{"report_id":"47bd06f6-8e67-4c4b-97d2-f6cf427b745c","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-03-01T19:53:26Z","url":{"schema":"http","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"title":"Instagram","dom":{"size":51575,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51565), with no line terminators","md5":"7dc862ae45b4bb8ed22f63187d058d98","sha1":"92428e54bf975b53f822112b76a0ace21f425e67","sha256":"4ab413d9e201b9cd2b38c1148679b9ba5ef74f581f5cf4f8f937cb5764b60d86","sha512":"a379d4b2783d2c00920f259f36e01c2e8c51df2671ebef5f04951444a4f73c0f6b9715f371ce5c1016de128a555b4bcb5866c1f48fe988edbbe71dc19e7f7501","ssdeep":"768:23fqWua2KdYbTo5FI/5hACQbRQ7bix4ghbyENR7qw2i5TVVI:k2KdFFI/5OTXnS","tlshash":"c83374319041e8baed6f7cc4203e9e3a709ad16f8f55cda5d3ece9644286c3a7b524c1","dom_hash":"domhashfd512e56f4685ae4444c200a8089c583","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-05T19:53:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":5,"urlquery":2,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-01T19:53:04Z","timestamp":1772394784,"ip_dst":{"addr":"Client IP","port":56888,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"severity":"medium","alert":"ET PHISHING Observed Let's Encrypt Certificate containing Instagram","source":"{\"timestamp\":\"2026-03-01T19:53:04.579959+0000\",\"flow_id\":624490813887817,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.56.87.55\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":56888,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030619,\"rev\":2,\"signature\":\"ET PHISHING Observed Let's Encrypt Certificate containing Instagram\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_07_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_07_30\"]}},\"tls\":{\"subject\":\"CN=instagram.thelifestyls.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:D5:19:46:39:15:A0:A2:D6:D2:69:34:75:4B:D1:20:BA:AA\",\"fingerprint\":\"a7:ee:87:31:92:3e:aa:98:10:11:30:e3:a7:91:cd:d7:f0:6d:52:d5\",\"sni\":\"instagram.thelifestyls.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-23T23:38:03\",\"notafter\":\"2026-05-24T23:38:02\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":3513,\"start\":\"2026-03-01T19:53:04.103753+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-01T19:53:04Z","timestamp":1772394784,"ip_dst":{"addr":"Client IP","port":56876,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"severity":"medium","alert":"ET PHISHING Observed Let's Encrypt Certificate containing Instagram","source":"{\"timestamp\":\"2026-03-01T19:53:04.584916+0000\",\"flow_id\":47865684595767,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.56.87.55\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":56876,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030619,\"rev\":2,\"signature\":\"ET PHISHING Observed Let's Encrypt Certificate containing Instagram\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_07_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_07_30\"]}},\"tls\":{\"subject\":\"CN=instagram.thelifestyls.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:D5:19:46:39:15:A0:A2:D6:D2:69:34:75:4B:D1:20:BA:AA\",\"fingerprint\":\"a7:ee:87:31:92:3e:aa:98:10:11:30:e3:a7:91:cd:d7:f0:6d:52:d5\",\"sni\":\"instagram.thelifestyls.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-23T23:38:03\",\"notafter\":\"2026-05-24T23:38:02\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1252,\"bytes_toclient\":3513,\"start\":\"2026-03-01T19:53:04.103479+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-01T19:53:04Z","timestamp":1772394784,"ip_dst":{"addr":"Client IP","port":56902,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"severity":"medium","alert":"ET PHISHING Observed Let's Encrypt Certificate containing Instagram","source":"{\"timestamp\":\"2026-03-01T19:53:04.589047+0000\",\"flow_id\":621003300443675,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.56.87.55\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":56902,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030619,\"rev\":2,\"signature\":\"ET PHISHING Observed Let's Encrypt Certificate containing Instagram\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_07_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_07_30\"]}},\"tls\":{\"subject\":\"CN=instagram.thelifestyls.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:D5:19:46:39:15:A0:A2:D6:D2:69:34:75:4B:D1:20:BA:AA\",\"fingerprint\":\"a7:ee:87:31:92:3e:aa:98:10:11:30:e3:a7:91:cd:d7:f0:6d:52:d5\",\"sni\":\"instagram.thelifestyls.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-23T23:38:03\",\"notafter\":\"2026-05-24T23:38:02\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1252,\"bytes_toclient\":3513,\"start\":\"2026-03-01T19:53:04.103963+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-01T19:53:04Z","timestamp":1772394784,"ip_dst":{"addr":"Client IP","port":56894,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"severity":"medium","alert":"ET PHISHING Observed Let's Encrypt Certificate containing Instagram","source":"{\"timestamp\":\"2026-03-01T19:53:04.594239+0000\",\"flow_id\":1020967834916262,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.56.87.55\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":56894,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030619,\"rev\":2,\"signature\":\"ET PHISHING Observed Let's Encrypt Certificate containing Instagram\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_07_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_07_30\"]}},\"tls\":{\"subject\":\"CN=instagram.thelifestyls.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:D5:19:46:39:15:A0:A2:D6:D2:69:34:75:4B:D1:20:BA:AA\",\"fingerprint\":\"a7:ee:87:31:92:3e:aa:98:10:11:30:e3:a7:91:cd:d7:f0:6d:52:d5\",\"sni\":\"instagram.thelifestyls.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-23T23:38:03\",\"notafter\":\"2026-05-24T23:38:02\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":3513,\"start\":\"2026-03-01T19:53:04.103846+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-01T19:53:04Z","timestamp":1772394784,"ip_dst":{"addr":"Client IP","port":56880,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"severity":"medium","alert":"ET PHISHING Observed Let's Encrypt Certificate containing Instagram","source":"{\"timestamp\":\"2026-03-01T19:53:04.600105+0000\",\"flow_id\":2142280716686526,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"45.56.87.55\",\"src_port\":443,\"dest_ip\":\"172.18.0.35\",\"dest_port\":56880,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030619,\"rev\":2,\"signature\":\"ET PHISHING Observed Let's Encrypt Certificate containing Instagram\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2020_07_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2020_07_30\"]}},\"tls\":{\"subject\":\"CN=instagram.thelifestyls.com\",\"issuerdn\":\"C=US, O=Let's Encrypt, CN=R13\",\"serial\":\"06:D5:19:46:39:15:A0:A2:D6:D2:69:34:75:4B:D1:20:BA:AA\",\"fingerprint\":\"a7:ee:87:31:92:3e:aa:98:10:11:30:e3:a7:91:cd:d7:f0:6d:52:d5\",\"sni\":\"instagram.thelifestyls.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-02-23T23:38:03\",\"notafter\":\"2026-05-24T23:38:02\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1113,\"bytes_toclient\":3513,\"start\":\"2026-03-01T19:53:04.103614+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"t0.gstatic.com","ip":{"addr":"172.217.20.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:22:05Z","last_seen":"2026-02-27T01:11:52.407924Z","alert_count":0,"request_count":1,"received_data":338,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":1378,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2026-02-25T17:48:50.40801Z","alert_count":0,"request_count":4,"received_data":17427,"sent_data":2084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t3.gstatic.com","ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2026-02-26T03:35:00.963Z","alert_count":0,"request_count":1,"received_data":3795,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"socialtrends.online","ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-07-01","domain_rank":0,"first_seen":"2026-03-01T19:53:27.355736Z","last_seen":"2026-03-01T19:53:27.355736Z","alert_count":165,"request_count":33,"received_data":613031,"sent_data":20544,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]},{"fqdn":"instagram.thelifestyls.com","ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"2020-06-11","domain_rank":2409497,"first_seen":"2026-03-01T19:53:27.360645Z","last_seen":"2026-03-01T19:53:27.360645Z","alert_count":0,"request_count":5,"received_data":26977,"sent_data":2445,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-22T22:20:46.526035Z","alert_count":0,"request_count":1,"received_data":457486,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"t2.gstatic.com","ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2026-02-26T01:16:37.377609Z","alert_count":0,"request_count":2,"received_data":7319,"sent_data":1042,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/page-7e0b12fc1b553316.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"060406c7aecbb707aac3a2ec4a7362ee","sha1":"0e7afa620f605ea5858eaee439d4388b05e7433c","sha256":"43732201492e3d9a4635154be0f717223c2b9c0d94636caa6757817a7d6cd209","sha512":"b479491e86f516c63d96cb1b8e26ff051537216875d0edc83bea15ef952258e0519f10210a436afdcce2f8d7ba9fce30a37554786f2ade1cde16317861a0bbbe","ssdeep":"96:7plahbz3+kVo+JP3Cd9ST7F1+vlURgKryOhTobQ1Og59fhoC6:vaBBo+JvYSb+veRDrdhTobQMg59B6","tlshash":"59c17408b0d4fbf8956b2ca8d13fe81e303b6a5458051872f6b9ec912c75198b227fdd","size":5638,"data":"","first_seen":"2026-03-01T19:53:32.259079Z","last_seen":"2026-03-01T19:53:32.259079Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/webpack-a8126fcfe66063f3.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f39db4126dac928436d450e1e65f873e","sha1":"4b67fc9a2407bc8714b8945d91063a32ba57a2c1","sha256":"72e91db3cc0eda31201041636361dd0c80ca6d7ba1122823bc51bc159cb7ad44","sha512":"888933c113c922a9fcc978856accb2168435326bd75f2b953cef00eb30bd4bb00fe5e6ffaa6732bcbe696dec21ce00732ff0ae92220529fd52a33983bc366443","ssdeep":"","tlshash":"2f7185dd71a1f9ba1783a4a1043f955af23f28b6281ed4e0cb25d4f5fc355498223fa8","size":3595,"data":"","first_seen":"2026-03-01T19:53:32.25015Z","last_seen":"2026-03-01T19:53:32.25015Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/648-15aebc83bf08fe7c.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae9b9f208c27c853fc5b2fba055c64e","sha1":"3a4f83dcd3599c5881cfae6f4165057b5754d123","sha256":"4facc49513acce99187a07bde92c8fcee2cb0b92740b1b24e20c7125d527fa40","sha512":"f813ec8aeb7f473c50d2aa2ce64cc1b88641c4ddd6c4a11168ab116799ca46c4be62e5caa0c89f62193fcaf70af06f202f152354e4b22a60e67033fb339bbb65","ssdeep":"192:TG792rPK9vPxWOsU2BjyhwSozFDYDFIaHibtkz20ocFRFrYQu4BTGKdkG:ToSPK9hsd8PAtP0ogS4NnkG","tlshash":"d9520ab731d4f8e6138a80e1947f000df3b55c75622ab14867a4c8d9eab0198e162fba","size":13723,"data":"","first_seen":"2024-06-29T14:43:52Z","last_seen":"2026-07-20T03:32:08.724469Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-07-22T10:44:02.888237Z","times_seen":98783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6429183420b842ddc015b8b60ff8376","sha1":"b10088b07e7958488aeaca408491e621edc3389e","sha256":"f13d6851e5bf2571b134622e1f168a0b21afad45637d25c4b9f4af52edcd8cf6","sha512":"468e409a65d3c3ffe9449ec49374c29ef44af9a4dfe6760d21aca018eed5c5723cdaa9cdabdbd4910d3fd7eddd88796a3788a55946481706352763d8706979f6","ssdeep":"","tlshash":"a5e0866cf846eca64c61ac09203a0f24d0c8df6d53e5849c639dcecb81119bc1389e8a","size":320,"data":"","first_seen":"2026-03-01T19:53:32.275134Z","last_seen":"2026-03-01T19:53:32.275134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c64fa720817c62588906f9793243f06","sha1":"748667a483afa33b6859dedf4b3978084be56094","sha256":"d64be71d41969696b7784a0886c8b80bf277a1f8927362531dc602e6f6c9cc10","sha512":"765890b87a55ec57591bb87e054f1db496cf4d0e8b987dd6042748e120c5c7882cbcf446a9c12f46e8415e029c4a8b3a15ecf314035d46425bb49fd53c561ca2","ssdeep":"","tlshash":"fb01d22ef1d0e5423892cf2e81b71f614489fd362638d0cca02df1eb435997b47a8c80","size":779,"data":"","first_seen":"2026-03-01T19:53:32.275869Z","last_seen":"2026-03-01T19:53:32.275869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/bio/page-f7899ddbd68d909e.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"53ef3c7b849751c3f22d6ce3737f63f2","sha1":"9438ec9a21fbfac0c5db9161b36f59cde259938c","sha256":"3a000a5306ae95259d3fb7960cb119cfae33c06b4b41b9aa9a92e2e46b19faf9","sha512":"6d2ed73e1484e92154ed4ba04a1a4ee7bb42b8e8a1045e25c05df494ae998f3b1623a713ff3bfd9dbbfebb69dfa1c79a7f5b4c79df527b50bb9e4713c729af37","ssdeep":"","tlshash":"7241859df289fbf4e1bf14d4c23f984d707b1a58891804623aace0c12878598b363f9c","size":2296,"data":"","first_seen":"2026-03-01T19:53:32.242269Z","last_seen":"2026-03-01T19:53:32.242269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/layout-42b982a86778ad6a.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"bad254baf03fd5d87cf8874f3e843236","sha1":"a0a0ad2156e5610d19a7549c21a275fbd95c1e26","sha256":"54377426c7c6ffaefa17e28151e890efd74f358bc489d0ed50965375571e4ead","sha512":"d83355af24124fd69616ca10afb6d67236e58cb3bcae85e69cc07280c84a037755658b717a22c44019b9b33aab4dcc5f83cc16c93aeaf289c7c48579a0e3397b","ssdeep":"192:p7/QWUYbjtEg1G1bfGoJOYpHFXipoiDjqaG+5O7jdn173Q5GiQzWgyU2i+tsO6:1CYXKDGojRUqfrsGiiWgyU2i+to","tlshash":"3c12096979d8fc7a1b5b04e8d47f914d716a2839001e2880e7b9ece56036edd61a3fcc","size":9728,"data":"","first_seen":"2026-03-01T19:53:32.266633Z","last_seen":"2026-03-01T19:53:32.266633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HHXLSWND7K","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc6dfa8e1acb0838cb7f0df4f733d1e3","sha1":"6147ce2609815f507f133094fe6b397fe410a61f","sha256":"eda148b81a5eaec1abe6c0835b2d771a64f1cc818f9360e351a666b15b02a0b4","sha512":"da1ee10b6d6cdfa83d0f5ecb22dca3eebfe496f780d0564a513857d8d571d910beb789418cab302976e7925e0319264b864d8d0d380df8fcbd2e5154159feff1","ssdeep":"6144:jA7OOW4po5W+MMZH9CyF8QyZbTxRMlKEmxosJC/gMAIkV:Cffpo5W+MMZQ+87xoytP","tlshash":"aea42bce73d674225396f478903f018ba57b64a2b48cc89af189cce46e7469a4137f7c","size":456882,"data":"","first_seen":"2026-03-01T19:53:32.246369Z","last_seen":"2026-03-01T19:53:32.246369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/main-app-126574aaf4387276.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a96646041d90c8295db1f8531806d298","sha1":"1980ac97fe21e1f76bda27d6176469d5f24f3527","sha256":"67c3e4393c44ab1874aaf8ea7bd7d3d54025e03af156a5f0ab98b9e750b6b8a9","sha512":"b823768ec2bbfd46bf351e6a1ca10b8cb3fad718b5d30bcfe5ae4813766ade990adf2f27b598f7e65d6082f7fed037f0969fc2c8a30c6f9bd68578bcb1349b52","ssdeep":"","tlshash":"5ff0829d274db02f2923ae20fed35c2e296e417428675d501615ddb12c3766cc7f1c38","size":462,"data":"","first_seen":"2026-03-01T19:53:32.251024Z","last_seen":"2026-03-01T19:53:32.251024Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"92fc0a62b3089b926777885b2f7ceef1","sha1":"aafda52fe0ce94bb6c835f09b2b76d33521458d4","sha256":"9a694b5a05b7f124ca76fd9ff69c2d0a292b26ad3bdcb04da583615d0e90b6e8","sha512":"892837e0bc757b5db5c4cbdff7710d53b68805e668bdd876935ae2957d55fc61dc60587fded947744b77ba2f25e23acbd82d4744456af0faeab0bbaf75aae509","ssdeep":"","tlshash":"de51767e640acd5aec697c45053dac3a60ce85af0691eef5829dce140a4387a378aec0","size":2794,"data":"","first_seen":"2026-03-01T19:53:32.276631Z","last_seen":"2026-03-01T19:53:32.276631Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5d85c5472eafc00636ff5ace04cda7c","sha1":"aebc5d96f347b7dedd1fdefc4723f745c354b42d","sha256":"f1665c6dec1a6377b6198e694b3306eda7673dca21e3031934093f4b6aaf39e8","sha512":"a9d8fcd978c631e460a571da88a7b8089757450eeabc8cded2f998ca5840116ce7cd5cb43c4a94d4f4751255e2dbeca41b2975b1b85a7c304f37bd01849e889c","ssdeep":"","tlshash":"f501cb55ac01dd0dcf4fbf2619be1c3820dcc2aa06d4999aa3c4cd120693d381ad2eca","size":743,"data":"","first_seen":"2026-03-01T19:53:32.277319Z","last_seen":"2026-03-01T19:53:32.277319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3f87cdd027940271ed23fb49862ac3f","sha1":"9f1741d8af76a774758605ae5cd1926b3f38948b","sha256":"4af8011dc34f65c15733760c0cc90d473f31c9f69b0b530ca6fbd0f4b5a336f6","sha512":"366d6a9236b64fd2216b3a4694385834c725a5ac63bf3932e3f5acdb56223c067763517e901267a01e54a7c3b0b83bbcba3960251b9d5351d4e68249588abcb3","ssdeep":"","tlshash":"de117b1921c1d0406dd5cfa6a4350f23d8a9ec765738608c61acf6bf5344b7f13b4842","size":929,"data":"","first_seen":"2026-03-01T19:53:32.27819Z","last_seen":"2026-03-01T19:53:32.27819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/138-f02d230bd104b4f1.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c00c819cd5a1810fa56f066eee6279f","sha1":"891527947094458aa4ad9bd53309d2ed51cdea04","sha256":"5600ae7e9efa1c0b90ac5ec79a675c9a3fc48e42590e1ae99a8c2df3b44d5935","sha512":"b96fee2595e02ce130ac0809766b19b27d017c53d12e15479875d3854b33b9d8c17557226783fa8af49dc9efc891c8f5b50bb10f5af51e95bdecb5c8f11b9ca6","ssdeep":"384:U1AYYX/AdGgn73EGjTlLw4nItEO8Tn/U7vuHmKDwwcGXx:UGiv793lLl8lA/4vuHr1cs","tlshash":"2092d8ba71d2f8a243db40a0043b1006f27a5d7e245e6288f7f4ddd6f57046da1a3f2a","size":20621,"data":"","first_seen":"2024-10-15T06:29:05.876772Z","last_seen":"2026-07-21T22:36:47.984281Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/23-22d36919a0ec3c14.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5099dda57dfa7277920285717e672bed","sha1":"b0317f67dbac1fd3fd8aed24400a83cedc3e6b59","sha256":"c0120df9e85055deeb67bb670778771a8277cb4649581fef2ebc085cd1273014","sha512":"62580dafc3a57852e7f6bef771081b3a9b1c678c40a4726ccde6e84824070899a7605667bc38def575b394eefbcef1815d820bbd5586aa63add9992e5c602e36","ssdeep":"1536:+cw31mN1OhkUEfYsdlaTy8mmN1zq5EfRv7:AAJ941G50z","tlshash":"42c3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":123338,"data":"","first_seen":"2024-06-28T16:45:31Z","last_seen":"2026-07-21T04:13:36.61078Z","times_seen":737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/fd9d1056-1f4c605cebad2e8d.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172831,"data":"","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-07-22T09:05:07.278717Z","times_seen":3317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e6d141ac2210ec211f1dee9e945cd83","sha1":"aa9295064561f13a339819d500b2567b0ae7e970","sha256":"a019d02e65b507b84cad0740f2c9c778d0a530cba13aee227ddc7d439feb4851","sha512":"9c71af883af5ad0577bc2c9f9c5de4acbae8bf04307d34c1e2f114ebec3639cde7932aaae194c095354a51194be1bccb0614720a54d960e68573e8aa9110ab14","ssdeep":"384:ZgyLRSCQbRtrC78kix4kPjhbyedP5jv57qw2i56uVVb:HACQbRQ7bix4ghbyENR7qw2i5TVVb","tlshash":"dd927935a056edadfc5e3c84143fac3a654e916f4f98ce72c2e8ed24558643eb7928c0","size":21235,"data":"","first_seen":"2026-03-01T19:53:32.278938Z","last_seen":"2026-03-01T19:53:32.278938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/captions/page-91930ee51b3045ac.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"26bf201c85a0790180af4298692707be","sha1":"ea46e57f9facec7921d4b449fd5624dd4168c03d","sha256":"4908a157867fe4fb64eaceae436c73c0f461284c9cdb3956f3d0720e4a66a7d0","sha512":"72a7b9d468a4584c7fa49dd2f6ef397bda0b641510dfe2be373cf08e528b1c09c504ebe2a963ab82fad032832bd04343fef119b83193209daab0660a21da84e4","ssdeep":"","tlshash":"c551a68df181fbe495bb24e4813f988e307b59685a18045376b9a0c568749d8b633f8c","size":3042,"data":"","first_seen":"2026-03-01T19:53:32.257686Z","last_seen":"2026-03-01T19:53:32.257686Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/hashtags/page-9b71060faf8754d6.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"29e7e1a4ff7b122d17c4e8bcb274ed57","sha1":"5715269154b289c7f3f439a864bdb369f1a6f6b8","sha256":"9e3efea24b66f719ddf06c93aeb651c517cc67fa3a6032b839ebce3f750168ff","sha512":"cabff52781cd5e944a32d56a06ed90dc1131db943c4ecf1acb6d27b9973639e80fbf8991baaa8eb76fb7eb82dba6e4e405d031a14c4fa814394d33f3a652df38","ssdeep":"768:QhKudUr+w/LKBSQW8M7A40oJ6IZCIagf6pjHkHrV2gQBlwzSf6/o7:qir+w/LeSQVKAiIH/hHKogQ/OQ7","tlshash":"32f2c0a570593e981ece5ddcb21e950cec830d0dd28e10937fbee465b4ae7189272cad","size":36194,"data":"","first_seen":"2026-03-01T19:53:32.262404Z","last_seen":"2026-03-01T19:53:32.262404Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/bio/page-f7899ddbd68d909e.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/app/bio/page-f7899ddbd68d909e.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"8f8-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2296,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2296), with no line terminators","md5":"53ef3c7b849751c3f22d6ce3737f63f2","sha1":"9438ec9a21fbfac0c5db9161b36f59cde259938c","sha256":"3a000a5306ae95259d3fb7960cb119cfae33c06b4b41b9aa9a92e2e46b19faf9","sha512":"6d2ed73e1484e92154ed4ba04a1a4ee7bb42b8e8a1045e25c05df494ae998f3b1623a713ff3bfd9dbbfebb69dfa1c79a7f5b4c79df527b50bb9e4713c729af37","ssdeep":"","tlshash":"7241859df289fbf4e1bf14d4c23f984d707b1a58891804623aace0c12878598b363f9c","first_seen":"2026-03-01T19:53:32.242269Z","last_seen":"2026-03-01T19:53:32.242269Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram.thelifestyls.com/images/sugg/8adf905f7b3355c6ba2a0f74e7c181db.jpeg","fqdn":"instagram.thelifestyls.com","domain":"thelifestyls.com","tld":"com"},"ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"instagram.thelifestyls.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:38:03 GMT","end":"Sun, 24 May 2026 23:38:02 GMT"},"fingerprint":{"sha1":"A7:EE:87:31:92:3E:AA:98:10:11:30:E3:A7:91:CD:D7:F0:6D:52:D5","sha256":"1A:1B:C7:A4:A5:72:B9:BB:AB:0A:EF:BC:F8:9F:EA:12:D2:37:1C:E3:F5:85:62:1A:1C:17:B6:76:84:5F:6F:48"}}},"request":{"raw":"GET /images/sugg/8adf905f7b3355c6ba2a0f74e7c181db.jpeg HTTP/1.1\r\nHost: instagram.thelifestyls.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 6097\r\nLast-Modified: Tue, 11 Jan 2022 08:41:23 GMT\r\nConnection: keep-alive\r\nETag: \"61dd42b3-17d1\"\r\nExpires: Sun, 08 Mar 2026 19:53:04 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6097,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"937e9b115201402a7d4cad66e5ff84c9","sha1":"86b7f3cd439bcbecd15c4fde18f455b0e8d1f2bf","sha256":"3be51f432dd5c9d66bc7429c77051f8355c434314d5437f9e333b1e0aecb3a53","sha512":"2446260fddb8d58dbaadbabd6ee5922811e03dc614edd58bccd5615da84bf03e3fe849429c00fa6c4e6dc53ebf05343508d14b3d9f050a8302c2bfe134697c3e","ssdeep":"96:QyH8PPiMrqfUlmGKSfngH5vmcc9Fl5Yh0TxC7eRUwTDUEHWJ15QyxdsnD/QJP2yh:KCMrXmBSi5Kl07eywRHw1u/D/QJPZ","tlshash":"17c17d533a8a8511f3eae3b80cafe2f17337671675d30a5e549a9a0eca2cdd407801c1","first_seen":"2026-03-01T19:53:32.243434Z","last_seen":"2026-03-01T19:53:32.243434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1165,"timings":{"blocked":504,"dns":21,"connect":159,"send":0,"wait":154,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=Love\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=Love\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-01T19:53:03.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nX-Powered-By: Next.js\r\nCache-Control: s-maxage=1000, stale-while-revalidate\r\nETag: \"glgocq4hmyzru\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":46420,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46414), with no line terminators","md5":"7ed208dce5035e5e80a132f4260cd9a3","sha1":"2ee60d65ba0942428143aae05dc8033577365949","sha256":"5afc68a188901bd5772cbae932d67d814fafa2f65d6e5468d815d77aa8340ea9","sha512":"0bc2d671f7b6696fbbe496936a30cca42bfea40459f5fcfe79585f2a82335cd8a51e38d23d49bf2fcd43864ab0a76319252770a7c634cf21e9f64d423f148fa9","ssdeep":"768:IYAbBOA21kgDrrY124hACQbRQ7bix4ghbyENR7qw2i5TVVy:A21tY124OTXno","tlshash":"022374359041e8aafd6f3dc5103e9d3a609a916b8f55cda5d3ecd9248286c3f7b928c0","first_seen":"2026-03-01T19:53:32.245295Z","last_seen":"2026-03-01T19:53:32.245295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":108,"dns":48,"connect":24,"send":0,"wait":30,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HHXLSWND7K","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:37 GMT","end":"Mon, 27 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"8B:BA:E2:19:5D:6C:81:59:ED:D8:AA:3B:2D:5F:A3:A2:C8:A1:E3:DF","sha256":"B0:8C:FC:C1:98:34:EB:0E:FF:AB:13:B4:9E:AA:B1:7E:02:11:9A:93:31:F2:A1:0F:23:9E:2B:C3:6F:EC:26:F8"}}},"request":{"raw":"GET /gtag/js?id=G-HHXLSWND7K HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 01 Mar 2026 19:53:03 GMT\r\nexpires: Sun, 01 Mar 2026 19:53:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 151053\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":456882,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"dc6dfa8e1acb0838cb7f0df4f733d1e3","sha1":"6147ce2609815f507f133094fe6b397fe410a61f","sha256":"eda148b81a5eaec1abe6c0835b2d771a64f1cc818f9360e351a666b15b02a0b4","sha512":"da1ee10b6d6cdfa83d0f5ecb22dca3eebfe496f780d0564a513857d8d571d910beb789418cab302976e7925e0319264b864d8d0d380df8fcbd2e5154159feff1","ssdeep":"6144:jA7OOW4po5W+MMZH9CyF8QyZbTxRMlKEmxosJC/gMAIkV:Cffpo5W+MMZQ+87xoytP","tlshash":"aea42bce73d674225396f478903f018ba57b64a2b48cc89af189cce46e7469a4137f7c","first_seen":"2026-03-01T19:53:32.246369Z","last_seen":"2026-03-01T19:53:32.246369Z","times_seen":1,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":90,"dns":40,"connect":12,"send":0,"wait":29,"receive":24,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Material+Symbols+Outlined","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Material+Symbols+Outlined HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Mar 2026 19:53:03 GMT\r\ndate: Sun, 01 Mar 2026 19:53:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"207328651e81e7a25c3570b053df834f","sha1":"1c952d27a1705d5420c6f146302cddc41e8ab35a","sha256":"0c63fe2d1cccf6dc94de606293060dd8ba612171304a30a81cd3a3c2c316b064","sha512":"f0f9df7214630f832377d58629463d09303a8b31fe0dce3d10f738cad80d5eafdc1255636a15831298db7581d2d2a40d0c43abcd06cbaecdfb661978db14fb86","ssdeep":"","tlshash":"3b019e58aa565505a1550c93330f3f225e19461f394ad8beef460e0c9efe8770345f0f","first_seen":"2026-02-25T02:18:09.666497Z","last_seen":"2026-03-03T01:06:40.414114Z","times_seen":37,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":1,"connect":20,"send":0,"wait":35,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.gstatic.com/images?q=tbn:ANd9GcS12_5glqXCOzMW5szAFLJeH9NOBJkYOcgPi-3LOzeyoH-rYOf74L91l7QW3L5k-a69ktWXfD4I","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcS12_5glqXCOzMW5szAFLJeH9NOBJkYOcgPi-3LOzeyoH-rYOf74L91l7QW3L5k-a69ktWXfD4I HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 4093\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 10:32:04 GMT\r\nexpires: Sat, 27 Feb 2027 10:32:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Mar 2025 08:00:50 GMT\r\ncontent-type: image/jpeg\r\nage: 206459\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4093,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"7c230dcccf16da7811b6ea25ab43e2a1","sha1":"68bcc54359ca66d4ecbc8250a0f3e80a3963d907","sha256":"22d050cc90e0c2b588642cf98ac184a5c64e66e8b9d9c1f3e6f5955afccb56f8","sha512":"9f9cf3745d6b709bc32fcadfba614d94190eabe30cbe3a1d58268d5ab8beb0c808e8253c6d03df5477b7f0a77ec16e549907072c3c11c08ce09d810f45062405","ssdeep":"","tlshash":"cf817ed315ba48d1ec377ab90932ce0887a1f750e47aad4b766618f7e2f544e8d178c0","first_seen":"2026-03-01T19:53:32.247707Z","last_seen":"2026-03-01T19:53:32.247707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":88,"dns":27,"connect":7,"send":0,"wait":9,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/images?q=tbn:ANd9GcTXIf3Ugn_lnDpu06p5Oo7k9MLlR8iEo9ZrRJS3tYmORpDH_V5dYWX7Gumi53Sc4HwJKprwahd6","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcTXIf3Ugn_lnDpu06p5Oo7k9MLlR8iEo9ZrRJS3tYmORpDH_V5dYWX7Gumi53Sc4HwJKprwahd6 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 2995\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Feb 2026 04:14:58 GMT\r\nexpires: Sun, 28 Feb 2027 04:14:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Mar 2025 05:24:10 GMT\r\ncontent-type: image/jpeg\r\nage: 142685\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"f560fff9f5a7dfdb90ce57a25dcb1766","sha1":"4c337438cae30a6494a9335a39e109601d3251ad","sha256":"8596318bcb243179549f6ba58fa51214243790929001dbd3dd4ea402f3ce7490","sha512":"a02990cd63fac7944bb22280259bdba8a107737e7c0fa7572f06b116d47833a31516da633b9cdd25f15eceafb5abec5d1741f155ff0e20f1e3106dcf4a9fc720","ssdeep":"","tlshash":"a0514a3ebea2812b9428673358c19697256dfea14dcad3df030020d005f38923caa1f2","first_seen":"2026-03-01T19:53:32.248561Z","last_seen":"2026-03-01T19:53:32.248561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":19,"connect":23,"send":0,"wait":9,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nNext-Action: 62fbf12d9913df05f79b4e1e44bc7de2944011f7\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://socialtrends.online\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"[]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nCache-Control: s-maxage=1, stale-while-revalidate\r\nx-action-revalidated: [[],0,0]\r\nx-nextjs-cache: HIT\r\nX-Powered-By: Next.js\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1422,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1380)","md5":"cba8338b54adec72d5348a82c1fd5775","sha1":"8f514612baef72682a7b43e84490ba539f599b54","sha256":"9934992b43879c7eca8b5a14a442ded514d109b555d772368ab6eb14a7a4afbc","sha512":"d97f6b2f5de176a6fe6bd37adef665ab4460ef961c246225616b8520fc532fb5dcc55011c77dbae7e2b4d7cfa0bfbb63f3be6de1edbb3e5745f87c82330857f7","ssdeep":"","tlshash":"e6215c2bca50acbe478923d46a1f73ef84056057fbc19e49f4bda80c56b24b21863826","first_seen":"2026-03-01T19:53:32.249397Z","last_seen":"2026-03-01T19:53:32.249397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=New\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=New\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=For+Friends\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=For+Friends\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/webpack-a8126fcfe66063f3.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/webpack-a8126fcfe66063f3.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"e0b-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3595,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3595), with no line terminators","md5":"f39db4126dac928436d450e1e65f873e","sha1":"4b67fc9a2407bc8714b8945d91063a32ba57a2c1","sha256":"72e91db3cc0eda31201041636361dd0c80ca6d7ba1122823bc51bc159cb7ad44","sha512":"888933c113c922a9fcc978856accb2168435326bd75f2b953cef00eb30bd4bb00fe5e6ffaa6732bcbe696dec21ce00732ff0ae92220529fd52a33983bc366443","ssdeep":"","tlshash":"2f7185dd71a1f9ba1783a4a1043f955af23f28b6281ed4e0cb25d4f5fc355498223fa8","first_seen":"2026-03-01T19:53:32.25015Z","last_seen":"2026-03-01T19:53:32.25015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":57,"dns":1,"connect":20,"send":0,"wait":23,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/main-app-126574aaf4387276.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/main-app-126574aaf4387276.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 462\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"1ce-194982c9df1\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":462,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (462), with no line terminators","md5":"a96646041d90c8295db1f8531806d298","sha1":"1980ac97fe21e1f76bda27d6176469d5f24f3527","sha256":"67c3e4393c44ab1874aaf8ea7bd7d3d54025e03af156a5f0ab98b9e750b6b8a9","sha512":"b823768ec2bbfd46bf351e6a1ca10b8cb3fad718b5d30bcfe5ae4813766ade990adf2f27b598f7e65d6082f7fed037f0969fc2c8a30c6f9bd68578bcb1349b52","ssdeep":"","tlshash":"5ff0829d274db02f2923ae20fed35c2e296e417428675d501615ddb12c3766cc7f1c38","first_seen":"2026-03-01T19:53:32.251024Z","last_seen":"2026-03-01T19:53:32.251024Z","times_seen":1,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/648-15aebc83bf08fe7c.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/648-15aebc83bf08fe7c.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"359b-194982c9df7\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13723,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13723), with no line terminators","md5":"5ae9b9f208c27c853fc5b2fba055c64e","sha1":"3a4f83dcd3599c5881cfae6f4165057b5754d123","sha256":"4facc49513acce99187a07bde92c8fcee2cb0b92740b1b24e20c7125d527fa40","sha512":"f813ec8aeb7f473c50d2aa2ce64cc1b88641c4ddd6c4a11168ab116799ca46c4be62e5caa0c89f62193fcaf70af06f202f152354e4b22a60e67033fb339bbb65","ssdeep":"192:TG792rPK9vPxWOsU2BjyhwSozFDYDFIaHibtkz20ocFRFrYQu4BTGKdkG:ToSPK9hsd8PAtP0ogS4NnkG","tlshash":"d9520ab731d4f8e6138a80e1947f000df3b55c75622ab14867a4c8d9eab0198e162fba","first_seen":"2024-06-29T14:43:52Z","last_seen":"2026-07-20T03:32:08.724469Z","times_seen":41,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/image?url=%2F_next%2Fstatic%2Fmedia%2Finstalogo.f8201057.png\u0026w=128\u0026q=75","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/image?url=%2F_next%2Fstatic%2Fmedia%2Finstalogo.f8201057.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2430\r\nConnection: keep-alive\r\nVary: Accept\r\nCache-Control: public, max-age=315360000, immutable\r\nETag: 6RvVubr1f8vp9CytFnxdE0vS5TKgofXKpUr9mfLGstc=\r\nContent-Disposition: inline; filename=\"instalogo.webp\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2430,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07b75f52d484d394a7124f089ba6fac4","sha1":"2502485ee4ed950f7ab8219b487578ee5628ff4a","sha256":"e91bd5b9baf57fcbe9f42cad167c5d134bd2e532a0a1f5caa54afd99f2c6b2d7","sha512":"20ca6307a900af410c537fc3caa2eb8416e3fad22a68097027549c75ae0cad8fca8743488ba346dab0c15ffac89e26302bba0b54d8c7c8f0037a2bd0fbb91e27","ssdeep":"","tlshash":"b4416b233903ae8190334e1eec8a3130e90b832bd5d33999c1a239103bc2526c2ff1c4","first_seen":"2026-03-01T19:53:32.253217Z","last_seen":"2026-03-01T19:53:32.253217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t2.gstatic.com/images?q=tbn:ANd9GcQTSwvf_wMxCeV-RI_6aziZOcN7rQNsxBrTFIUxyhwuFqFMc3TbUGqrxQsp3aVlGenPx23obHz3","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQTSwvf_wMxCeV-RI_6aziZOcN7rQNsxBrTFIUxyhwuFqFMc3TbUGqrxQsp3aVlGenPx23obHz3 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 2688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 16:24:24 GMT\r\nexpires: Wed, 24 Feb 2027 16:24:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Mar 2025 23:22:36 GMT\r\ncontent-type: image/jpeg\r\nage: 444519\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2688,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"4042930b12c12ca86b418b6e065c7b4a","sha1":"0ea9ba379977af4fa84cf5383c28d1eb43e6206a","sha256":"07778907883a74b83415257d8a2a3da94ae2c0c868234d9ad5e16a3b3522a5bf","sha512":"3610389f732c0ce6a16d200d0d31ef0475f9fcab91664c6feadf5a31eaeae13276eb7611d02b040c0e5d642ceca907d821deda040392d50e431a7fcfc8142abe","ssdeep":"","tlshash":"5e513c5346c3e211edda0374411ab33a51a77ad0607b948d70e01ee0e9f52c7aacc1d1","first_seen":"2026-03-01T19:53:32.254256Z","last_seen":"2026-03-01T19:53:32.254256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":98,"dns":69,"connect":18,"send":0,"wait":10,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/images?q=tbn:ANd9GcTrnTNciIDHiPOixdxcdiiMxYMayLnAOtg-VVBaXgOE7FDxn1z06X5CQ_Drv5WAuNYAWi_E5dvG","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcTrnTNciIDHiPOixdxcdiiMxYMayLnAOtg-VVBaXgOE7FDxn1z06X5CQ_Drv5WAuNYAWi_E5dvG HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 2977\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Feb 2026 23:07:52 GMT\r\nexpires: Sat, 27 Feb 2027 23:07:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Mar 2025 13:57:45 GMT\r\ncontent-type: image/jpeg\r\nage: 161111\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"10924724ba5233fb04c08fa2a6ecb74e","sha1":"3724296ecb14e3ce03bbe0ea346f1c83041e8cb8","sha256":"ee83cff5e9b6600a8083a9da6b75efc865f16887ccfb3c240dfdf910404d9af2","sha512":"f054d4be58b5ed2242d057db6ada3611cbbcc2f660cc72a25286ead40954b39f8eb849d88f575cacd6bdceb84aead337f2444b52b1741ea98a1b3fa35f16b3d4","ssdeep":"","tlshash":"58516d3525610bd2ce371836b9fc25f0435fb3219bf0a35b629071e826d509c17c6ae1","first_seen":"2026-03-01T19:53:32.255064Z","last_seen":"2026-03-01T19:53:32.255064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":229,"dns":41,"connect":11,"send":0,"wait":9,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nNext-Action: f17a0bd0dee1ccec6c35f525526933f2bf279453\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13\r\nOrigin: https://socialtrends.online\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"[\"\",false,15]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nCache-Control: s-maxage=1, stale-while-revalidate\r\nx-action-revalidated: [[],0,0]\r\nx-nextjs-cache: HIT\r\nX-Powered-By: Next.js\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":2140,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2094)","md5":"b452f47b0ff09f0940f4322cc36c8f21","sha1":"ade4ebec3cffc6450051bbdbe48b1cecbffdb24c","sha256":"6b21a4515ea622c6daf7406940922321d908d8997c1c7ac089d1fe79678af78f","sha512":"1080cc2819ef551e76cfa7607c37063e4e353697fae8fab6f63cc639a71d3305cfb961b02439168a26e60364d692c5ebab2a78e93a2e7d0864fc62e7379f6fdc","ssdeep":"","tlshash":"a84128a5dc42dc7a93d7d986059ff2ef3306b217b1ddaa1c1db4fa0880845e208467ab","first_seen":"2026-03-01T19:53:32.255921Z","last_seen":"2026-03-01T19:53:32.255921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t1.gstatic.com/images?q=tbn:ANd9GcSxyAtulNLv7w64Wv7GRiIYQLS0C2lq4g0us8W4tliMXgqwgp9Y5XLMpmKkEQUVZSypL3jkQNqP","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcSxyAtulNLv7w64Wv7GRiIYQLS0C2lq4g0us8W4tliMXgqwgp9Y5XLMpmKkEQUVZSypL3jkQNqP HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 4221\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 21:00:30 GMT\r\nexpires: Wed, 24 Feb 2027 21:00:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Mar 2025 14:25:44 GMT\r\ncontent-type: image/jpeg\r\nage: 427953\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4221,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"21a44b2227404d4c867d3e9543dadbd4","sha1":"5609d90f1147eff45755d706c3b7041020d0d3c3","sha256":"de812f56dda950b06a48c480e070b4d7098e0b3d783de8c2ea6d869167d11833","sha512":"f232a572ed7c849067d5a976027f9bdd2400b534d086c42c3014a6aad1c84ff1ddf694eb2c900ed6289414d34ba72ebaa5dd9920a1c016c24428fc939458c360","ssdeep":"96:Dx98XcLFviDfQP88RlQcJru6mf58GPTgLUkoBgcu1m:dAcRviDfQPcsFaTgNoBgN8","tlshash":"d1918ed98e6c7025f96a3b33e4a164d3b782c601a5dc71f813b152d518d6956cc355c3","first_seen":"2026-03-01T19:53:32.256823Z","last_seen":"2026-03-01T19:53:32.256823Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":96,"dns":23,"connect":24,"send":0,"wait":10,"receive":1,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/captions/page-91930ee51b3045ac.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/app/captions/page-91930ee51b3045ac.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"be2-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3042,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3042), with no line terminators","md5":"26bf201c85a0790180af4298692707be","sha1":"ea46e57f9facec7921d4b449fd5624dd4168c03d","sha256":"4908a157867fe4fb64eaceae436c73c0f461284c9cdb3956f3d0720e4a66a7d0","sha512":"72a7b9d468a4584c7fa49dd2f6ef397bda0b641510dfe2be373cf08e528b1c09c504ebe2a963ab82fad032832bd04343fef119b83193209daab0660a21da84e4","ssdeep":"","tlshash":"c551a68df181fbe495bb24e4813f988e307b59685a18045376b9a0c568749d8b633f8c","first_seen":"2026-03-01T19:53:32.257686Z","last_seen":"2026-03-01T19:53:32.257686Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=For+Girls\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=For+Girls\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=Funny\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=Funny\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/fd9d1056-1f4c605cebad2e8d.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-1f4c605cebad2e8d.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"2a31f-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":172831,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"89ef5cbeacece4bcb75bbefbaec33dc9","sha1":"afd673d3e1289070f4e66e592a58223d764c573e","sha256":"71ed963804cbd4b773b16a2e290fb534288140999cca4833a8ff300a9d72a9b1","sha512":"587470cd2713ae2dd6e4ef44a3c9ad5442872f298b79b02a29ade777c9a879ff4c159116441d6297f13d3eec996762f0e36edf6933ae8b0a37502e1501c3065e","ssdeep":"1536:IVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Gzug758kkEiXjOAprX2wd5WjguGOo","tlshash":"5ff3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2024-05-03T14:53:15Z","last_seen":"2026-07-22T09:05:07.278717Z","times_seen":3317,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":65,"dns":1,"connect":29,"send":0,"wait":43,"receive":32,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/page-7e0b12fc1b553316.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/app/page-7e0b12fc1b553316.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"1606-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5638,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5638), with no line terminators","md5":"060406c7aecbb707aac3a2ec4a7362ee","sha1":"0e7afa620f605ea5858eaee439d4388b05e7433c","sha256":"43732201492e3d9a4635154be0f717223c2b9c0d94636caa6757817a7d6cd209","sha512":"b479491e86f516c63d96cb1b8e26ff051537216875d0edc83bea15ef952258e0519f10210a436afdcce2f8d7ba9fce30a37554786f2ade1cde16317861a0bbbe","ssdeep":"96:7plahbz3+kVo+JP3Cd9ST7F1+vlURgKryOhTobQ1Og59fhoC6:vaBBo+JvYSb+veRDrdhTobQMg59B6","tlshash":"59c17408b0d4fbf8956b2ca8d13fe81e303b6a5458051872f6b9ec912c75198b227fdd","first_seen":"2026-03-01T19:53:32.259079Z","last_seen":"2026-03-01T19:53:32.259079Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/favicon.ico","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-07-22T11:32:11.691533Z","times_seen":34616,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t1.gstatic.com/images?q=tbn:ANd9GcQ5-FGyUcykLNX_WRZSg68ccXM2lRC2UoVPELZqU_hYO0mwudiUot1AZZn9SV45IZ4s9ggHhuFv","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQ5-FGyUcykLNX_WRZSg68ccXM2lRC2UoVPELZqU_hYO0mwudiUot1AZZn9SV45IZ4s9ggHhuFv HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 2435\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 00:28:38 GMT\r\nexpires: Thu, 25 Feb 2027 00:28:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 26 Mar 2025 19:55:33 GMT\r\ncontent-type: image/jpeg\r\nage: 415465\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2435,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"4785ff438483ecbb8962ca61e82c7f07","sha1":"c25422897146727890a35e8f5814e400405cdfaa","sha256":"3d458d550b7fe649896040518397d616c9e16f8e66db4a7bc44d328cae88e089","sha512":"9448dc66a523a1ed9b99030e363b698ea9d9ee33d66caf4106dedb768bc5c2dfbc9cb22dff9bebd0b963ee34872fed107ac0016f313cd337d1283a1f22dc7ff9","ssdeep":"","tlshash":"9441f813a25271a6e5092df73012437385ae71a7d434b8db58808ec136f84d149ab8d7","first_seen":"2026-03-01T19:53:32.260661Z","last_seen":"2026-03-01T19:53:32.260661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":9,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=For+boys\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=For+boys\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=Nature\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=Nature\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/hashtags?_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /hashtags?_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"11c6xkqzi2135l\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4090,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2384)","md5":"82a109ae04ddf54bca0da7c5f1376caa","sha1":"f83e15d49cffdc88e7362c67643c11c1b6a387b9","sha256":"a272aac79f6b91575aa5599cb4c924341959f8e058f1a3d71a293067699f1c92","sha512":"0e23cf63fbb6890c3dd3f81275cee58e530e8d21f6f68a7bffa14e79071671b244505bf56037794c26b59a2f9584496e529db0793dfc7242cffd6fcf85e5d00f","ssdeep":"","tlshash":"9281ac3b5609d97e3fbb52d5001fc70ba14e8a3b27615cf282ee5e6c03552762e9b2c1","first_seen":"2026-03-01T19:53:32.261585Z","last_seen":"2026-03-01T19:53:32.261585Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/hashtags/page-9b71060faf8754d6.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/app/hashtags/page-9b71060faf8754d6.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"8d62-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36194,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36194), with no line terminators","md5":"29e7e1a4ff7b122d17c4e8bcb274ed57","sha1":"5715269154b289c7f3f439a864bdb369f1a6f6b8","sha256":"9e3efea24b66f719ddf06c93aeb651c517cc67fa3a6032b839ebce3f750168ff","sha512":"cabff52781cd5e944a32d56a06ed90dc1131db943c4ecf1acb6d27b9973639e80fbf8991baaa8eb76fb7eb82dba6e4e405d031a14c4fa814394d33f3a652df38","ssdeep":"768:QhKudUr+w/LKBSQW8M7A40oJ6IZCIagf6pjHkHrV2gQBlwzSf6/o7:qir+w/LeSQVKAiIH/hHKogQ/OQ7","tlshash":"32f2c0a570593e981ece5ddcb21e950cec830d0dd28e10937fbee465b4ae7189272cad","first_seen":"2026-03-01T19:53:32.262404Z","last_seen":"2026-03-01T19:53:32.262404Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram.thelifestyls.com/images/sugg/9e101c5cca8f67b31b9be69bbc64a250.jpeg","fqdn":"instagram.thelifestyls.com","domain":"thelifestyls.com","tld":"com"},"ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"instagram.thelifestyls.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:38:03 GMT","end":"Sun, 24 May 2026 23:38:02 GMT"},"fingerprint":{"sha1":"A7:EE:87:31:92:3E:AA:98:10:11:30:E3:A7:91:CD:D7:F0:6D:52:D5","sha256":"1A:1B:C7:A4:A5:72:B9:BB:AB:0A:EF:BC:F8:9F:EA:12:D2:37:1C:E3:F5:85:62:1A:1C:17:B6:76:84:5F:6F:48"}}},"request":{"raw":"GET /images/sugg/9e101c5cca8f67b31b9be69bbc64a250.jpeg HTTP/1.1\r\nHost: instagram.thelifestyls.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4907\r\nLast-Modified: Tue, 11 Jan 2022 08:41:23 GMT\r\nConnection: keep-alive\r\nETag: \"61dd42b3-132b\"\r\nExpires: Sun, 08 Mar 2026 19:53:04 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"63d51d76138d41cfd577d413db2ce615","sha1":"cb3fc67bb4e3c4e47dcf028cb1c67689418c6b5b","sha256":"812e9af0653f49254efca2d81dfd95a76f4bebd393f117c276ad9324983d5451","sha512":"c133a99b28fcbd466d57ca1b2e993a5fd8957633e25f080efb8bf9386566a6f5a127e3a0e8a132c6b07247b26801ef51a11aa8c7933d06a5c408178103b9084e","ssdeep":"96:FbkJyOioYQ92KgtWtULb0Le6X+4c8OkcBkMtuiJIZW/83lw/7:FAoOiudg5LbyyxkMuW6+7","tlshash":"63a16c2e3bc83501eef4c73a2a7cc3167266f93966f0161f0a901cc896b52df5e909e1","first_seen":"2026-03-01T19:53:32.263431Z","last_seen":"2026-03-01T19:53:32.263431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":508,"dns":23,"connect":159,"send":0,"wait":154,"receive":0,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/css/7aee00bd73195133.css","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/css/7aee00bd73195133.css HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"c75-194982c9df8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3189,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3189), with no line terminators","md5":"68f480a00412d902d717a392c1f3ba62","sha1":"57f88501eb9cd3039487f7d98b2a7059ab8d723d","sha256":"6d9b3ba969303598ea4928b29f3cc95e80a60be99dd6993c5cc2f02e26ad66e6","sha512":"528be9307e80ce460aaf0347e05fd2f209cbf9f8289adcb98b81fc16001e072fb55f43988f2c96a21541ae6cb75e28f8846ebeb05a39e370f99dd90a98b08dec","ssdeep":"","tlshash":"b76173273e5933b974afc41198f0a6de9532d2d1d62303edb927b331de87186276244e","first_seen":"2026-03-01T19:53:32.264315Z","last_seen":"2026-03-01T19:53:32.264315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":64,"dns":1,"connect":24,"send":0,"wait":23,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/css/59f0705ca9c5df8d.css","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/css/59f0705ca9c5df8d.css HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"40a-194982c9df8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1034), with no line terminators","md5":"6ae83a47e0eae8b5d55d8afbb0898c6d","sha1":"9fadaa228fb09e23dc025aea7a95ae673fbc4684","sha256":"d965279e52edee9587ef3faff8adf3af2b8f41ab28f70dc029f98c7cff63b48f","sha512":"f0c0fa8a3f2975e3c219a372d4d8ee450242df9657747fc9093568d21f74ebe38ce451cf2774b9bc0c0e41d4daa76e99a83365a8cda0c4e115af8c396e9de7a2","ssdeep":"","tlshash":"ad1178422a843b361e278259dde0a65e90f2e8c1fc26739cb753f35a4d8e35009ef194","first_seen":"2026-03-01T19:53:32.265082Z","last_seen":"2026-03-01T19:53:32.265082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":64,"dns":0,"connect":24,"send":0,"wait":22,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/23-22d36919a0ec3c14.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/23-22d36919a0ec3c14.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"1e1ca-194982c9df7\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":123338,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5099dda57dfa7277920285717e672bed","sha1":"b0317f67dbac1fd3fd8aed24400a83cedc3e6b59","sha256":"c0120df9e85055deeb67bb670778771a8277cb4649581fef2ebc085cd1273014","sha512":"62580dafc3a57852e7f6bef771081b3a9b1c678c40a4726ccde6e84824070899a7605667bc38def575b394eefbcef1815d820bbd5586aa63add9992e5c602e36","ssdeep":"1536:+cw31mN1OhkUEfYsdlaTy8mmN1zq5EfRv7:AAJ941G50z","tlshash":"42c3d8b671d0f8e207a744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2024-06-28T16:45:31Z","last_seen":"2026-07-21T04:13:36.61078Z","times_seen":737,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/app/layout-42b982a86778ad6a.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-42b982a86778ad6a.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"2600-194982c9df5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9728,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9728), with no line terminators","md5":"bad254baf03fd5d87cf8874f3e843236","sha1":"a0a0ad2156e5610d19a7549c21a275fbd95c1e26","sha256":"54377426c7c6ffaefa17e28151e890efd74f358bc489d0ed50965375571e4ead","sha512":"d83355af24124fd69616ca10afb6d67236e58cb3bcae85e69cc07280c84a037755658b717a22c44019b9b33aab4dcc5f83cc16c93aeaf289c7c48579a0e3397b","ssdeep":"192:p7/QWUYbjtEg1G1bfGoJOYpHFXipoiDjqaG+5O7jdn173Q5GiQzWgyU2i+tsO6:1CYXKDGojRUqfrsGiiWgyU2i+to","tlshash":"3c12096979d8fc7a1b5b04e8d47f914d716a2839001e2880e7b9ece56036edd61a3fcc","first_seen":"2026-03-01T19:53:32.266633Z","last_seen":"2026-03-01T19:53:32.266633Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/media/47cbc4e2adbc5db9-s.p.woff2","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/media/47cbc4e2adbc5db9-s.p.woff2 HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/_next/static/css/e7eabb31bc5aa506.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 34668\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"876c-194982c9df1\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34668, version 1.0","md5":"4746809ed1c17447d45d2a96c64796d4","sha1":"300a3511100a2ea1fbf43bf329855e17da1f4532","sha256":"8139a402ce239285716452e5668bce94bbf240b433fcfa2e154aa7e4d240445b","sha512":"28c2ae34437a02c99282a2e0cf8c3de11bfa07b55835068c82578dac1947dd3a74ab904cfdae0ce1d14767d601884c2e8f577025f647cae4a06c8dee220cbb61","ssdeep":"768:btpz8R5UTJqgQ3XvFF1LTbda57GqOWBR+LEPP:Jpzk5qepLTbda571v0EPP","tlshash":"35f2e1816c1c7085da4951f9cda50bcd46ee86f98d3f6d2118613a38e6c802f47f97be","first_seen":"2025-01-09T20:17:59.500754Z","last_seen":"2026-07-22T09:37:22.935653Z","times_seen":24131,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=More\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=More\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/css/e7eabb31bc5aa506.css","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/css/e7eabb31bc5aa506.css HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"2ac2-194982c9df8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10946,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (10946), with no line terminators","md5":"fc4cdefc3cb66735add7d16bc12f7501","sha1":"228329f555df40fd4ddb0ce9e4f3eea5a4215bd2","sha256":"9857387604e12b55a9fe73df4a475ee23afd32b0270a6be1ed0572884556b53e","sha512":"71b5458ac257fee9143f47d5f123e2702c69a74b63954f4311891d03258a10303c227e060b7d55dcd6c4600417320d666723be259ee641bf16b682febd9cd631","ssdeep":"192:fxA627Sh00u7Yx3AOYbxqW27th00u7Yx3gfY1hvxFdONWVf:pAP7C0QA3lqr730QgQbqKf","tlshash":"cf320030842a44cec532bca233d53f63797d5412a1d01536da6db9da4feb8fbb2a0758","first_seen":"2026-03-01T19:53:32.268087Z","last_seen":"2026-03-01T19:53:32.268087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":62,"dns":0,"connect":20,"send":0,"wait":22,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/chunks/138-f02d230bd104b4f1.js","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/chunks/138-f02d230bd104b4f1.js HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"508d-194982c9df6\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20621,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20621), with no line terminators","md5":"7c00c819cd5a1810fa56f066eee6279f","sha1":"891527947094458aa4ad9bd53309d2ed51cdea04","sha256":"5600ae7e9efa1c0b90ac5ec79a675c9a3fc48e42590e1ae99a8c2df3b44d5935","sha512":"b96fee2595e02ce130ac0809766b19b27d017c53d12e15479875d3854b33b9d8c17557226783fa8af49dc9efc891c8f5b50bb10f5af51e95bdecb5c8f11b9ca6","ssdeep":"384:U1AYYX/AdGgn73EGjTlLw4nItEO8Tn/U7vuHmKDwwcGXx:UGiv793lLl8lA/4vuHr1cs","tlshash":"2092d8ba71d2f8a243db40a0043b1006f27a5d7e245e6288f7f4ddd6f57046da1a3f2a","first_seen":"2024-10-15T06:29:05.876772Z","last_seen":"2026-07-21T22:36:47.984281Z","times_seen":89,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram.thelifestyls.com/images/sugg/b75b4eaf820422156e80e8b16e1d4970.jpeg","fqdn":"instagram.thelifestyls.com","domain":"thelifestyls.com","tld":"com"},"ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"instagram.thelifestyls.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:38:03 GMT","end":"Sun, 24 May 2026 23:38:02 GMT"},"fingerprint":{"sha1":"A7:EE:87:31:92:3E:AA:98:10:11:30:E3:A7:91:CD:D7:F0:6D:52:D5","sha256":"1A:1B:C7:A4:A5:72:B9:BB:AB:0A:EF:BC:F8:9F:EA:12:D2:37:1C:E3:F5:85:62:1A:1C:17:B6:76:84:5F:6F:48"}}},"request":{"raw":"GET /images/sugg/b75b4eaf820422156e80e8b16e1d4970.jpeg HTTP/1.1\r\nHost: instagram.thelifestyls.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3813\r\nLast-Modified: Tue, 11 Jan 2022 08:41:24 GMT\r\nConnection: keep-alive\r\nETag: \"61dd42b4-ee5\"\r\nExpires: Sun, 08 Mar 2026 19:53:04 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"58c73bd0c8aaff7da0e8a9f544d86967","sha1":"065ff7c9fbce453a7c3f3b807e402d130bdc8756","sha256":"93f0635c18262164453e401596eadad9e90b792136fed9235ffda9ecde631840","sha512":"f08a684fee273008f4abe42385805e5f9355935634348e6721c7776bc8590b50cce78e3c59b700c8a953ee2c5eabb1405ea977f02fc7d0ca6d0ae624f684136a","ssdeep":"","tlshash":"f67129867350a007d83af435549c2094b72abc4b6ae52faf6d372aa88d6f0d48b449c2","first_seen":"2026-03-01T19:53:32.269483Z","last_seen":"2026-03-01T19:53:32.269483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":505,"dns":26,"connect":157,"send":0,"wait":154,"receive":0,"ssl":322},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram.thelifestyls.com/images/sugg/75853cb38982b4196b35b1b466d4e198.jpeg","fqdn":"instagram.thelifestyls.com","domain":"thelifestyls.com","tld":"com"},"ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"instagram.thelifestyls.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:38:03 GMT","end":"Sun, 24 May 2026 23:38:02 GMT"},"fingerprint":{"sha1":"A7:EE:87:31:92:3E:AA:98:10:11:30:E3:A7:91:CD:D7:F0:6D:52:D5","sha256":"1A:1B:C7:A4:A5:72:B9:BB:AB:0A:EF:BC:F8:9F:EA:12:D2:37:1C:E3:F5:85:62:1A:1C:17:B6:76:84:5F:6F:48"}}},"request":{"raw":"GET /images/sugg/75853cb38982b4196b35b1b466d4e198.jpeg HTTP/1.1\r\nHost: instagram.thelifestyls.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5515\r\nLast-Modified: Tue, 11 Jan 2022 08:41:23 GMT\r\nConnection: keep-alive\r\nETag: \"61dd42b3-158b\"\r\nExpires: Sun, 08 Mar 2026 19:53:04 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3","md5":"ac977e97f9838e7ea49c555eff0cb61f","sha1":"8e8dce3f721e61c01f0f98bd7cf929d855b9eec4","sha256":"5d7103b4cc3eb019821400369fa7b65c9d55faa444451803c6e68d4af7549882","sha512":"436447322d7ab1d4eef4cfa3962916b46506df80290c0e45ffc6a5f424ff6b2e3f291b70ee551cb46c0d0873e6f11d5b7daf9b910193567df7eab22af41c40cb","ssdeep":"96:XE7hO3ZvdLCoDjApa6sSWHIWbOJnMVZ5ZNgdapJ3whvHiIhLkSQY3UYxdbrbl4eX:XG83ZvMoPApsSLnM75ZNEaT34Hdd3UYX","tlshash":"3cb18e259b3092dad94c65bfa316f7775b6f070acb415e41ad700c3937f5398381c82a","first_seen":"2023-06-10T01:24:59Z","last_seen":"2026-03-01T19:53:32.270304Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":516,"dns":25,"connect":157,"send":0,"wait":156,"receive":0,"ssl":335},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram.thelifestyls.com/images/sugg/e837a7c056cb58860b84c8424275a50b.jpeg","fqdn":"instagram.thelifestyls.com","domain":"thelifestyls.com","tld":"com"},"ip":{"addr":"45.56.87.55","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"instagram.thelifestyls.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 23:38:03 GMT","end":"Sun, 24 May 2026 23:38:02 GMT"},"fingerprint":{"sha1":"A7:EE:87:31:92:3E:AA:98:10:11:30:E3:A7:91:CD:D7:F0:6D:52:D5","sha256":"1A:1B:C7:A4:A5:72:B9:BB:AB:0A:EF:BC:F8:9F:EA:12:D2:37:1C:E3:F5:85:62:1A:1C:17:B6:76:84:5F:6F:48"}}},"request":{"raw":"GET /images/sugg/e837a7c056cb58860b84c8424275a50b.jpeg HTTP/1.1\r\nHost: instagram.thelifestyls.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5121\r\nLast-Modified: Tue, 11 Jan 2022 08:41:23 GMT\r\nConnection: keep-alive\r\nETag: \"61dd42b3-1401\"\r\nExpires: Sun, 08 Mar 2026 19:53:04 GMT\r\nCache-Control: max-age=604800\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5121,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3","md5":"95a4576fdfd7b40fd9648b06fb20f87f","sha1":"6628830d31303694694d27374d6cfc2e0af0ed61","sha256":"b14ef2577a0549b19e9d5dfe23b7a804042cba02d23955149dadb8e91f9477b6","sha512":"332cd87a745124b8de7c627d1cf7311536d6e9fe2555cd50becea89a24369e987dcc5633d3ee0015ac7a60e950a958d4cbf52544538c1efb968cc41e1f1cf808","ssdeep":"96:u4SSUlUIRLpqw2xC6jbGBtXSHLox4wo2cmjHj1WL+O+YfAQEgDFm:u4SS0PcC6eXX148jj0L+O+8f1c","tlshash":"59b14dcabb04c0e7cc66f8b2a7d81bb0d11afc296d91271f0bf4db445ad266284e1795","first_seen":"2026-03-01T19:53:32.271307Z","last_seen":"2026-03-01T19:53:32.271307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1148,"timings":{"blocked":493,"dns":24,"connect":154,"send":0,"wait":154,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/captions?tag=Attitude\u0026_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /captions?tag=Attitude\u0026_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"nxcsggakdb2yy\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3851,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2454)","md5":"96e1bf3296468029bb4e5ba28f4ae9e6","sha1":"4b4fca595c72b1d06f0f6986364985a6dd16b025","sha256":"ad464f7458f863c15da831ed5931be393a412ac80cef978b49a1c5f718c3a961","sha512":"0aa45c80b8acf1baff24b19e7bc41bc61a67f84ec6a00077526571290579631963df5658fd2df6bcb6e188dff15e3cd1b221741a6148343a3759c6a873f3c0d9","ssdeep":"","tlshash":"08819c3b5208da7a3eb756d5411fc707a18d8a3b17615cf283ee5e6c035523a2e8f6c0","first_seen":"2026-03-01T19:53:32.24449Z","last_seen":"2026-03-01T19:53:32.24449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"socialtrends.online/_next/static/media/47cbc4e2adbc5db9-s.p.woff2","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /_next/static/media/47cbc4e2adbc5db9-s.p.woff2 HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 34668\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 24 Jan 2025 11:57:28 GMT\r\nETag: W/\"876c-194982c9df1\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34668, version 1.0","md5":"4746809ed1c17447d45d2a96c64796d4","sha1":"300a3511100a2ea1fbf43bf329855e17da1f4532","sha256":"8139a402ce239285716452e5668bce94bbf240b433fcfa2e154aa7e4d240445b","sha512":"28c2ae34437a02c99282a2e0cf8c3de11bfa07b55835068c82578dac1947dd3a74ab904cfdae0ce1d14767d601884c2e8f577025f647cae4a06c8dee220cbb61","ssdeep":"768:btpz8R5UTJqgQ3XvFF1LTbda57GqOWBR+LEPP:Jpzk5qepLTbda571v0EPP","tlshash":"35f2e1816c1c7085da4951f9cda50bcd46ee86f98d3f6d2118613a38e6c802f47f97be","first_seen":"2025-01-09T20:17:59.500754Z","last_seen":"2026-07-22T09:37:22.935653Z","times_seen":24131,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"t0.gstatic.com/images?q=tbn:ANd9GcQeObnc29-gZ1ACpp0qIvwzEYzMdocQYZqFrAEggzsxaGRF4rpSmNWExH47zny4D2SSXLBptL-p","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQeObnc29-gZ1ACpp0qIvwzEYzMdocQYZqFrAEggzsxaGRF4rpSmNWExH47zny4D2SSXLBptL-p HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\ndate: Sun, 01 Mar 2026 19:53:04 GMT\r\nserver: sffe\r\ncontent-length: 43\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-22T11:19:07.993413Z","times_seen":374378,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":90,"dns":40,"connect":24,"send":0,"wait":201,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.gstatic.com/images?q=tbn:ANd9GcTMWweib_uayK3Y9MTQM2p79GSt5MTeuiAp58KnD9WsUXg85tNz2CBxOzh9rUckkjA-fC0UViPx","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:03.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcTMWweib_uayK3Y9MTQM2p79GSt5MTeuiAp58KnD9WsUXg85tNz2CBxOzh9rUckkjA-fC0UViPx HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://socialtrends.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 3406\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 24 Feb 2026 16:24:24 GMT\r\nexpires: Wed, 24 Feb 2027 16:24:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 27 Mar 2025 02:01:00 GMT\r\ncontent-type: image/jpeg\r\nage: 444519\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3406,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"423c0f44c757f3aadff8e60ba7b83b90","sha1":"4b1d256b497ca2559fb9c98dd9e98befe615b492","sha256":"b7788774c5307e8a6d57238f31d7026206bdcc859d6e4593a69eae73ed7ad2df","sha512":"818a8f687b7be14d01f8360c6b4ac538136a3fdbf0d126e15d0fd0998ccde78d5821c3260b24e3ad1d71d595255caae66f5ace0d40ac4ef3b75ccedc61e55607","ssdeep":"","tlshash":"89612ad6b2916d22ec6c70b950fe1f61092470e3fd9a16bebe9170e6f6df3060a500c4","first_seen":"2026-03-01T19:53:32.27295Z","last_seen":"2026-03-01T19:53:32.27295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":89,"dns":25,"connect":21,"send":0,"wait":8,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"socialtrends.online/bio?_rsc=2xkzn","fqdn":"socialtrends.online","domain":"socialtrends.online","tld":"online"},"ip":{"addr":"178.62.204.197","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://socialtrends.online/","date":"2026-03-01T19:53:04.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socialtrends.online","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 11:06:26 GMT","end":"Mon, 18 May 2026 11:06:25 GMT"},"fingerprint":{"sha1":"81:3F:66:6A:DD:F0:6C:34:DF:BF:91:53:6C:3A:B8:F6:E0:96:83:30","sha256":"C6:72:06:05:BC:B3:8F:3B:6A:80:C2:2E:98:A1:24:BF:11:5E:92:A2:AA:5F:FD:B6:EC:D1:9A:D8:CA:C8:56:73"}}},"request":{"raw":"GET /bio?_rsc=2xkzn HTTP/1.1\r\nHost: socialtrends.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://socialtrends.online/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%3F%7B%5C%22utm_source%5C%22%3A%5C%22app_pinned_gclid_1%5C%22%7D%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Router-Prefetch: 1\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_HHXLSWND7K=GS2.1.s1772394783$o1$g0$t1772394783$j60$l0$h0; _ga=GA1.1.1946244936.1772394784\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.26.1\r\nDate: Sun, 01 Mar 2026 19:53:04 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nCache-Control: s-maxage=31536000, stale-while-revalidate\r\nETag: \"htxh6rk4bg35i\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.26.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4087,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2369)","md5":"917ab9c084a7f7c38d86ea891ed2cb89","sha1":"0a52b819dc8adc342a08366296a372e81cfdaea7","sha256":"ec9de7a210fb2a1626ca2a33fe63df35e54d60a76ec0d46d296b07f8a53844b0","sha512":"47ef576ed878c7415ac43a119c64b44b4cd89407df81e6a2400e38b24edc095cca5cd137007f08e7790dd395feec14afbbe19f6cefa88a9d4fdd11bb2b9c095a","ssdeep":"","tlshash":"89819c3b5609dd7e3ebb5295401fcb0ba14e863b27615cf286ee5f6c03552362e8b2c1","first_seen":"2026-03-01T19:53:32.273835Z","last_seen":"2026-03-01T19:53:32.273835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-01","alert":"Phishing Block","trigger":"socialtrends.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-01","alert":"Sinkholed","trigger":"socialtrends.online","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}