{"report_id":"25f0ac04-960e-4429-aba9-f35baea9ce58","version":6,"status":"done","tags":["instagram","meta","social","phishing","suspicious","telegram_bot"],"date":"2026-05-08T15:23:52Z","url":{"schema":"http","addr":"nubexx776.github.io/fishing/","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"title":"Instagram","dom":{"size":6715,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0e2bd127553f1a5169211c059db0e743","sha1":"9bcad8b7f67d7d2d7de0aa3951ee22e75d742787","sha256":"a211124c8510820dd551769be0d8929c9ab01ad1ac69f8d5f3dd7c50c7782d15","sha512":"8676d1148560887ba7b3b127cc5600faf14b353ae16f8971fbe8cfe036c44c6ea5860b4f22168fe2a99e59a69c3335237c9a860a5dfa69135bfe63917bc0e844","ssdeep":"96:MlqtV79tD6VeuSHSOlJDzA9YgFTmaJgTC8lY7D5txIcAxreI1GqhXszfBmHE:MlYVuAyOl9oryaqY7D1Wre4GIszpSE","tlshash":"09d1542231f5447b06a3a29d3e166b196c8380679a4e9e0432ad4f5f6fd6e028d132de","dom_hash":"domhasheffef2ed350cbc21513a618998c07f0e","first_seen":"2026-04-04T08:18:37.555189Z","last_seen":"2026-05-08T15:23:54.384289Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nubexx776.github.io/fishing/","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T15:23:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-08","alert":"Detects file containing Telegram Bot API","trigger":"nubexx776.github.io/fishing/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-08","alert":"Detects file containing Telegram Bot API","trigger":"nubexx776.github.io/fishing/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"nubexx776.github.io","ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-04-04T08:18:34.870286Z","last_seen":"2026-04-22T12:57:41.95902Z","alert_count":21,"request_count":6,"received_data":48210,"sent_data":2828,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-05-04T11:12:54.694919Z","alert_count":0,"request_count":1,"received_data":1337021,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-03T22:34:13.116124Z","alert_count":0,"request_count":2,"received_data":222852,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/script.js","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"md5":"8686107bf2d04c9ac0812253dc38b063","sha1":"c19aea9a59d330bed7140856bf3e9e6790103032","sha256":"a5305213d493a2e1f5c3002c9790ca8632bbd6fe68ea9fd6650fd5475b377585","sha512":"439e63d8170120f3170d8900508599b4180173be354a5b12c258db11e628917b1fa5249e9a259565bdf8f949876ad2a87cbbf2d3af95210c27ae9f36ca85aa76","size":4131,"token":"8724016003:AAENy9Qz7t457y5p3S3xj81eP8YT6OrRkUc","is_revoked":false,"bot":{"token":"8724016003:AAENy9Qz7t457y5p3S3xj81eP8YT6OrRkUc","user_id":"8724016003","username":"mashkaaa_12_bot","first_name":"umar","last_name":"","chat":{"chat_id":"6084087276","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/script.js","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8686107bf2d04c9ac0812253dc38b063","sha1":"c19aea9a59d330bed7140856bf3e9e6790103032","sha256":"a5305213d493a2e1f5c3002c9790ca8632bbd6fe68ea9fd6650fd5475b377585","sha512":"439e63d8170120f3170d8900508599b4180173be354a5b12c258db11e628917b1fa5249e9a259565bdf8f949876ad2a87cbbf2d3af95210c27ae9f36ca85aa76","ssdeep":"48:1gJYGXfgulGhtVcf/4qe6/Vk9gJYRXfgulaQhqe6bT2atsMgtvIi85SM:ughtVBqeT2/oqeaTdsvlmcM","tlshash":"0f810e75716b08250e7392ab56974b0ef6ed9527694193043e3ccb092fb6d8184329ff","size":4131,"data":"","first_seen":"2026-04-04T08:18:37.5597Z","last_seen":"2026-05-08T15:23:54.388988Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-08","alert":"Detects file containing Telegram Bot API","trigger":"nubexx776.github.io/fishing/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T15:23:29.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/ HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Fri, 03 Apr 2026 13:16:17 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69cfbda1-1b21\"\r\nexpires: Fri, 08 May 2026 15:33:30 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: EA54:182DF2:75A2A80:76D88A5:69FDFFF1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253810.999072,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 26ac570c57bb1ba01152232a525eb44a68ae2415\r\ncontent-length: 2493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6945,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2a69d5202b11bdc9e0d0637a6b04f043","sha1":"fe9ea67d2025cf18ba344408323b32c5455dc20d","sha256":"dadd48a76d552fa1360af3828047ceb035c3dc6dcf691f2ffefbfc083024cf2e","sha512":"20e0b8d2d382c0a8e2b062f92df78b118e82ba3f7f585864eaf22bc673265a44500241372e0832b076316dd838246cb3e3588913c819758603ae8a7c324bc42e","ssdeep":"96:OtqSoI9s/Dj+3SnSilJ1/AmYbFT1GJbEx8SYCZ6YgxWAxxsfo1NqSbsP6vEl:OtForVSilvpMBG+YCZ6jnxswNnsP5l","tlshash":"b7e1216231c5482b0673e25d6e156b1dfc828067ab4a4e0432ad5f5f6ff7e028d132de","first_seen":"2026-04-04T08:18:37.556711Z","last_seen":"2026-05-08T15:23:54.385894Z","times_seen":3,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":60,"dns":1,"connect":26,"send":0,"wait":166,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-08","alert":"Detects file containing Telegram Bot API","trigger":"nubexx776.github.io/fishing/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/style.css","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/style.css HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/fishing/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 03 Apr 2026 13:16:17 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69cfbda1-149a\"\r\nexpires: Fri, 08 May 2026 15:33:30 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: B4DA:1519:54551DA:55341CA:69FDFFF2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253810.312404,VS0,VE135\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 01a5cb5cf8f920c71c31368ce79d6ea72a01a9e7\r\ncontent-length: 1458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":5274,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"606236ced2549c319248417ac72eb4f7","sha1":"26136aa0710b933cb69b833a6f8bfe5d906489a0","sha256":"eb8b37903468f864eb36c64179c86a5d1029f66d292d9a652eb638106a54611a","sha512":"62d79b6cd7934e2809f85d3c7c8d21891a6993b8ae12d487aa648bf71fc055739db940ea1940eee9b1d658111f2c9ca00fed6af52e5e3c6cdf955d1bf2a872b6","ssdeep":"96:xohCbqSZigWsgWVBLvXFnX0w8SbQMMatRFapzYtlz4PUv4ry:x8COSZjEWVBLvXFX0w8SbQMTt+pzyd44","tlshash":"d4b10f9cd54611076233aeb82bf14501fad490334b0632b97ed922449ffa6b883a1fdd","first_seen":"2026-04-04T08:18:37.55773Z","last_seen":"2026-05-08T15:23:54.38732Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/a/a5/Instagram_icon.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Apr 2026 05:51:37 GMT","end":"Sun, 12 Jul 2026 05:51:36 GMT"},"fingerprint":{"sha1":"62:23:EE:89:97:A6:C1:A5:65:7A:8F:23:C2:68:CA:70:93:B3:AA:FF","sha256":"5A:21:64:0C:22:9B:01:A0:D2:BC:CA:02:4F:E8:51:ED:BA:CC:51:27:0E:87:6A:6E:E6:0D:88:64:AB:D1:3F:30"}}},"request":{"raw":"GET /wikipedia/commons/a/a5/Instagram_icon.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 14:06:08 GMT\r\netag: 26d9974a1feec9905a4e0d5e5ddf8db6\r\nserver: ATS/9.2.13\r\ncontent-type: image/png\r\nx-object-meta-sha1base36: 64xlcouvih6xxskn56a47rvpplgdfww\r\nlast-modified: Tue, 12 May 2020 14:13:47 GMT\r\ncontent-length: 1335709\r\nage: 4642\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/2817\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=4-MMgIwT7v2PAjhA10FoKwNaAAAAAFvdoogSYy3nJ0In2gIQjwDAHrefzGj0-BBK;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 08 May 2027 00:00:00 GMT\r\nx-request-id: 73a110bf-0623-4948-b69d-36b25306ba11\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.13","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":1335709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5001 x 5001, 8-bit/color RGBA, non-interlaced","md5":"75c9ecdab121dfa8cc17274c4deebd20","sha1":"265e8557c9a49b697a84b77367decec9959bacb4","sha256":"4007695e64c8a83b51eee847712d3c4265b4617697413c5c23199b9af9b1b3b9","sha512":"8a8f0070446811dbf1b5ef4f3c27e57673acf33e3c3c7d0bd062faeb7f2211011a45a2f0b6d2a7fae77cda0226b1a9a87b0d15da495b3b98fde42f1745af0bd0","ssdeep":"24576:mIvf+FYUVHLcPMWwMLYbHWGuB4A2xMBCWcDpllTTSMXt:XOyUCkWwMEb2GuBX2xMBHQDlTvd","tlshash":"8f25233e93460de9c9a91bf4eddb0f8037b8029c02612b4783bee1699d5b31df193991","first_seen":"2023-05-21T20:10:34Z","last_seen":"2026-08-07T14:42:00.346079Z","times_seen":372,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":39,"dns":3,"connect":18,"send":0,"wait":34,"receive":132,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/script.js","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/script.js HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/fishing/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 03 Apr 2026 13:16:17 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69cfbda1-1023\"\r\nexpires: Fri, 08 May 2026 15:33:30 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 910A:1518:3904288:39981FE:69FDFFF2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253810.317308,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c8213aac9ccb205295f009556b7bb88511de654a\r\ncontent-length: 1136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":4131,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"8686107bf2d04c9ac0812253dc38b063","sha1":"c19aea9a59d330bed7140856bf3e9e6790103032","sha256":"a5305213d493a2e1f5c3002c9790ca8632bbd6fe68ea9fd6650fd5475b377585","sha512":"439e63d8170120f3170d8900508599b4180173be354a5b12c258db11e628917b1fa5249e9a259565bdf8f949876ad2a87cbbf2d3af95210c27ae9f36ca85aa76","ssdeep":"48:1gJYGXfgulGhtVcf/4qe6/Vk9gJYRXfgulaQhqe6bT2atsMgtvIi85SM:ughtVBqeT2/oqeaTdsvlmcM","tlshash":"0f810e75716b08250e7392ab56974b0ef6ed9527694193043e3ccb092fb6d8184329ff","first_seen":"2026-04-04T08:18:37.5597Z","last_seen":"2026-05-08T15:23:54.388988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-08","alert":"Detects file containing Telegram Bot API","trigger":"nubexx776.github.io/fishing/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/img/google-play-store-app-on-transparent-background-free-png.webp","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/img/google-play-store-app-on-transparent-background-free-png.webp HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/fishing/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Fri, 03 Apr 2026 13:16:17 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69cfbda1-41ce\"\r\nexpires: Fri, 08 May 2026 15:33:30 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 1F5C:26F5EF:78BB481:79F1AD3:69FDFFF1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253810.316593,VS0,VE145\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a39e23ad6a8f3cc564eccda4e7c00569d3cdd81a\r\ncontent-length: 16846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":16846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e60e7cf9a51754a9cb5e8e7b820b4b1","sha1":"740e2923f7234ff13e6988e41daf7876ceaf2342","sha256":"a80d954faa749e1bafeeb487c9fc9231653207660ae73794c335b97ec60bf756","sha512":"74d289979fc5522d68baab017b75ef7459eca97208b2b3da33b3fcab466e331e81cdb49119d511cef6256a537b3e4f8cea908cd8cde333a58bddb97256cd7b74","ssdeep":"384:PPNwuBE1w9eDgDVxG/zbAAAmSv4rs0bcsa9O:PPDKS9HxGL0hf0wn9O","tlshash":"9772d04a5839364fdcdb9f9473ef869a46f60a710ec42a7a990c76230ca535840e7c4f","first_seen":"2026-04-04T08:18:37.560734Z","last_seen":"2026-05-08T15:23:54.390381Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/img/insta-fav.ico","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/img/insta-fav.ico HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/fishing/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nx-origin-cache: HIT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"64d248ca-24a3\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: BFB2:1526:65822F6:6696C1C:69FDFFF2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253811.547702,VS0,VE127\r\nvary: Accept-Encoding\r\nx-fastly-request-id: af0c2d9d7601f77b23bb57d4462c23f81cf000e0\r\ncontent-length: 5254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9379,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"c1f9838a645648cb3b25359f7890a288","sha1":"0cf12d25140e329bcb4c304feefce63f8f0ba7b3","sha256":"b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368","sha512":"385898ec5d1ce3d13e8169945128724f6717cc35cec01d642b90046f7e03dd28a688771ca84ea53b81c8ef8cec8c1e28012c37732b80d1278a233468514a13f3","ssdeep":"192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN","tlshash":"5a125c7f19e93705d8028e1539f227993d65840f9a866f6eb9ad1312cf8ed10e1a37cc","first_seen":"2023-06-17T01:23:25Z","last_seen":"2026-08-08T07:30:29.661558Z","times_seen":19036,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nubexx776.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"660cc074-49fa\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 219520\r\nexpires: Wed, 28 Apr 2027 15:23:30 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IU4Glb18eBib5440jKEZFbFTP20S3U4PqP3hWBFZWJwgTcAr8X9tk4Y4WxOkDwFlzAf4h2z5T%2BsZyrBwCCOSkJZQefwHT0tznvdPXMdQPMzrQTDvnAXUZh3711y4uG1HkqqPichM\"}]}\r\ncf-ray: 9f89774a6a71b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-08-08T08:17:23.682049Z","times_seen":12529,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":7,"dns":0,"connect":1,"send":0,"wait":6,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nubexx776.github.io/fishing/img/i.webp","fqdn":"nubexx776.github.io","domain":"nubexx776.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /fishing/img/i.webp HTTP/1.1\r\nHost: nubexx776.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nubexx776.github.io/fishing/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Fri, 03 Apr 2026 13:16:17 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69cfbda1-546\"\r\nexpires: Fri, 08 May 2026 15:33:30 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 0D3E:26F5EF:78BB481:79F1AD2:69FDFFF2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410026-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778253810.313870,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 613b1e000b91708d69a0c24dbdf244d33f95adaf\r\ncontent-length: 1350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 480x270, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8099a89e43278e1c7004202bd46a83a7","sha1":"196e6f380b1c26569495a20b891006bbc2089da2","sha256":"ab864d8d77ebdfd59cbcd34c4f0d40fd06e62e14353240b2e9aa14ea14b44d7e","sha512":"7c27ac16b3131363b52db74e2a7e95050b5d87d6f2e003f7715086e04d5b7f7eb445a24076c14bd09834c5f1b1d119f2604e49ee8729b60fc245395d88deba33","ssdeep":"","tlshash":"b021cb6dac06440be41988387c9a47850826bf6fb764e2313c887ef81d3319a795f31f","first_seen":"2026-04-04T08:18:37.558716Z","last_seen":"2026-05-08T15:23:54.392778Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"nubexx776.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"nubexx776.github.io","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nubexx776.github.io/fishing/","date":"2026-05-08T15:23:30.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nubexx776.github.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 15:23:30 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 117852\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-1cc5c\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 33096\r\nexpires: Wed, 28 Apr 2027 15:23:30 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3n%2FSd2OETzRaNM%2BrDg9b2n780NJI0WqdVylLT5wZwg2DhM6VbyqmQJL19TCMHlqXxd4Qbjm18pw4kEMQIhG8681z2aFF9q4XpnyZGEwRR%2F%2FiNZZ5ljDdsflPoaTFid7w5eNmgzw\"}]}\r\ncf-ray: 9f89774bae30b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":117852,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 117852, version 773.1280","md5":"b55b1345f0b919f0cab774ec25d6654e","sha1":"c39dd7c713983702de91b08ae00b194b0bdb9008","sha256":"232c6f6a7678304f9efaa26f30b1610debc2ba9f4cd636b5e6751c8d73761b92","sha512":"793756b3bf0e21181d06f44593a99a1986b90db4704f4765d4a1e8937acf3d1d38a750c6d6082545bbc80c04fc8dc03da5ab2b4a3f31b7f2345751050df115fb","ssdeep":"3072:Rs3c1iEht0b6W85CbPgRgaCMtsWOwydzrCyzhRaLZTBlZsEmOQadt:RDik3CzS8MtDOw+XaXZ8Of","tlshash":"74b31251ac7bce3f72b16c584a42db8aa3c4a3c9e3c174194eab3dadd11682e71d8d11","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T08:17:23.692173Z","times_seen":9518,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}