911b55e344b6e75a573433a38b4365e615d541ef3558ac08b834a683bd05814b47d43df257158ddc9465aa4ca63833f75cd7ecba89565d79c68e4de59","ssdeep":"1536:soCOMva94KeSBwY6WSLhRGlg2NfQrKEXAA9:DCLM4KeSGXWMRsNI9j9","tlshash":"c043f21810e9f5ac20b1bce283ef645f1e44aac9badd673c785bb72025b93440f146a3","first_seen":"2023-05-12T12:36:02Z","last_seen":"2026-07-21T17:52:11.754074Z","times_seen":376,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-a10680d05980f83e562b71b1dfbfcf952dbc2fed805d083b98210db80f122ef7.woff","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.143Z","timestamp":1784553135143,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-a10680d05980f83e562b71b1dfbfcf952dbc2fed805d083b98210db80f122ef7.woff HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: font/woff\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":868,"mime_type":"font/woff","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m7.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.523Z","timestamp":1784553134523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m7.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 117139\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-1c993\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":117139,"size_decoded":117479,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1062, components 3","md5":"4da7b27aee26a14851f9656680502c96","sha1":"ad4499f9566390394b036b9a5d45d3c2cd1857c1","sha256":"5c270e3c2b9e29eabacf7f1e39e7d8f5095ef175b9ff6f5738e6938ff104d7c3","sha512":"03b1f32b61e5a0cc51654c72a0b6b1b42b3716db85faf2fd6bef9b5d1cbe025fb45f79b4d32de74f549ac81e246f099318be5cf7c5e2fde6caa44580d26f03da","ssdeep":"3072:TNkJXYotLpWuI0GHHSGwvNZkcI6vq4lnYM0D:uJouLp36avNbjqO8","tlshash":"7db30296bb429ea9c03f6337f1cb2ba0fe55906735f6e246b7250b3cb486283195c741","first_seen":"2026-07-20T13:10:05.58875Z","last_seen":"2026-07-20T13:15:27.565757Z","times_seen":7,"resource_available":false,"data":null}},"time_used":721,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/21.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.534Z","timestamp":1784553134534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/21.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2550\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-9f6\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2550,"size_decoded":2886,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x99, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b787b067c9de2269597998fcaeefdfd1","sha1":"289e796b79ba4811dad4d5b1ce50e2122bddaf30","sha256":"dee6e3e27cac59cc72e16ec30a05cf4f11caac428db6c5ce46703e5eb2266d98","sha512":"03f00cab8b61c3196eeffa96a4a2deea3fd4bea598aae229e666eea9f1506b6a8f9d82ad12e8a2c847e1460a0ea5544edfc59bd06cf299d2ee1ec770fec0e4dd","ssdeep":"","tlshash":"fe515cef943b982bc0d5f697df01bb0b499508f85e39603a70589000eae02a1aa09b1e","first_seen":"2025-06-06T16:30:55.43589Z","last_seen":"2026-07-20T13:17:24.127552Z","times_seen":98,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/css/fotter-form.css","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.485Z","timestamp":1784553134485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/css/fotter-form.css HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/css\r\nContent-Length: 372\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-174\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":372,"size_decoded":705,"mime_type":"text/css","magic":"ASCII text, with very long lines (372), with no line terminators","md5":"a76c099e6ab83a09acf34079991b8733","sha1":"279f57a72015acbd44b7b5e671e89cd8eb431ad6","sha256":"f4519af644ca506b8712f417c660fc38b3c307adae497dfeebff4ce179207820","sha512":"c9925a3ebbb46e5c171421eab96ecc57afd9a5fdc91eba201bcdb75a5c3bbfe7371c5d0849e9513abf0a3478db544e7707862603ced6d342bd9f634fafba36eb","ssdeep":"","tlshash":"89e022b4d990507df117e6c4dbe04e8c92adc024f9220e1df32a7a9e4a4659d06a5aa2","first_seen":"2026-07-20T13:10:05.580443Z","last_seen":"2026-07-20T13:15:27.590085Z","times_seen":7,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":67,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/images/comment-user.png","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.507Z","timestamp":1784553134507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/images/comment-user.png HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 8192\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-2000\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8192,"size_decoded":8528,"mime_type":"image/png","magic":"PNG image data, 108 x 100, 8-bit/color RGBA, non-interlaced","md5":"a15390a4e033f0dde21b5945afb68ad8","sha1":"26e4b18751608ed1fbf871e6b20ed661cffec383","sha256":"8f87096c5662eb74591a915a6bf14731177778ec1297bc4403a9f3156114fca0","sha512":"145322c24548df10ea4052efae99cb5b07daaefd0738311aef352827e953550b6646d56e57db3e7a7c3a386bd5fa6722ce74f23d58b5adb635f2b222f77bcd32","ssdeep":"192:+VxRpkDZbYW4Jv7ttz9wHVnwbm6VFtpgVXOnABUj:+ppC05VGnlauVxUj","tlshash":"53f1ae2afa12c0c78fccac9b1c56262736f625be9111c36ed443a81b5f96d807196384","first_seen":"2026-07-20T13:10:05.563543Z","last_seen":"2026-07-20T13:15:27.569443Z","times_seen":7,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":541,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/img/Serg.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.534Z","timestamp":1784553134534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/img/Serg.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16598\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-40d6\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16598,"size_decoded":16936,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 497x543, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6736c19410fc14495d4f46947a3148eb","sha1":"4be4041815923e217104727b0d437860206f3377","sha256":"3ad022fd983eecbd1e70d7505c7c42a055e7f04119186353e66efad1f892912c","sha512":"acbfcc615c15bd1a0c6e4d7be6b450b920984f7daa19b27ddd88c51af39ea4ceeae05f8e90e43627b9c348b34c6e6b25056725a940f8a6e8089443a2567b7709","ssdeep":"384:/RdkrzRJXyOG05HuE8PX3XelO2Vvof2lzU9egdghD+kfcXPI3b:/QJCsg3Xcd3aegdID3cQ3b","tlshash":"f672e02407a2097c74af65eb5d8dc72716993f4ab572981422bef9c0f08c2fe6ee1045","first_seen":"2025-06-06T16:30:55.45097Z","last_seen":"2026-07-20T13:17:24.130837Z","times_seen":98,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":672,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"userstatics.com/get/script.js?referrer=https://growdrive.digital/","fqdn":"userstatics.com","domain":"userstatics.com","tld":"com"},"ip":{"addr":"94.154.32.91","port":443,"asn":210538,"as":"Yusuf Kemal TURKMENOGLU","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.841Z","timestamp":1784553135841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstatics.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Jun 2026 05:39:19 GMT","end":"Fri, 11 Sep 2026 05:39:18 GMT"},"fingerprint":{"sha1":"C3:2C:ED:B4:DC:5F:AA:E4:5D:65:2F:7B:6D:CD:84:AD:39:7B:D8:35","sha256":"29:F0:8C:02:3D:9B:EE:8D:6B:B2:17:4F:3A:EE:5F:02:8B:54:C7:A4:13:E0:2B:3C:DC:06:0E:F8:EA:A6:50:F6"}}},"request":{"raw":"GET /get/script.js?referrer=https://growdrive.digital/ HTTP/1.1\r\nHost: userstatics.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 20 Jul 2026 13:12:23 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 133\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://growdrive.digital\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133,"size_decoded":534,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"fea7fbf2c619fd4b7716fcaa64070c6c","sha1":"f192732937981a26f526b7c1293a2ae13bc59a22","sha256":"df9690fea031319de38a437cb6d393026c4aae70642ed394c4254ed64f035b26","sha512":"145c293c29dc95f829b71b3e7378fac6a17d3081f9d2e17a986bed2cc5f07f4bc35e791010264c841f02057a64a9f297d4f62335fef59f0c237a541599edb6c3","ssdeep":"","tlshash":"61c09b148f1d87f5203642de75e3c3c8947460e67515d40a644f64f95599ed30ec1d91","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-07-21T09:52:28.118348Z","times_seen":5188,"resource_available":true,"data":null}},"time_used":7394,"timings":{"blocked":0,"dns":4,"connect":50,"send":0,"wait":7284,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.499Z","timestamp":1784553134499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1970\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B6JbILjp29aqUncAyC4EZMgMxnfzWLN3imgIkBwSuPTH875GI6FEiTYAhxzAHI0%2FjkF6b2O65tKq5dC8lJfrdlPx0tLiUcVr24tcFIrAkkqdKn%2B3OM4N45ibUu4t98JkO6oTaTr4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1e23762aba92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":2960,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-07-21T18:42:52.595149Z","times_seen":29529,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m6.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.520Z","timestamp":1784553134520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m6.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 52394\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-ccaa\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52394,"size_decoded":52732,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 733x720, components 3","md5":"a20df20a140d1881e20cb17cf7c2089c","sha1":"dbaac67313550af2cc7d57bdf772afa42771aa82","sha256":"a303d096ebc88f5067633bf046e2dd4d009ea1dc529c0871f3a85f9d0d0d0602","sha512":"339dbc2f577c2d7046e9757aa98fe53f0e0a241bd56df0579270a61e5219ce6053c6e7279ff07adbf6529b3e5a8fc0528c0ba2f6f92aa6b114c8549aae4a7180","ssdeep":"1536:57ZaEonQsTMQk9P/eK6FCJDmOWVe1ruY+3zVp:57AQsTS9P/Z6F4YVe16RD/","tlshash":"983302ec8a8d16e5c0573eb352f62dd5cb61f4aaee5eaa4aa7090bf5327708050f50d0","first_seen":"2026-07-20T13:10:05.555777Z","last_seen":"2026-07-20T13:15:27.579105Z","times_seen":7,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":609,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/Roboto-Regular.ttf","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.801Z","timestamp":1784553134801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":883,"mime_type":"application/octet-stream","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.497Z","timestamp":1784553134497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/utils.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44414\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:41 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DOyM3WY2lQBggF0%2BRQ%2BsaoTObupx9kIHAjjlhmG4TpV9q3kCBYtN6F00hxvbE5zO95Xfchd2MUkyEpu9VqEH0QOrcrSKGccGvVfU95TCyOStjKEn8vtdSMEnYZx1s8kJX06iSKf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1e23762aba52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243661,"size_decoded":45417,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-07-21T19:46:21.375815Z","times_seen":2020,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m3.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.517Z","timestamp":1784553134517,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m3.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51067\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-c77b\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51067,"size_decoded":51405,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x960, components 3","md5":"840202b0b55a790ae3566368f8df08f5","sha1":"7fd4a19c21598c482ec1f44dd15d9731c10454fe","sha256":"ece6376729cd7a3fea72f172f4fbda326500271b789c91482b23190976ac7a6a","sha512":"170eb3e9366691bb5f99ca3a78eb2ef878486bfe5bb4fa4ff44cf4b75b87fe2fd422d617978449d6bb26dd6b08162f0e2bc8bbd4c90114b07b28eeee8255e653","ssdeep":"1536:pd6hwaFZ4Mm1R4SELclEML5xGqjy9leNxPbxg/:pkhBLZMRDEaEoDGuKezG/","tlshash":"7633028c52fd38539a787db016eb0b90f3cfe198951bd3c690249898ac515e92e90393","first_seen":"2026-07-20T13:10:05.587794Z","last_seen":"2026-07-20T13:15:27.586485Z","times_seen":7,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":589,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m5.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.519Z","timestamp":1784553134519,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m5.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 159993\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-270f9\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159993,"size_decoded":160333,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"be9f2b46599faf6b3d2d2a3cc91a2395","sha1":"7975dd3c2d269a6552b9cc0eecc8d8d94303d637","sha256":"d99427f8b3b6e26fe258409b699df42b1a55c3639fccda086fd8a578a71b9126","sha512":"a6b612c61ee61dff2a3e201678722628b91274f0acd0b312f4a7071412e1c53678e6f14cf3ba4ab7505fee8b57d07c61bc8e850250a1abd14bf308a8442ae688","ssdeep":"3072:09HxoPUNofnqO3j6TvH6tSs8685ro32+9dyTnVSK:09HjNo/f3eTatSh6IroGsdW","tlshash":"13f3124f13b05f84a9bfb7bb30e98490e799e705948202d6bc6ddaf8c7fe05a141a705","first_seen":"2026-07-20T13:10:05.585895Z","last_seen":"2026-07-20T13:15:27.564773Z","times_seen":7,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":601,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m10.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.527Z","timestamp":1784553134527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m10.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 208892\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-32ffc\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":208892,"size_decoded":209232,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 974x974, components 3","md5":"444719f9f5f60ee31bbe4e70cdb6f59c","sha1":"de080b35c8239c059844cb1e768f9e13a2c93bbb","sha256":"71517b2b27f655b6b87e111c936a96cba56aa2092bfba51f23435cd1a39733c7","sha512":"405ba086e19138c3bae7fb7b195622a22fd98517be5ec42bb5cfd8447efaea99f28b980a148f4c7cc0aee6020d2e9ca34e5498c0d645a4de7fb9f10b404ab34d","ssdeep":"3072:YB7VbUT7A/B73esIMQCM0hG1XYX5NbqUYhhWUgSwojIxqNU2T1270ydX5Bn:4UY/FeHB0hKYXTtYskK2p27nFn","tlshash":"751423d6acc4f03d94dd04caa187e1538f59f13a4bd3bf82b28dc45ba1c618069ad9e9","first_seen":"2026-07-20T13:10:05.561969Z","last_seen":"2026-07-20T13:15:27.566629Z","times_seen":7,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":125,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.963Z","timestamp":1784553134963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growdrive.digital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 18:06:57 GMT\r\nexpires: Sat, 17 Jul 2027 18:06:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 241518\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-07-21T20:26:31.669161Z","times_seen":541138,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":31,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-b84ae544e7ffeecf69601bcec8d1f5e33a7ce1976136a09ff46c4659e1bac7be.woff2","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.962Z","timestamp":1784553134962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-b84ae544e7ffeecf69601bcec8d1f5e33a7ce1976136a09ff46c4659e1bac7be.woff2 HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":869,"mime_type":"font/woff2","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/img/flags.png","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.128Z","timestamp":1784553135128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/img/flags.png HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 13:12:15 GMT\r\ncontent-type: image/png; charset=utf-8\r\ncontent-length: 70862\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRGo0I4T7fRzQtqK8I8ZIpyQnHEqUvue4ehl4Euhfsa806aalD6h2SOTjxmo5ydWF8SNtK6i0q%2FQ25Ilxqb3hzvxDTNJFIaHFVufv6oSIcqYiI0SPGxHfGT0mYKmjt0mcHiOpApk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a1e237683d122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":71847,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-21T19:13:47.130941Z","times_seen":25099,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.482Z","timestamp":1784553134482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Jul 2026 13:12:14 GMT\r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3908,"size_decoded":1321,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"935871d1a732f1e46db8fac63abf0dcd","sha1":"1c67935ab647d6cb5bfa911856397443ab4a64ed","sha256":"b8eec3c6430ec7af2ae527219f944b1f3fde1695eb73efc2a56b3cabb23e2481","sha512":"2a9cb9036467308726cc6b979cab5e2c7159ec088436136f4aefc70cf43b6e90c7ebd277697beca525b052f2a8f8dc5909d9b9e5e4b09afc930e290a7195a571","ssdeep":"","tlshash":"2481c0910517a504da471cc523cf7e26de0e66767494d5797ffe2ca8bdeac220324b2c","first_seen":"2025-09-05T02:18:57.460387Z","last_seen":"2026-07-21T20:20:18.144602Z","times_seen":87319,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m1.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.513Z","timestamp":1784553134513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m1.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 251631\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-3d6ef\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":251631,"size_decoded":251971,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1272, components 3","md5":"c8ef74cc57f222b513e4ee0bff7c90ae","sha1":"0b9424a289658e3c01aa5cff809b7580f19655e9","sha256":"e5e737ce423b4265d17c8a907b126680036480924aad20a67c91b568f43ff0d7","sha512":"10ef81a54cfee9c16ec2734076b0a32a090a95f079fc657add1bccf4cf3557a6537499e6b176dfc75b23950a6f7d533062ab4c533ab8c1cab8e79600bd5fefe1","ssdeep":"6144:GoZyKrB/m4ZQTimMSWryOkmGgYguopjgntTzJNDx8kyaEQZ:GUyKrhNQOPdramKpXl+e","tlshash":"7e3423c7c6f7cc1be4b5a6d899c67006c4c769240042cf8f346676a3de21bb5e592ab3","first_seen":"2026-07-20T13:10:05.559127Z","last_seen":"2026-07-20T13:15:27.60312Z","times_seen":7,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":342,"dns":0,"connect":0,"send":0,"wait":125,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m9.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.525Z","timestamp":1784553134525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m9.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 103304\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-19388\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":103304,"size_decoded":103644,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x1280, components 3","md5":"f97cc75cc2922dfb90deb6e242028dfd","sha1":"14cd35d005b7a2c8f18c115030cb2511c85db758","sha256":"6f6c7626ed14f84a89c0305c263e1be50f5d0bda7073eb96d78890b65ab7298a","sha512":"0edf7fbaefcafe71d2e3b7a57b95e7d93f368e55bee10c966b3171e5006fa065f220c232e7a858e53aedd39d543da4e9eedd99e5ef3eb6facb46fd63b1d20281","ssdeep":"3072:A96fDgMLcNAS5yyVu/JatIVmon1aYL1bLbpy/g1h7M:A9ogMACyys0Ja3q1XBbLNy/SM","tlshash":"d8a312fc8b40093c5561171ece65ea2fcc96eb2f846bfe6255d8b7cc86720b142be505","first_seen":"2026-07-20T13:10:05.560002Z","last_seen":"2026-07-20T13:15:27.572211Z","times_seen":7,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":666,"dns":0,"connect":0,"send":0,"wait":64,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/w6.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.526Z","timestamp":1784553134526,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/w6.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 177357\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-2b4cd\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":177357,"size_decoded":177697,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 958x1280, components 3","md5":"14b387b74cdb381d79b1922c90ecc201","sha1":"5e03b6d733c7b7e10791bfd23b0d4bba402ad259","sha256":"0c621ef717e1472f26ba4c443076200c7f2a8ce119b1fd65bc5562fc3f34c466","sha512":"3d525e61d931bb11b460c7269e3713881ff8df9e65e5b06f80f9698547f51fdd379d956f8935a432278fc51369da7849d6fc03687a7004a09b58ca9b28cad03a","ssdeep":"3072:b/hMNz+AOnHqUb56xD/pgraTkUsL7//PP+GMLOcWW0xWy4L:bpRHqY5gDRgr+kUsLLJcOC","tlshash":"1d0412ddb63682405dd65c25f8ef4b06827390f1d7b98d4c17c3a8f89316f9a2da318a","first_seen":"2026-07-20T13:10:05.561019Z","last_seen":"2026-07-20T13:15:27.555619Z","times_seen":7,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":668,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/17.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.529Z","timestamp":1784553134529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/17.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1830\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-726\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1830,"size_decoded":2166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x88, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"499049cf3689833892f904ebaa0903d1","sha1":"cc2117f99294463e320694a8971f294de402521a","sha256":"b6951afb74275a05d4401b3063409475c06811294261b4f18b14114246ec8956","sha512":"f063322195fea06617c69afac792d2aeda0679bc33a1e31a40da6fd30cff61a59b483ac511d3abc1df8ee416306c10d04cead05edf6517e100fe3209a96c6952","ssdeep":"","tlshash":"723129dd3a353c590b926bc424b3c16af79fe88216e8432092e9fce6951888224e3b01","first_seen":"2025-07-11T09:50:30.063679Z","last_seen":"2026-07-20T13:17:24.132869Z","times_seen":97,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/18.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.530Z","timestamp":1784553134530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/18.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2596\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-a24\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2596,"size_decoded":2932,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 95x103, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e235b73acae2d43abc0bdecd7f2ab233","sha1":"0fbf13f006c05da348d85639f8f15526f8fc99aa","sha256":"c7396b45b20e6ddddb662442b131d28d595ddaf2a8fa3a129dd1f1d2c26b3577","sha512":"456ed874c0298996ea29f216522848f701024351496e6482f374f964b2b15155fbab6848e1a661fb1aa7ae1e969c18dd1fd11d8dc18c800afc3310ff4306a217","ssdeep":"","tlshash":"9c516ca839789409eb931f8d8461784b24b30b07fdd363c14e1e0d64215ce371c627db","first_seen":"2025-06-06T16:30:55.445399Z","last_seen":"2026-07-20T13:17:24.118095Z","times_seen":98,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/js/jquery.min.js","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.487Z","timestamp":1784553134487,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/js/jquery.min.js HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1d679d-1502e\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86062,"size_decoded":30494,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32537)","md5":"5d500178e4ae719b668b8f3b20ed06ea","sha1":"6e4279c18714235b7a201c51908302ad2c1ed0b7","sha256":"cd8637ad4fe40b3e7c605f3441c7137b379fcbde59ea5a8e67fe15b2fb2f2bf2","sha512":"01685258ee5bc1991c79b4f6448685129ee2fdddb2e51459ddbbc614bb1b459052ab5964ed343fd0c00d4afeb617e50b73b10c09485afed27377ef0ba2fe1d09","ssdeep":"1536:EYE1yVoiB9JqZdXXe2pD3PgoIiulrU4dZfa4tfOR7WpfWBZ2BJda4w9W3qG9a98E:K4J+WlfOhWppCW6G9a98HrI","tlshash":"fa83d6d9b2d6715297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2c","first_seen":"2023-11-04T00:48:23Z","last_seen":"2026-07-20T13:17:24.134117Z","times_seen":100,"resource_available":true,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":63,"send":0,"wait":136,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m4.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.518Z","timestamp":1784553134518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m4.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 170714\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-29ada\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":170714,"size_decoded":171054,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1280, components 3","md5":"31ee11e68a7f9b9f97b9563f5f6c4925","sha1":"62531fbc4292e82119a61f462f230782455bfd25","sha256":"f64787d30704f0765879a5436e33c3cd95b5d2f1af9c4b2736006c4dc980abb8","sha512":"abed830fbf3bf762abf4cbcdec56e360f988eb4604cfd1d197063b315f1a6f9e62418548fdc4dbd5e377bf92ef0ea94b3740b27c85aec0d8af196e1baf18a883","ssdeep":"3072:8Mb98jQfbh2+D/7y0YqQzK3MSc7LzF7CA19KlmjFnN8kM3UJ0J7NtUvP0:dejQfbX/7y0YdvSkzF+ASlCFnN8kh05d","tlshash":"fdf3129c69a30199bf678e70e8818178f171b75f06283bb0b1cf6a17e5d35821cd8cda","first_seen":"2026-07-20T13:10:05.537424Z","last_seen":"2026-07-20T13:15:27.608298Z","times_seen":7,"resource_available":false,"data":null}},"time_used":663,"timings":{"blocked":598,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/img/andrey.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.536Z","timestamp":1784553134536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/img/andrey.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6874\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-1ada\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6874,"size_decoded":7211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x271, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d456949b375ead793ef1cf236c4bec85","sha1":"fcbf67988ed117c891d1e42515cd315ca1ac7372","sha256":"67c9beea7166bdbb7c434fc10fd6eb20f4aa58995ac634927663770ba3bf22ce","sha512":"c2ffa30624072517e4a71852496f5e89ad4ce7b23ab4de3188153faa61000de1c49eef7863855bda417d05a2eeca3c048caea241e6beb6b87830c56104a4de2c","ssdeep":"192:G/tHCiDHXcYAxLB2zBpRZ+OLTeOwqRjTJwUNd:G/4iDHXcYc4zTRxLTecTqUNd","tlshash":"1ee1a0e25d3107bb9481a55d4b68c8ac18ea738e13e6d4faad05b0b07613728c64ddf7","first_seen":"2025-06-06T16:30:55.443485Z","last_seen":"2026-07-20T13:17:24.111828Z","times_seen":96,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":728,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.965Z","timestamp":1784553134965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growdrive.digital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:38:44 GMT\r\nexpires: Fri, 16 Jul 2027 05:38:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 372811\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23776,"size_decoded":24589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-07-21T11:01:15.868872Z","times_seen":9158,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":19,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/w2.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.516Z","timestamp":1784553134516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/w2.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 109114\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-1aa3a\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109114,"size_decoded":109454,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 972x981, components 3","md5":"27ec641c76132c3957a0e9d402dbf3a9","sha1":"2725def720a04f421a1e6687d4e3bc547306ec9a","sha256":"83053f76fb0be5c30ef10a07c0cb52db1d1aa93e62f4d3bb6e7c54ef523a05e4","sha512":"d3922e6fa7ead71c9847d5fc190102d8971ae3e774ae84a88743fdd8f3f8d08917861ee451646dbf12bfc26d638b39c6e362664dbc9840bef7edbe0917ad18e8","ssdeep":"1536:g9nlh7s/I0IffWMvFzbJAVf8jkD4MPwSeMvdKl/HeoSsCeW4QlOKgWR3Mguqutxc:clh7oIJFNzmKy4M2MvNoq2rPg3MgXEo","tlshash":"10b312519b80a268c87d073452c743adab22df49c1fa16fe5e8c54761b2ec4ada0dfd3","first_seen":"2026-07-20T13:10:05.54853Z","last_seen":"2026-07-20T13:15:27.607462Z","times_seen":7,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":62,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/BBCReithSans_W_Rg.woff2","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.940Z","timestamp":1784553134940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/BBCReithSans_W_Rg.woff2 HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/cssInlineStyle_index.css\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 66468\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-103a4\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66468,"size_decoded":66807,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66468, version 2.-31982","md5":"17a0df970078d0f4764c04c335ef555a","sha1":"aed492b4aae2620cdb6b4bac3f62999728062118","sha256":"13af37b33a332856c4f9194d2020bea0d8e91b078aac2f68ee90940dd7fdc070","sha512":"fb09d0c8f81e45e537d8ee7437926f3092e96d3cb45d8c7e3c07bf8a4986ad31fe11e50dfe82bdbb41ab5815edcba1fd5a6e2c0d33220c5c47a038888b7759c7","ssdeep":"1536:ISECat6w5X4CT02tS+4GgZOAWTrFFt/mfsOK4i3eH9:5ECat6iT02yGkSTRFYfDYeH9","tlshash":"be53024d9523236a85dc8fee8e9ea12a90b0fccef94653d4051b546b2d6bd80701f1be","first_seen":"2023-05-09T11:42:15Z","last_seen":"2026-07-21T17:52:11.754872Z","times_seen":377,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/m2.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.515Z","timestamp":1784553134515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/m2.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 168143\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-290cf\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168143,"size_decoded":168483,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x776, components 3","md5":"1af2941ac6184e2bf08761eb9cd678d4","sha1":"5a1b664a563a8b3156c4bf44eb22c7c726d4063d","sha256":"ccaf605ade9f4f908ad0cdc28cdead0acc6633f521e48eca214636fd356e45eb","sha512":"5d93636f44fd888337423c05bb65299172becb3b7c2fa42352759fce23ae2311ad7f0f65dc7a80d58e81c955d78e4e27de9ce98c1406c55f720678abe271952e","ssdeep":"3072:Xw//4r5f0wc3ZsMhjdypgFtsTo5RkozHluzn/qZoEOXdZDGhelJwEUF+kjvF:Xw//4rd0wcJrDsTAuUcXEOXjlJwEUfB","tlshash":"a5f3124874a7bb302a729e2f21ffaa13f01d6b579b646d53754caac4a0403e7a07105b","first_seen":"2026-07-20T13:10:05.554881Z","last_seen":"2026-07-20T13:15:27.570481Z","times_seen":7,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":63,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-837311edc41b741ecb06d18509cf70c6ba20907be8c7c17671bcf80c0b14a980.ttf","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.215Z","timestamp":1784553135215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/roboto-v20-latin_cyrillic-regular-837311edc41b741ecb06d18509cf70c6ba20907be8c7c17671bcf80c0b14a980.ttf HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":883,"mime_type":"application/octet-stream","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T13:12:13.615Z","timestamp":1784553133615,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, no-store, must-revalidate\r\nContent-Encoding: gzip\r\nExpires: Mon, 20 Jul 2026 13:12:13 GMT\r\nSet-Cookie: _subid=18uumd05adj9v; expires=Thu, 20 Aug 2026 13:12:13 GMT; path=/\n7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; expires=Tue, 21 Jul 2026 13:12:13 GMT; path=/\n_token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; expires=Thu, 20 Aug 2026 13:12:13 GMT; path=/\r\nVary: Accept-Encoding\r\nX-Powered-By: PHP/7.4.33\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]}],"data":{"size":98277,"size_decoded":18946,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1071)","md5":"23bcffd940fa6b6812dfbe704c078a5f","sha1":"9362541e10bdcf62d4f887e506c60327a144963a","sha256":"a08356eafe70089e53e3fe88b548e79b9972b9ac296072597308830da3149a14","sha512":"70a07d370db413ce6720130381f648f507fcb09a529c37366a9661cfae2e2e91e21e6180b44b8093a22217001627cdfcf6222941cd6172c81bd985204af7750b","ssdeep":"1536:amTwfIILrSkUO9CfE6ngWhTbBHhbdeCfnwKqZsSEE6ngP:C5iO9CfE6ngWhTbXbkynwd+E6ngP","tlshash":"f7a3a7a151f601a31143b0a5ef59ab0a3ef0927bae0aca447bec1b9d9fc1dd1c52734d","first_seen":"2026-07-20T13:12:49.06181Z","last_seen":"2026-07-20T13:12:49.06181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":76,"connect":63,"send":0,"wait":153,"receive":63,"ssl":138},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/images/content1.jpg?v=2","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.506Z","timestamp":1784553134506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/images/content1.jpg?v=2 HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 270574\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-420ee\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":270574,"size_decoded":270914,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x851, components 3","md5":"3b1a07c45f0419c94b68a59ffe22c80e","sha1":"55e146fb1158fde78e54d34007dade78853d432b","sha256":"9215822e41fa1225654318469907bc68cb70da9fcefe42283d6153aa39fbcba9","sha512":"c61c5e541fca851253611b0cd91b6698c7faf3489748e6226cc79ba4be364a5ef23d1c73edac5a2fd617da8f9e23fca7bf3450b6e7358e2ca27e4bf0c6357d4f","ssdeep":"6144:HBA7rag8drhkcHuI9q9rB7kbz+eMwxyw/FOC5h/hw:Wf8uccrBQbKeMmywv/G","tlshash":"f7442373131efcb787be52e5a8090921263e6d4c7255e088d65918eba73cf0e4225f2b","first_seen":"2026-07-20T13:11:31.78074Z","last_seen":"2026-07-20T13:15:27.585661Z","times_seen":3,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":281,"dns":0,"connect":0,"send":0,"wait":62,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,700;0,800;1,100;1,200;1,300;1,400;1,600;1,700;1,800\u0026family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.477Z","timestamp":1784553134477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,700;0,800;1,100;1,200;1,300;1,400;1,600;1,700;1,800\u0026family=Open+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;1,300;1,400;1,500;1,600;1,700;1,800\u0026family=PT+Sans:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 20 Jul 2026 13:12:14 GMT\r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140869,"size_decoded":4661,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (854)","md5":"c04e9dd55d2f2de239378f7cf100e6b0","sha1":"5e7267a59fad88a1d8bb5b49e39785144dc4dacb","sha256":"72b773b2770d1e4a410fc85b62ce3b0fb12a078b4a8d4130c33f6f5644f46b20","sha512":"c29f77e47df8b2c98ddfb691a1e77c17e798df88f9bc2f473cade433f6fe9604e8f469c2f67dc7a86ad376a32bfdfcd09c5b97bd64f95e333e27ceb9413b71da","ssdeep":"768:/CXTzXvYQhDa5Zds8DdCWQ5dBIM8Av3keKcZd4oIp+6hnwYzFCuVZ:EPIZAPkFc34ZpVRNR9L","tlshash":"4ad33e90402b6440aa432cc633cf7e35ee0ea6617084c17a6ffd5ae9eddad26637475c","first_seen":"2025-09-18T14:10:00.835248Z","last_seen":"2026-07-20T13:17:24.128694Z","times_seen":31,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":38,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/country.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.0.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.924Z","timestamp":1784553134924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 09:05:21 GMT","end":"Sun, 13 Sep 2026 10:05:19 GMT"},"fingerprint":{"sha1":"B3:F2:DC:EC:52:71:F9:79:D2:00:8E:C8:AA:A1:86:8A:C1:E3:43:88","sha256":"11:6A:66:F9:3D:73:5D:D0:5E:A8:3D:AE:47:BE:47:E4:A4:52:BA:81:19:C0:F1:09:0A:1E:E0:7D:58:D9:26:39"}}},"request":{"raw":"GET /v1/ip/country.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://growdrive.digital\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 20 Jul 2026 13:12:15 GMT\r\ncontent-type: application/json\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Mon, 20 Jul 2026 13:12:15 GMT\r\nx-request-id: ab1ca6bd9473091c072d9500c611dc87-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6kjxpBIPGV4vuSoB0cfEBUOCU2WOK2hjpR2HeB3I8MMFP7yKzv%2FwDuI4HI5nKfdG5v%2FQQFHdy%2FlEsAvGM22TfWOvUESkyIfoA4SYHdfrKoJhcMKFJVHXlIYzA2lJQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-content-type-options: nosniff\r\ncf-ray: a1e237655aa1b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":979,"mime_type":"application/json","magic":"JSON text data","md5":"46a6a0cb45e9fe8a937c1d379f58d2c5","sha1":"055617a08af5aa9a2aba05aa432407288c559367","sha256":"b09f253b6d83ab759c733d9bc894d8ab857dc68b5f1d96f91dbdb764ef816f37","sha512":"9331a0d3aec182cd05fa258fd0bdacca9d1a6d8a1d329d54b2f921435932c0f8d91b1bad9e7e82b118d21f754cecdc340b159d2b1d62a530349d6991b1a5dca5","ssdeep":"","tlshash":"32a0019e24a28b589860d2a5248a61a59586e64292aa6d0692c83b69da402dc6401271","first_seen":"2026-06-07T21:04:41.962532Z","last_seen":"2026-07-21T18:32:41.707497Z","times_seen":211,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/favicon-d49efd904632b9323747457b49909f3a8812219be03be2ce5586b16c8fdef297.ico","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.400Z","timestamp":1784553135400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/favicon-d49efd904632b9323747457b49909f3a8812219be03be2ce5586b16c8fdef297.ico HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":871,"mime_type":"image/x-icon","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/cssInlineStyle_index.css","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.500Z","timestamp":1784553134500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/cssInlineStyle_index.css HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1d679d-17cb\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6091,"size_decoded":2325,"mime_type":"text/css","magic":"ASCII text, with very long lines (6091), with no line terminators","md5":"8c1f089dfb02b5ec145c737b35afc041","sha1":"3c4b60b2d6d8ba0e7dc9ce6f51cc28c31c5261dd","sha256":"bdae7f22c0a95b83b2577674419d02397f19e34c91eadba5c340c75e26947819","sha512":"65ed9ef605fc58ee9dafb7c504f10fdbb9a31f7d4d007add27bb23b9a07cd54028b4b1462affccf956b2a99a45d3700cbf32aacb7e372ccb8e84c91856efab74","ssdeep":"48:SFqDf+MMQkMBMBeg8NEl1Bl3gzLI2M7kNOQ/5jgUSRxre6X3Y48iV0bYkdOFfW6p:Pz+3QkP8NkWhoS4G9ORKNXDCb4QA7at","tlshash":"f1c164126986202df06bd4a1b4d17bae303c9217e2235afd99667279cbd32d713b1b4c","first_seen":"2026-07-20T13:10:07.282342Z","last_seen":"2026-07-20T13:15:27.568384Z","times_seen":5,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/images/popup-lock.png","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.510Z","timestamp":1784553134510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/images/popup-lock.png HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 73362\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-11e92\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73362,"size_decoded":73700,"mime_type":"image/png","magic":"PNG image data, 320 x 300, 8-bit/color RGBA, non-interlaced","md5":"4752b89f9028b580ccf16bcb0e8ded46","sha1":"62395d320cd3e9d4ccb2f9ae511bb00c491d697e","sha256":"0a5ece924b0cf607e7e72b9df05cf37c1728e4ff0686ecf7b2bfee01ab8895ed","sha512":"bce8ab5d53f104a35012091ac9f561bd8f4bc96f603e7c75e959f2eb0f0108384809051cd0991207be2135cd1769b59487be4ccc9f33eafec963ba5791ca2541","ssdeep":"1536:Obc70nIQpCmbKAL45nrF007oOvGUi3IAb2Du4JT6nZZgfV2lWzCunXsJb:ObcKphbhLYHFiFb2DuXnZKV2/","tlshash":"e263029f0fb3fae1bd3263c5f2a62489e1d670b9059062dc56da28dd836eca432154f1","first_seen":"2026-07-20T13:10:05.558189Z","last_seen":"2026-07-20T13:15:27.563746Z","times_seen":7,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":733,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/images/popup-user.png","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.512Z","timestamp":1784553134512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/images/popup-user.png HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 34640\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-8750\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34640,"size_decoded":34977,"mime_type":"image/png","magic":"PNG image data, 202 x 192, 8-bit/color RGBA, non-interlaced","md5":"5993daa16d13ab7c5c3cd5a5f445fc37","sha1":"af3d4944ded47b997a2073226c9f189a4691238b","sha256":"248ef12e3a3f0e871b749d9e4e3b0ab71845658c2ee7b81967016b52132ed3c5","sha512":"51df128e7521349351bdfde977159197fab8d2a2539ae7b10e56c17c0f608ac874a6f2fe514e4faa10f6249e7badec6d781e83a0eb5f655fb26fd8d6c11e7bf7","ssdeep":"768:Uyu4Dz0AT7SC54J/JZGYq/ECznf0/F+H4J8yS0LajK8Limxon0g:UyfTC9wd/ECfh4J1S4YomxZg","tlshash":"76f2f14256061ba3ae9aab50f4d7a6f2cfa4639490105479dd4bd8c322df2c05afcf78","first_seen":"2026-07-20T13:10:05.544969Z","last_seen":"2026-07-20T13:15:27.577985Z","times_seen":7,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":735,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/20.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.532Z","timestamp":1784553134532,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/20.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2866\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-b32\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2866,"size_decoded":3202,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bdd3efce527fb2bd7dd4698c98577c96","sha1":"f44f52990ba003d6b3242d6ebf3967bfb111b095","sha256":"a7e404d690c9a273865891aa0d870d14863ab06cc82b003005f2cd8792af9ee1","sha512":"a75f509b999a61f7eff9ea7219cd9d84b5af0e8d93f5ed31aa6c0fd1ee21d50b9c3ccf8b1e9ce40cb1cc48e9597dcf86c10e2b0a8b9d3dd11c2b9562f498fef8","ssdeep":"","tlshash":"d4515e0d887f211879197eb60793c84aa315871fc6c4879595be5bb302bcf1132ca5fd","first_seen":"2025-07-11T09:50:30.043916Z","last_seen":"2026-07-20T13:17:24.119156Z","times_seen":97,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":278,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/2.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.533Z","timestamp":1784553134533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/2.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2820\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-b04\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2820,"size_decoded":3156,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x103, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3952b7b75e024c358d8a3483f529873d","sha1":"d9c1bad237bd38dba293519dc1020e961c95ef57","sha256":"66b192ae97a57ed17159cc232bd74bef04f70a405757de4343f8e485768724f2","sha512":"9736db3609a1e98fc0018c3aeb07f17eb51b5dad7fc7128487c379f7ce6970abd61100aabca51d6cedf7e65326c59808a8a6a228b883514eef45ee23e6fb795e","ssdeep":"","tlshash":"11516d17e4da5ab84a34914ee5d076866c336b12fe8464d41d00cd253a0c51dcef26e8","first_seen":"2025-06-06T16:30:55.402381Z","last_seen":"2026-07-20T13:17:24.12497Z","times_seen":99,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/22.webp","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.535Z","timestamp":1784553134535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/22.webp HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2918\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-b66\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2918,"size_decoded":3254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 98x99, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1cebe28b1bf363dc0261a0728e929ea0","sha1":"65414308acfe6a4825e4e4d3694fa36cdb66199b","sha256":"bea955808739856093ebde248b73aafc46629244db4d0c6eac866f2ae08d5530","sha512":"fa0e6a900dd8303ca86a3fbf22f57655f8f4dfec2cc6f337cb8e2ef5d48c920c51cfbdca7cb432af3ef75e34c696bc866e241a2e8512ba16f8a509a701d6e9e4","ssdeep":"","tlshash":"62515a801942b742ca138f4b2c6eae8d14c5f202685974e5b8e4c7b8d877a84eb50e7d","first_seen":"2025-06-06T16:30:55.413594Z","last_seen":"2026-07-20T13:17:24.131364Z","times_seen":98,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":719,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/w1.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.514Z","timestamp":1784553134514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/w1.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 137975\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-21af7\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137975,"size_decoded":138315,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1277x1280, components 3","md5":"7e39efa8f8e3e8d713c94d6939eca911","sha1":"cfe57ea239aec95e9736c9848a192470517e8080","sha256":"bc8776685f53cf8166c5b5f5a77ddc71993ddfdd5b1c554829c72188bbfd226e","sha512":"9a355fbcfcf95c99be73547d8bb92d195e2f64d153240d5f0772a3e0b7bf553971dfd7a85042e2ce4701688ae637900da51422c24cfae3807253917f3facc27b","ssdeep":"3072:88qSBPQW9tw3nPrXFD1RU/YlzRncWdWL2Qw33S8bWJ0FPQqv7AY:8RSZ9Mnm/uzlcWEhwHhyCZrDAY","tlshash":"11d312918bd379c2cbae5c218cc9e7d85fa4e4bb0d9210da1ecba1a4097397d90d124f","first_seen":"2026-07-20T13:10:05.546475Z","last_seen":"2026-07-20T13:15:27.60661Z","times_seen":7,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":129,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/fonts/Roboto-Regular-79e851404657dac2106b3d22ad256d47824a9a5765458edb72c9102a45816d95.ttf","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:15.401Z","timestamp":1784553135401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/fonts/Roboto-Regular-79e851404657dac2106b3d22ad256d47824a9a5765458edb72c9102a45816d95.ttf HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564; PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 534\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-216\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":534,"size_decoded":883,"mime_type":"application/octet-stream","magic":"HTML document, ASCII text, with very long lines (404)","md5":"cc03dff6338f5cceb498b154bd03cdbb","sha1":"2145257fdf7277b30cea44cc6ae3698dda283de0","sha256":"96421f900889330055c2d542e1ab8211f535764b0c0dcf562e190cb36f4a48f6","sha512":"c6f3457954ff13e55fe0f33f7def817005307d07e32f58fb9357b06a2c224069db6c5e24d42665d75434be759bb256b31c9d5aac1300244440c5d935616ca985","ssdeep":"","tlshash":"52f0be9faf12207b2e238571f4c32169cf680a6beb9925d28749011f72ce04188f5fa9","first_seen":"2024-02-24T17:03:08Z","last_seen":"2026-07-20T13:17:24.103621Z","times_seen":93,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/css/styles8ca58.css","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.480Z","timestamp":1784553134480,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/css/styles8ca58.css HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/css\r\nContent-Length: 2558\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-9fe\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2558,"size_decoded":2892,"mime_type":"text/css","magic":"ASCII text, with very long lines (2558), with no line terminators","md5":"df2a17a81737ed8e2487ff35b6e10d96","sha1":"fa19780066b4fc3fce0ac7048363bb0d3692867b","sha256":"20306ad8bfdab4326dec6353d35553fa600d49a625377bbe2ea66408ea8ba766","sha512":"fcb5ee9c7828f1a704532f86be75269171432d3b9783ff6e34effac9ed30d7422a0088940d7885bdc5440fd3742e42d287be10f17008a0808a81ee9072422b61","ssdeep":"","tlshash":"805149c115ba2aae956fd13c6d99c2ad3078c066ef0706bed079e93887de8c24337545","first_seen":"2026-07-20T13:10:05.5511Z","last_seen":"2026-07-20T13:15:27.584798Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.481Z","timestamp":1784553134481,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/css/application-157e394980e69b479049cd6fa9c713046e284601933b5a81c369f7846d1776b1.css?v=123 HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1d679d-aa33\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43571,"size_decoded":10558,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43112)","md5":"1df5c1162f722f02cca3718d0324c0fa","sha1":"3acecab0a3d875e24a0f9be4e4a62ac051f52bbe","sha256":"05ade537c434bd5310c472304ba6fe4762cb5607bacbd1c086af1ba833c2034f","sha512":"652e7ba6dfaf6148f8f1133d07eb475df9514a342dc8e5f4626dcc39beb79ecf0490a7879a11505965b1d86e04b59fe4b2242852d3492e6dc44028d53e9645f1","ssdeep":"768:kHZscr2HpQaDf+1LYRe2tFJVKmTotPePFkKvazoYq:kHZsrHptDvaYKKvCq","tlshash":"a113d631d7273658e623e116f0d27ed8723da516fa120697f32aa43fc9e5842c779b02","first_seen":"2026-07-20T13:10:05.543707Z","last_seen":"2026-07-20T13:15:27.559336Z","times_seen":7,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":65,"send":0,"wait":76,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/js/jquery.bxslider.js","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.488Z","timestamp":1784553134488,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/js/jquery.bxslider.js HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:14 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1d679d-c57f\"\r\nExpires: Thu, 30 Jul 2026 13:12:14 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50559,"size_decoded":12315,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"703d1fcffc9a9e9e3e62e8127d929d3c","sha1":"3e6520092337cd79b29d3cfe61cb6a46df37fa14","sha256":"22fff7b8e0afa9d970f1a9b36b879ae1285ba992db8a290703b838d0aee16f5a","sha512":"abfeab3c07c9060dae40612318e431e4db7249691d6e6c6e802a2541b3a0835dc7b229304a69faa4030bb43711b4d5d95391d04e05a483a80f902981a57ed5b9","ssdeep":"768:WXE/gd1wzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOj:GEO1wOx1l/L2dy5oMnfNWVqCivA","tlshash":"b8335245e32c227e5566126cb28dcec4d7fd8236c82694b6eef0dd3ce18092901af9d6","first_seen":"2024-05-27T23:41:21Z","last_seen":"2026-07-20T13:17:24.135671Z","times_seen":50,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":62,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.494Z","timestamp":1784553134494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 13:12:14 GMT\r\nage: 3306115\r\nx-served-by: cache-lga21981-LGA, cache-bma-essb1270068-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 59911, 256162\r\nx-timer: S1784553135.528507,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":31521,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-21T20:21:48.915761Z","times_seen":262292,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":3,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growdrive.digital/lander/Zo9jqR/prelanding/w3.jpg","fqdn":"growdrive.digital","domain":"growdrive.digital","tld":"digital"},"ip":{"addr":"91.92.241.168","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growdrive.digital/","date":"2026-07-20T13:12:14.521Z","timestamp":1784553134521,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"growdrive.digital","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Jun 2026 10:17:43 GMT","end":"Mon, 07 Sep 2026 10:17:42 GMT"},"fingerprint":{"sha1":"E0:39:00:8C:17:C7:5C:EC:40:17:45:C5:A4:F7:81:50:50:BD:11:A8","sha256":"24:7B:F4:54:4A:74:26:33:AC:87:BC:C4:9C:32:AE:87:5D:FB:F4:E8:AA:C7:22:20:24:1C:E5:50:AF:11:75:82"}}},"request":{"raw":"GET /lander/Zo9jqR/prelanding/w3.jpg HTTP/1.1\r\nHost: growdrive.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growdrive.digital/\r\nCookie: _subid=18uumd05adj9v; 7a069=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjI3MTNcIjoxNzg0NTUzMTMzfSxcImNhbXBhaWduc1wiOntcIjEwNDdcIjoxNzg0NTUzMTMzfSxcInRpbWVcIjoxNzg0NTUzMTMzfSJ9.y5rpAi-bLmMR_wEhKw_ip8b8ndyOeTf9_eqTCsBue80; _token=uuid_18uumd05adj9v_18uumd05adj9v6a5e1eade98c01.38039564\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 20 Jul 2026 13:12:15 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 120966\r\nLast-Modified: Mon, 01 Jun 2026 11:06:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a1d679d-1d886\"\r\nExpires: Thu, 30 Jul 2026 13:12:15 GMT\r\nCache-Control: max-age=864000\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":120966,"size_decoded":121306,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 845x851, components 3","md5":"7b857a4e358112f760492f24db0661dd","sha1":"a4a512e543f056e39d990dee336c92aaa0a27852","sha256":"3a3132f81048655c3cd17afbce8c21457c6b0c8ec53322cc2c098cda070761c6","sha512":"be2b45ca7fd59545b543c0c22409e501fe3c8730106b13e7379ed0b2dff817c1fd200b8757c1f1383c6d4051b6057fe15e9ddd9e43f1d824c81119db8b7ff7f8","ssdeep":"3072:oJlqOdAdExQ5yRqRo4AypkrHy6OWjovDPhKN4k/CZIhsy:8oOmr59dkrHy6OXbYF/QIhsy","tlshash":"a0c31204d072a618e02a1f7ceed797b4f921b278c81ca3f979291d64c1c97c17e1ead2","first_seen":"2026-07-20T13:10:05.582047Z","last_seen":"2026-07-20T13:15:27.571335Z","times_seen":7,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-20","alert":"Phishing Block","trigger":"growdrive.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}