{"report_id":"61c2dc0e-948d-4e86-be5f-9c5efc67989d","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-04-29T13:58:32Z","url":{"schema":"https","addr":"instagram-ui-one.vercel.app/","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"title":"Instagram","dom":{"size":18636,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18050)","md5":"c7c9f65d14264b1399b473e6dfc07fff","sha1":"a53e3adfd1a01de2f1418127f5a5b56905ae4769","sha256":"b39f08c783c9eb810924ea5bd8f6350789a3108c016af35c90002af1541781cb","sha512":"d06354f6280487ab1ae7affcb6f3679dc697669fc6f6443d97ed626add5e51981cacbd0e72280de887ed35d490051bf93b1d1243535bc596ad9b2a4f9aeacc0d","ssdeep":"96:nzTdJJXO0Vs0yshsfsQsGs3sU1s1s1sWIuixV/u5HIJVbPTx+u5HIJVKrofgBu5h:zpvzbrtyV/TyVvfZyVCByVWSyVnth6zw","tlshash":"ad82437261506d3fb40b8fa9fa30bb69906dd346e2474a68d7be75b063c1c84dc336a4","dom_hash":"domhash1ba2826a14918f5c2adcacaf9892fd81","first_seen":"2026-03-31T02:59:45.916796Z","last_seen":"2026-04-29T13:58:34.722642Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-03T13:58:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-ui-one.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-31T02:59:41.29359Z","last_seen":"2026-04-29T13:53:16.36911Z","alert_count":96,"request_count":24,"received_data":1396099,"sent_data":11276,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"instagram-json-server.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-31T02:59:41.293174Z","last_seen":"2026-04-29T13:53:07.168556Z","alert_count":0,"request_count":3,"received_data":5540,"sent_data":1441,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/assets/index-12706145.js","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7145a1975f1d822e2be18fb4c6237609","sha1":"6cf5a98c975cb90d647d1526e8af21786f5a6043","sha256":"3e67a5be9d0cb0bc664b5431c30a86b75048ddf5aa91c27df04de655d688f8b0","sha512":"f653ae8a6bb73b96cf5f0e86c3fa497c03f75c9358d1f1c4e6d60f1b59a601077db42a78630fd770ab94c1832d9aefc708de7c808e8c394f27b8605247874f19","ssdeep":"3072:NP88URD27oSWtpMbdO3SmZHg8xZj9VNj5nmnH6Ep7Y4Ux49+r5u+dpz3/jsEyG+/:a7udISmpL795nmnH6EXU6kuqjsEgnCs","tlshash":"84343be831aab5629ba316b1407f110bb3392d27284c8460f111f9ea7ef550d917bfed","size":253188,"data":"","first_seen":"2026-03-31T02:59:45.933232Z","last_seen":"2026-04-29T13:58:34.732465Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a5.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a5.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a5.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471090463-735eeb7dd4eb\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-json-server.vercel.app/friends","fqdn":"instagram-json-server.vercel.app","domain":"instagram-json-server.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /friends HTTP/1.1\r\nHost: instagram-json-server.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-ui-one.vercel.app/\r\nOrigin: https://instagram-ui-one.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://instagram-ui-one.vercel.app\r\nage: 0\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"59d-RfS1IbLCVmQifrdwARFC8/UG15Y\"\r\nexpires: -1\r\npragma: no-cache\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::qkc68-1777471090216-43388b56374f\r\ncontent-length: 239\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"76b389eeb679c25c8c0bf6f842c20c8b","sha1":"45f4b521b2c25664227eb770011142f3f506d796","sha256":"a7b4a563e1a0b06dc025c0ff4da8cfbe19bd07b096e03dbc0c0cbe2a0c1eb37b","sha512":"ce147ed055ee93a45fde310abcbf85ac121da078872d28b5fdd63b3729c0166e1f8ebd1c9846ea19338f98d6cfdd366b4facf6d1e1192f477b214a47263e7c2d","ssdeep":"","tlshash":"54214421d5518cd75ec969b5fc6ea78020e0128b6d143e06befd3a6c8f8c67f6930269","first_seen":"2026-03-31T02:59:45.935277Z","last_seen":"2026-04-29T13:58:34.724521Z","times_seen":5,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":39,"dns":0,"connect":5,"send":0,"wait":177,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main1.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main1.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a2.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a2.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a2.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jmxlm-1777471090449-af34b5547f99\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a6.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a6.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a6.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 12:14:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jmxlm-1777471090518-eed4853eac73\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-29T13:58:09.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 407415\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:09 GMT\r\netag: \"621a75a79a6159369370dd7849ebbf86\"\r\nlast-modified: Fri, 24 Apr 2026 20:47:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qtwfx-1777471089714-7be6da5c1306\r\ncontent-length: 537\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":537,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"621a75a79a6159369370dd7849ebbf86","sha1":"e813ec900873fe39aabab6b896c023eb8f532748","sha256":"2acba6bbfdb7b727122ff680a142d759cf5eb9e161cd80c4e477fecbe10ff5b7","sha512":"cd152574d35332019cd7b5c3c4b80a7b37efda27cde626dd1a74c19cc567bdf286b3ef144fe05e32b8dae4781b2d37e347520f7633b3b9fecfafffbc58b93fcd","ssdeep":"","tlshash":"def050418cf0c919122013155dd1b429cd46d6cb8b4a5d1875f7306e4fc4f55c9db8b9","first_seen":"2026-03-31T02:59:45.943662Z","last_seen":"2026-04-29T13:58:34.725779Z","times_seen":5,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":27,"dns":3,"connect":1,"send":0,"wait":10,"receive":8,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/assets/index-e30735a1.css","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:09.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/index-e30735a1.css HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 14323\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-e30735a1.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"72fbe386fd9043054cd76f52d1aada0f\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471089993-338eab0b9c33\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8853,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8852)","md5":"72fbe386fd9043054cd76f52d1aada0f","sha1":"42f382e762693de51d3e132d597758c9dcca85df","sha256":"e30735a124c8dacf3e6f50b9c36b761a633ed113d82cb9968cd458e7816d1f06","sha512":"9a4561dc12dcefd4c9476934d27f5c1e0f601a1402362d7fbd06247801c8cdcc52462f3c3d1c0efffe15f89e26dbe4ebd4621aee0dea61b4a619c848cf49118d","ssdeep":"96:iOtwqjrFym7GxRe//9Hwy/ATH/9Hwy/ATPGbqj/f5m5cdiFF+ie80LsfN7vZEq0/:vtwdW9QyQ9QyjGrfT8n17tlMrznLr","tlshash":"bf02746f6b10046eada384f7d9e0ba4e750a71c1df3ed6eaa9835401fbca3b51cd1214","first_seen":"2026-03-31T02:59:45.944509Z","last_seen":"2026-04-29T13:58:34.72644Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-json-server.vercel.app/posts","fqdn":"instagram-json-server.vercel.app","domain":"instagram-json-server.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /posts HTTP/1.1\r\nHost: instagram-json-server.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-ui-one.vercel.app/\r\nOrigin: https://instagram-ui-one.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://instagram-ui-one.vercel.app\r\nage: 0\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"571-r08lG6HTUtYIcJUehvajLx1zcJw\"\r\nexpires: -1\r\npragma: no-cache\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::t795q-1777471090214-64c16825e0b5\r\ncontent-length: 385\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1393,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"02407e17a9dcdfbd27f7c7f0ad98bcd8","sha1":"af4f251ba1d352d60870951e86f6a32f1d73709c","sha256":"12733d2b2985db2679a532203dd597c4dba3cb8c70ddbbe631bc21a1016e7a77","sha512":"c454cd2161038ade77a1bd226a1abfb370dc25ab693fc4d574a1957b1d99f5158565846cf0a6c1f580d826cccf6fba618caed953ed87489be8292e13df5ae3d9","ssdeep":"","tlshash":"31213620ce806d470fc862b16deb4a9955a4039f5e0476087fd56a8ecf8ce6f597232c","first_seen":"2026-03-31T02:59:45.938734Z","last_seen":"2026-04-29T13:58:34.727026Z","times_seen":5,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":38,"dns":0,"connect":5,"send":0,"wait":168,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main1.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main1.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"71ccdaf00f41875510159ee6d8d52cc4\"\r\nlast-modified: Wed, 29 Apr 2026 12:14:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wm8tr-1777471090414-b100dabcbe22\r\ncontent-length: 222910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":222910,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=Canon, model=Canon EOS 70D], baseline, precision 8, 1280x853, components 3","md5":"71ccdaf00f41875510159ee6d8d52cc4","sha1":"0907cbdf5fb1077eae5e63928cb5c2c91960b78d","sha256":"b8e159223881e6228c3197ba1ad8b60d01e100151da52f00db9e9de49aff4a6e","sha512":"a19511d618af7d2762476e55090a24a89e4b18893e804db16a35aecf06934235f0372179d3f778b44d3e3e4917eec5c79f4cc4440ce1070794cccf2b8fd31c85","ssdeep":"6144:qoVPp+kLfTZpXdLpT+56qo2R6GdEey94cNmJh:lPk8JL46qoiFy94PJh","tlshash":"ce2423c0cf0635dfca68c55eaf8eba2466651574bca38111f0bb79deb5d31bc0a1c888","first_seen":"2026-03-31T02:59:45.942602Z","last_seen":"2026-04-29T13:58:34.727921Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/logo192.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14321\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo192.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"8ec7ee08e193f78e0c2e104d82aacb7d\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471090160-b5c25902b36f\r\ncontent-length: 17531\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"8ec7ee08e193f78e0c2e104d82aacb7d","sha1":"06be92a8e5a7d29a9584e713bf18c88908af6bd4","sha256":"aa5eec4a42733aa93f92ef1f75b9dc25b337ceee0014b4c1405472c50419d82a","sha512":"a39def848395b590294e63d44f825a5df18892a7f9c2e8614e6883b58033ca4343481945c706714e17732e37758ad628fb623e7901844cf741812ab30bec7081","ssdeep":"384:s+8fVrGiw87MVC5dGUzDA5NuvliCiljQloflaVyLCTj/0oed8AUc7z2HV:sZ9GiwIP5d0/7ioflQyLsj0o08AX7W","tlshash":"4572e1f9f30b4570ef208913124b07c4fad54c6a06e0c56e81bf94469d7be1f9a85382","first_seen":"2026-03-31T02:59:45.92642Z","last_seen":"2026-04-29T13:58:34.728494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-json-server.vercel.app/stories","fqdn":"instagram-json-server.vercel.app","domain":"instagram-json-server.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /stories HTTP/1.1\r\nHost: instagram-json-server.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-ui-one.vercel.app/\r\nOrigin: https://instagram-ui-one.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://instagram-ui-one.vercel.app\r\nage: 0\r\ncache-control: no-cache\r\ncontent-type: application/json; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"33a-XmFnlfWZU04s97/7PXNgrg6Xeo4\"\r\nexpires: -1\r\npragma: no-cache\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-powered-by: Express\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::zwc7g-1777471090216-e1cb44eb033f\r\ncontent-length: 826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":826,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"986c0fc672f9e1ab8d93f13021ce80ff","sha1":"5e616795f599534e2cf7bffb3d7360ae0e977a8e","sha256":"bff494f5780252570a0a305e478f86bc4ff390a4bf1d0f5296583e465596e181","sha512":"b0b18a20e25a00bfd93d76144c7dc707e1ac9ca510de9987cf28f85fe53b9bd6af5138b6cf5bfacdb5df76b6535f9ee13b94c3d4adcd6f9a40ff9165f55e9959","ssdeep":"","tlshash":"720131b6dc615d879e5c24f4a87fa78170e052534a687e02fede0c6cdfdc98a3870229","first_seen":"2026-03-31T02:59:45.922923Z","last_seen":"2026-04-29T13:58:34.729Z","times_seen":5,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":42,"dns":2,"connect":2,"send":0,"wait":168,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main3.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main3.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14321\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main3.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"0f07bafdf4518a3b2ea565e6a93a05fd\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jmxlm-1777471090418-00895971d468\r\ncontent-length: 96894\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":96894,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x852, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f07bafdf4518a3b2ea565e6a93a05fd","sha1":"73c1f07521be5e09e3b39ee580b980480244a979","sha256":"548fd0113dbe9795e29b25d1c65341b8cd4b1407768e8d56167505dd9a59d57d","sha512":"e36c2ff001a9df7017a0fa886fde227f10063394d51ab65024f0de9b024ce664a915c357d814be9a29b7b87f89daf9b3723e4352f18e4bd0e212d7d5deee0515","ssdeep":"1536:OMBdlbK9YQDlSIZbc2CgyZ9+j+czVfOwq07dYNZ7H6lZbj+doCB06gpJdzFNljiU:7bTniQMJYT7Hw16x0pjBPFKQ0riCteIk","tlshash":"779302c6c77255307f8c92ea0041927d63a3292c2d3a77b67b6861b79586b372ddc318","first_seen":"2026-03-31T02:59:45.941512Z","last_seen":"2026-04-29T13:58:34.72959Z","times_seen":5,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a3.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a3.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a3.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471090456-a90586fbc389\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a4.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a4.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a4.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jmxlm-1777471090461-77b1fa41734b\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a8.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a8.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a8.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wm8tr-1777471090519-39afe07eab3e\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/logo.svg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 14323\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"128ed8a5032dcedd4105767a60c6c228\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qtwfx-1777471090119-b34e5aa8dff9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9803,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"40cf4c399089feff1532074d93a4bac3","sha1":"c6b8a60a50de9bae62e3f7957b0041f460fac26d","sha256":"aeb916a631a4812a400156c1f607688bdef7acb95108a124cdb22eb5f6df3a60","sha512":"bf90db36e0c65f308a1980788f1813288a182612e9ed10e31bee799b9a4cebd81ca70ebc42c670b5b99688ecba86777e1fd55fa09a583726f9703aa219b519f3","ssdeep":"192:KkX+chqA680YB69Xc4hACWC+kNyrc1qKiffzxTzuTPC:ZfP6rcqpBqc1q3zIC","tlshash":"8b12b7a6c3a5c2f4f79c97988cf30c853aa438b63531b99cc6fa7841ec72ed4151da46","first_seen":"2026-01-12T00:31:02.39436Z","last_seen":"2026-04-29T13:58:34.730111Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main4.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main4.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14321\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main4.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"e74f85c63b1f089c671ef47b1d910caa\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wm8tr-1777471090419-3e62da2cc035\r\ncontent-length: 293880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":293880,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x849, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e74f85c63b1f089c671ef47b1d910caa","sha1":"c347f855c047541005d27166b962a88b14881c9d","sha256":"e68b84c79dd507a97bf65ffe4b73700d31fa4ad3d332ecbc4ffc93f9dff2455c","sha512":"6565dc500a33014f898c49cf955a053f05b4f22d4db7bcefd4ff9d9937dc9d7a6cc1702954bf1e2d9d1a98187cfd579be20b6ec44472b0bd0e4366cd56d8dfc4","ssdeep":"3072:1gh7PxMK9tF6t3ygIqQmN5kKQNuQSUYgmIS7YFj2Bbth8x/g+7fo8BlhAQTqFdFF:c19itW4k08ctCxH7o8WiydSruUuwQl","tlshash":"f854232f86e7f93c4c8ea09efe35518291f02ce7615e57c28efb9dc424d26ca6348456","first_seen":"2026-03-31T02:59:45.924232Z","last_seen":"2026-04-29T13:58:34.730618Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main5.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main5.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14321\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main5.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"421bdbcc079133d73244e606bd18bbf6\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471090421-edc2d4c4782b\r\ncontent-length: 116488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":116488,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x853, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"421bdbcc079133d73244e606bd18bbf6","sha1":"ed130f3db412a9bb7be0543bd15510f03a2de8a7","sha256":"089a3189e495895b2bd248956113ca5a68ff1d35ea801abf73442788875e2462","sha512":"bf328646f166c1cb268b28b1a97a9d4544482cccd76c637b91ea6cad0a4a5435275a954f5cee2fc71a177eae46bc1acb308c82b9d3f66ab9256a2bbd6dab3184","ssdeep":"3072:y6vqgZWNEBFg2Y5NLJiqBpbB0x5DEoSTsrr5FAU:yiqgZfDgLVJiWbB0qmr9","tlshash":"68b3124f2fc58cb1a9b62839a4461f441431b3545cb6c24e3be9f6e524b08d606edff9","first_seen":"2026-03-31T02:59:45.937216Z","last_seen":"2026-04-29T13:58:34.731168Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/logo.svg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T09:51:56.860212Z","times_seen":17869789,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/favicon.ico","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 14323\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"effaf392b936adc835e79dcbaf3f7119\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qtwfx-1777471090162-31efd77e6800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"effaf392b936adc835e79dcbaf3f7119","sha1":"2a412e69b34d128fc7452bf1a0a07f3907a60593","sha256":"39b0e9b0a7fdb38b2870ed341124d2bf3f464cfaa3b9485860302c14b7ecefde","sha512":"d7021539cf49be08224943bb692437bc6facae815618658da31a37c016bbfcef9b491f2297cc15d6b02dcccdb963d1362bedc9a0725b30a5ff8952f9c5b7d7e6","ssdeep":"384:/vYDN2YVTIpb5PfYZmRDjNMu3fajH4WB:JPfYZmRDjNMu3faT7","tlshash":"0662b64e444c58f4ff6e94f17d010cbd6b279f83b22cbb28f5a1b87916394a9f062516","first_seen":"2026-03-31T02:59:45.92155Z","last_seen":"2026-04-29T13:58:34.73171Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a7.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a7.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a7.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 12:14:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8b82d-1777471090518-79facb0a5f1c\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a9.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a9.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a9.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q2j4k-1777471090519-da9d9ccd3956\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a10.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a10.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a10.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s46wx-1777471090520-71ad7932a448\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/assets/index-12706145.js","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:09.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/index-12706145.js HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 14323\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-12706145.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: W/\"7145a1975f1d822e2be18fb4c6237609\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wm8tr-1777471089991-6aa9b9f97fc9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":253188,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37547)","md5":"7145a1975f1d822e2be18fb4c6237609","sha1":"6cf5a98c975cb90d647d1526e8af21786f5a6043","sha256":"3e67a5be9d0cb0bc664b5431c30a86b75048ddf5aa91c27df04de655d688f8b0","sha512":"f653ae8a6bb73b96cf5f0e86c3fa497c03f75c9358d1f1c4e6d60f1b59a601077db42a78630fd770ab94c1832d9aefc708de7c808e8c394f27b8605247874f19","ssdeep":"3072:NP88URD27oSWtpMbdO3SmZHg8xZj9VNj5nmnH6Ep7Y4Ux49+r5u+dpz3/jsEyG+/:a7udISmpL795nmnH6EXU6kuqjsEgnCs","tlshash":"84343be831aab5629ba316b1407f110bb3392d27284c8460f111f9ea7ef550d917bfed","first_seen":"2026-03-31T02:59:45.933232Z","last_seen":"2026-04-29T13:58:34.732465Z","times_seen":5,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatar.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatar.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"avatar.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"b3236d32e0981231fdaf37446afd83af\"\r\nlast-modified: Wed, 29 Apr 2026 12:14:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qtwfx-1777471090129-e1c5852020fe\r\ncontent-length: 59067\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":59067,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1025 x 1025, 8-bit/color RGBA, non-interlaced","md5":"b3236d32e0981231fdaf37446afd83af","sha1":"27355cf7512f1e1eb2834a731feb14ea20bf587f","sha256":"3e9ec9cb51dfa8717857b5d098195851944504db6bc14459bccb222fc94b3b53","sha512":"c995b767e2a997e4d71b6b3cd2f14facfc0d27ad7d85678aa56e504c944565d401b7a65cb103d69ba9af868648503abf59f61ad5cfebe881ea89a15f97dae76b","ssdeep":"768:/cUrnCm7T2yJgX9jSiF4i8yZWgitlufvD1KlCU22hHSu0+2cCBJGQhjlt8vpz61a:/cACzL1SO4i8eFul8slCU2Ju0Wy3eP","tlshash":"3f430138db8d587bed6d99b89187c8ac7b2960e537709f32589d2163170e1d0b0ce9b8","first_seen":"2026-03-31T02:59:45.919603Z","last_seen":"2026-04-29T13:58:34.733052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/posts/main2.png","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/posts/main2.png HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6207\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"d4e41638fb202bee13c6b5ec2425d73f\"\r\nlast-modified: Wed, 29 Apr 2026 12:14:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xlxp5-1777471090420-d947597cdf6a\r\ncontent-length: 153640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":153640,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x719, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4e41638fb202bee13c6b5ec2425d73f","sha1":"8660b95110369e95dc9beb01eaa1942f345c15f4","sha256":"bf81312d82ea6e1c2a9dbeb6262b20906ad1820915b53a0c005dca3440e84cc3","sha512":"339c1aa9fe1ae518ad45830d9e61b44731398559ba7be9ce17fedad2edb0c704b9f805edb39dea58ba95ef602ef067a98706a5735d97a2dc46fc83213eeba3cd","ssdeep":"3072:pESYiEn8nwsR9ioMiGYgnjUQF+JK09T7jWagSV6+HDSA:WSYiE0i3iGYo3Fm9P6+HeA","tlshash":"ede312090ce4ae6c898945f5dccbef329c10565a2fbe572b12dc8e193513ec3e3ad169","first_seen":"2026-03-31T02:59:45.945522Z","last_seen":"2026-04-29T13:58:34.733542Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-ui-one.vercel.app/images/avatars/a1.jpg","fqdn":"instagram-ui-one.vercel.app","domain":"instagram-ui-one.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-ui-one.vercel.app/","date":"2026-04-29T13:58:10.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/avatars/a1.jpg HTTP/1.1\r\nHost: instagram-ui-one.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-ui-one.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 14322\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"a1.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 29 Apr 2026 13:58:10 GMT\r\netag: \"44b57be7141ce71bf23ea234790784b0\"\r\nlast-modified: Wed, 29 Apr 2026 09:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xlxp5-1777471090448-5f74dbc0a4c2\r\ncontent-length: 13603\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13603,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2, datetime=2021:08:21 02:22:38], baseline, precision 8, 236x236, components 3","md5":"44b57be7141ce71bf23ea234790784b0","sha1":"9b6e46e95ff21877ff5a8b12b54fc4525b3059ed","sha256":"54b43272299328b24027e7249f8010ecb4b555201db0b537aa676caa31cd1f29","sha512":"2f4860a0bb47c204c53640e74b2b47c365e1bfb85489185f5e8248eb435b35e52bb500c57f53571127ca9bc322fc3e2db81ca82976c98d855a21bff2f12a6b42","ssdeep":"384:SWuUGp5y5/TE8TBsYqfpl59lScQFDDiaTk0mThYagHHKN6sC2nIf:3uz7yxTEIsYs39CpDHA0mInKNjC2nIf","tlshash":"0f52cfa8ee549702eb938ef2e95a4f875300f6dd312fb90d3a4c1bb16a95198370a14c","first_seen":"2026-03-31T02:59:45.93023Z","last_seen":"2026-04-29T13:58:34.723308Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-29","alert":"Phishing Block","trigger":"instagram-ui-one.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-29","alert":"Sinkholed","trigger":"instagram-ui-one.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}