{"report_id":"5d1ff233-6f94-44e5-b892-b51e36fda0f3","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-11-01T02:11:07Z","url":{"schema":"http","addr":"instagram-clone-get-data.vercel.app/","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"title":"Login • Instagram","dom":{"size":2529,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0017b6cac91c3a9a210e339281023f24","sha1":"5b79795473fcfba73816b654cb3716b6ea22aba6","sha256":"cabb94d945771e171f380c680d0e46314dd433612328de97736a6ff8f284f69c","sha512":"72bf36bcd91096df4fc0172d2d78d408f039f4ad8927f3a9b1e124a5c39ecd1e0b84e13415287bbd8e69622435de7d70f7cbd6487ea039539119e721b5ae7a0e","ssdeep":"","tlshash":"5851535234f9445f0791b79eae007b386d5385b79a0e2e1530ac0c1fbfe2e468a4766f","dom_hash":"domhash809c428dbcb1d3933fd02f56b7d14063","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"instagram-clone-get-data.vercel.app/","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-06T02:11:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-01","alert":"Detects file containing Telegram Bot API","trigger":"instagram-clone-get-data.vercel.app/assets/js/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app/","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"instagram-clone-get-data.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-11-01T01:45:49.374328Z","last_seen":"2025-11-01T01:45:49.374328Z","alert_count":37,"request_count":7,"received_data":48666,"sent_data":3380,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/js/main.js","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"228c890303ee567b599491c6da4664b5","sha1":"736bb503236d62f5b1f8b51b357e3f703aa037d2","sha256":"d9c7201207470780e2e83f1747b3f4f3483a7346beac2c0d521d6f2cf2ed4110","sha512":"4bd985a6d7d3d201380ba1dafd7f7431639b3e944061a192dc671e608a5e6d856c6054c21ffa543327149868f16401672e77a853a8d7d3a6254c670e7903242f","size":1076,"token":"8065764421:AAH--X_-y8QaaHIXANPjSFPNlf3X80RXDpQ","is_revoked":false,"bot":{"token":"8065764421:AAH--X_-y8QaaHIXANPjSFPNlf3X80RXDpQ","user_id":"8065764421","username":"GetPasswordWithInstagramBot","first_name":"Instagram","last_name":"","chat":{"chat_id":"-4944793245","title":"GetInstaPass","type":"group","bot_is":"member","total_users":0,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/js/main.js","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"228c890303ee567b599491c6da4664b5","sha1":"736bb503236d62f5b1f8b51b357e3f703aa037d2","sha256":"d9c7201207470780e2e83f1747b3f4f3483a7346beac2c0d521d6f2cf2ed4110","sha512":"4bd985a6d7d3d201380ba1dafd7f7431639b3e944061a192dc671e608a5e6d856c6054c21ffa543327149868f16401672e77a853a8d7d3a6254c670e7903242f","ssdeep":"","tlshash":"3a11442610b24c710327e0a61657c28474b0844f7403ec367d9ca7997f8dcb99de13c5","size":1076,"data":"","first_seen":"2025-11-01T01:45:52.044406Z","last_seen":"2025-11-01T02:11:08.55434Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-01","alert":"Detects file containing Telegram Bot API","trigger":"instagram-clone-get-data.vercel.app/assets/js/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/img/facebook.png","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/img/facebook.png HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34086\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"facebook.png\"\r\ncontent-type: image/png\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"e68f9d6aa3669ad18cb616031fe10214\"\r\nlast-modified: Fri, 31 Oct 2025 16:42:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7ppvv-1761963045693-c81fee7f2571\r\ncontent-length: 18351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 160, 8-bit/color RGBA, non-interlaced","md5":"e68f9d6aa3669ad18cb616031fe10214","sha1":"0418a90701f77628130f21fac05690e428bdea36","sha256":"87e2caeff90e61fd12e071f9ad6b2f433cd3e30992121e890f21318538e7563b","sha512":"70e0a936a00b099a51dd2d951b253e6f596511e88a7e3d8928165eedc179b2e50cbc5facbad48713b50db000b55b0f62f628804a7ea831ed90fcc3725123b4ec","ssdeep":"384:VUi8wCZi9CgHsOXckJjYD3bcMR98mqG9pxfTyeH5FtntTEQJ:VUibpCgHsJ3dTH7OqLTXJ","tlshash":"4682d08c14cc61e5ba8b9f29c65256e9cce019d5eea9cc2fc369c71f7e6c942b0d8910","first_seen":"2025-11-01T01:45:52.04674Z","last_seen":"2025-11-01T02:11:08.551003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/img/icon.png","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/img/icon.png HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11901\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon.png\"\r\ncontent-type: image/png\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"5fddd61c351f6618b787afaea041831b\"\r\nlast-modified: Fri, 31 Oct 2025 22:52:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7ppvv-1761963045758-465c44077c4f\r\ncontent-length: 1772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"5fddd61c351f6618b787afaea041831b","sha1":"388ddf3c6954dee2dd245aec7bccedf035918b69","sha256":"fdc2ac0085453fedb24be138132b4858add40ec998259ae94fafb9decd459e69","sha512":"16518b4f247f60d58bd6992257f86353f54c70a6256879f42d035f689bed013c2bba59d6ce176ae3565f9585301185bf3889fb46c9ed86050fe3e526252a3e76","ssdeep":"","tlshash":"51311de2c2315d7cfa7032c720188862de93bc6e43836f6b1e5413657d56680eae7924","first_seen":"2023-07-20T20:20:50Z","last_seen":"2026-08-08T07:36:57.914434Z","times_seen":14966,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T02:10:45.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3467\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"53d532b0a941bb6c28a9e99c373946ac\"\r\nlast-modified: Sat, 01 Nov 2025 01:12:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jgbvp-1761963045413-7602ffb6fd40\r\ncontent-length: 1087\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2567,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"53d532b0a941bb6c28a9e99c373946ac","sha1":"d48b64edb1a12108fa3979ee76fccfa194675db6","sha256":"0c3e28aa19cdb550fb3fa5a27fbf4ec8c4839b13fcd832d8ca10fe9e6b45f546","sha512":"3d12ce0857202483ab01f72e18f708cbd693df141e8543cc15400debd87080ef7093af39ff1205da968c1a99da75cc578f5bc07895b37ef596aea3a1734b5f83","ssdeep":"","tlshash":"a751765234e8445f0791b79ead007b386d5385b79a0e2f0530ac0d1fbfe2e468a0766f","first_seen":"2025-11-01T01:45:52.042409Z","last_seen":"2025-11-01T02:11:08.552621Z","times_seen":2,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":56,"dns":29,"connect":1,"send":0,"wait":10,"receive":32,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app/","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/css/style.css","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 11910\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"68dbbd2e2f9651b31a3509f7eaa6ebac\"\r\nlast-modified: Fri, 31 Oct 2025 22:52:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::flwkl-1761963045681-d0e730efb73d\r\ncontent-length: 692\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2158,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1c1695ea038108eebe026de9e6c6899","sha1":"ec801d11f7c910c3d942b52a7b686eddbc47980c","sha256":"663ec1bb9df5bc06aebda83a4433973b3d1152dd099b9cc8058a6eea2530dc10","sha512":"cdfde08ca0643c9503d0847bd9b9cc1ee30e3118732ab94a54a7abd2ed4d0ee0013f04e8a45b99c61dd0bf7e76dc7feb29d7a27fbcbd4e8deeff453326e3c8fd","ssdeep":"","tlshash":"cb41d3ca1a370501b90fd4246fb68311327c9493914fd9793ed5768ccf8a29891a3f8c","first_seen":"2025-11-01T01:45:52.045924Z","last_seen":"2025-11-01T02:11:08.553206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/css/base.css","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/css/base.css HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3766\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"base.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"c6c665f1a7ce6725b2558be137959c90\"\r\nlast-modified: Sat, 01 Nov 2025 01:07:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7ppvv-1761963045680-f2595b8ffca1\r\ncontent-length: 548\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bc03c6db4afc65f2a4fccd053043d12f","sha1":"79148be374801f0007a0520e56e546ccbed7bb2d","sha256":"f2b4251ebf7583502b82f9929e79cd64a95ae9149c75292c00eba3df6666075a","sha512":"091ad2d6c1414fd7b9e08b55e45106a4164048f3dfb1d4d739739201cc053fd79d7e7f435acd795a44e61e1735cc939233d57acab446871f961ee4fb8cb69e6c","ssdeep":"","tlshash":"3421cc039ee31c2a685790183b9e9245335ca017e71fcea4be4ca7a8df4477a08717c9","first_seen":"2025-11-01T01:45:52.045225Z","last_seen":"2025-11-01T02:11:08.553813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/js/main.js","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34086\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"906048c659e9b10c00230a6aa1b11175\"\r\nlast-modified: Fri, 31 Oct 2025 16:42:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::52br5-1761963045694-e3d9278c0aa3\r\ncontent-length: 571\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1076,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"228c890303ee567b599491c6da4664b5","sha1":"736bb503236d62f5b1f8b51b357e3f703aa037d2","sha256":"d9c7201207470780e2e83f1747b3f4f3483a7346beac2c0d521d6f2cf2ed4110","sha512":"4bd985a6d7d3d201380ba1dafd7f7431639b3e944061a192dc671e608a5e6d856c6054c21ffa543327149868f16401672e77a853a8d7d3a6254c670e7903242f","ssdeep":"","tlshash":"3a11442610b24c710327e0a61657c28474b0844f7403ec367d9ca7997f8dcb99de13c5","first_seen":"2025-11-01T01:45:52.044406Z","last_seen":"2025-11-01T02:11:08.55434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2025-11-01","alert":"Detects file containing Telegram Bot API","trigger":"instagram-clone-get-data.vercel.app/assets/js/main.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-get-data.vercel.app/assets/img/h1.png","fqdn":"instagram-clone-get-data.vercel.app","domain":"instagram-clone-get-data.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-get-data.vercel.app/","date":"2025-11-01T02:10:45.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Oct 2025 22:29:14 GMT","end":"Fri, 23 Jan 2026 22:29:13 GMT"},"fingerprint":{"sha1":"6B:2C:E8:1D:DD:60:8E:79:54:CE:FA:CD:72:7F:4D:C0:7B:8E:6F:6B","sha256":"EF:F6:2B:04:2D:F4:71:55:1C:CA:FF:E3:7C:C9:DA:AB:BB:2E:C1:D2:5F:62:C5:3A:A8:D0:FC:85:01:D3:0D:1F"}}},"request":{"raw":"GET /assets/img/h1.png HTTP/1.1\r\nHost: instagram-clone-get-data.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-get-data.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34086\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"h1.png\"\r\ncontent-type: image/png\r\ndate: Sat, 01 Nov 2025 02:10:45 GMT\r\netag: \"203542ba39fbe52500b6e33b6fdccd4a\"\r\nlast-modified: Fri, 31 Oct 2025 16:42:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::flwkl-1761963045691-ae8a3beb3972\r\ncontent-length: 17448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17448,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 261 x 85, 8-bit/color RGBA, non-interlaced","md5":"203542ba39fbe52500b6e33b6fdccd4a","sha1":"44f56a2deb6ff8987c992f95a48574bb7a229f0d","sha256":"81fa8c6743ea70216268acb34308f3c516408f2ccd114621bef2ae6e70e9c314","sha512":"72f1b644e2798f3786ace037b8098ee7a78b9fe5993ed629ecbd58a542c683fb40ccc8943167bbfd83b25f3cc2dc5a18256de41c37d3e30e1547abd1306ba13a","ssdeep":"384:nem/bWAdS7nnsv+rMJ/HuQtNIPTZqsTwLZSPG4NYxu:ne+WAdS7sv+IHuEPFsG4exu","tlshash":"3d72e182b024e70eceb5e66bdc27c367ef531b261f6c0fe1600cc51919c9eadca68558","first_seen":"2025-11-01T01:45:52.0434Z","last_seen":"2025-11-01T02:11:08.554959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-11-01","alert":"Phishing - Instagram","trigger":"instagram-clone-get-data.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"instagram-clone-get-data.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}