{"report_id":"6637c809-519b-429c-8e23-5bef4831cd2e","version":6,"status":"done","tags":["instagram","meta","social","phishing","suspicious","telegram_bot"],"date":"2026-05-07T14:59:10Z","url":{"schema":"http","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"title":"Instagram clone","dom":{"size":5190,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8333b1021a4c8400b293d0d71ac9efad","sha1":"0b9950f2a27cc615cc73237bfd266efee3ba111e","sha256":"a14ab98559d6fa2ab118499e157103a734d733dd570491c6b13ce57e2b74d41a","sha512":"7c2936c5eded351adc33eaff17bde93491ef6d73e65183bf0db5d8006ad1cc84da8b818066a392cb183ebc55339857c8552c63fff986bb70f5d1bf6ed4834a4c","ssdeep":"96:nRqlV/Z4euSTSOlJGYyJjMIZI96AOFrEY7Y3soNz:RyVzeOlUFWIZI0AOHVe","tlshash":"ffb1335620f1086b03a3a59e7d5366146c928053eb0ff95931ac4f9f2fd6f134d9329e","dom_hash":"domhash76ebe77d583d87e7998af9229fe66b9a","first_seen":"2025-11-30T15:54:29.641168Z","last_seen":"2026-05-07T14:59:10.865006Z","times_seen":13,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T14:59:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"hamzachehlaoui.github.io/login/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"hamzachehlaoui.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2025-11-30T15:54:27.77735Z","last_seen":"2026-04-15T12:17:37.739061Z","alert_count":18,"request_count":6,"received_data":35961,"sent_data":2867,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Axios:1.6.7","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-05-04T00:24:43.265765Z","alert_count":0,"request_count":1,"received_data":41854,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"md5":"d9aa61251f9fd4fc14b3d2a923fae2ac","sha1":"e442e349fa83ddf5c59ad7e50c2d6939b4ac42bf","sha256":"ce68c506af0106bfc0eb4c5d282e4824290684bf844c73f01160488728fa02ee","sha512":"9cfba39441a3b84d11bde168846b9e1a004130c0ec13d0f6213b68e34da1dda13eb919625246b911b99db20a719a03deb1788a02fbff94ae228cec804ff7d538","size":2015,"token":"7973586526:AAGKL93OI5obrZR-S101MO3NuLSSzLi_WDs","is_revoked":false,"bot":{"token":"7973586526:AAGKL93OI5obrZR-S101MO3NuLSSzLi_WDs","user_id":"7973586526","username":"chehlaouibot","first_name":"hamzatest","last_name":"","chat":{"chat_id":"7686356360","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d9aa61251f9fd4fc14b3d2a923fae2ac","sha1":"e442e349fa83ddf5c59ad7e50c2d6939b4ac42bf","sha256":"ce68c506af0106bfc0eb4c5d282e4824290684bf844c73f01160488728fa02ee","sha512":"9cfba39441a3b84d11bde168846b9e1a004130c0ec13d0f6213b68e34da1dda13eb919625246b911b99db20a719a03deb1788a02fbff94ae228cec804ff7d538","ssdeep":"","tlshash":"3541dc7b41320c64032335eb6687a10125b2104b790ae89f3b5ccf7d2f86b2475a3b4d","size":2015,"data":"","first_seen":"2025-11-30T15:54:29.648869Z","last_seen":"2026-05-07T14:59:10.880601Z","times_seen":13,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"hamzachehlaoui.github.io/login/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/axios@1.6.7/dist/axios.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a46ffdababfaea9a1d2f8da24fd43086","sha1":"a54d5dade6f704214f6184c815926158c0fc21e0","sha256":"3434b67595c68071824e142d077ce7e105d40ac40b15164896d11e54078d0213","sha512":"3507c1fdb0da07c91a49717c13bec98e11c6e4f33a5d5471bc7ce4662c25ddd7560843c16b6dd3efa32e592c0025d306267990a8cd15798f6416ccecac1105ad","ssdeep":"768:M+/XtcUl+5BCzCk3cuyl+lRCj1Q3w8zdTtWaqlBxHdhJNK/1:ZtPZleRSJzB2qt","tlshash":"2e03d8c9b6d2f06143a771b4806f200bf23aa915b48d8454f225ece67cb950e936bf7d","size":40997,"data":"","first_seen":"2024-01-25T21:42:49Z","last_seen":"2026-08-02T08:07:45.627396Z","times_seen":13703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/img//instagram-logo.png","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/img//instagram-logo.png HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/login/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"67bb4b2a-f01\"\r\nexpires: Thu, 07 May 2026 15:08:48 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A6A4:14E7:483AD51:48FC942:69FCA8A7\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165928.064023,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 57f5c8cd411c8523dd0c4a892ab1b55260c03efa\r\ncontent-length: 3841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 58, 8-bit colormap, non-interlaced","md5":"c46f54e523f2656d2f518d51623448a0","sha1":"d8f8311ae18fcd2b0d9bea85eb29a20e209518f8","sha256":"b9c604018a550b63d359608469904de09b8efc5f38395cca106faa49262dfde0","sha512":"9eb3830d8647d31cfbb5587c5fe0c06066e95bbeb23c3c65076eeb6448ec6d42c615fc42eba446af054866e15fefc7c9d205df4846d886b0242b76fba7e5602a","ssdeep":"","tlshash":"be810bd2b4a76ae747b49f5113467c77c43863c7454a915a682fa04f67387d20185790","first_seen":"2023-05-10T00:48:35Z","last_seen":"2026-08-08T13:26:55.83234Z","times_seen":689,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/img/apple-button.png","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/img/apple-button.png HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/login/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"67bb4b2a-eaa\"\r\nexpires: Thu, 07 May 2026 15:08:48 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: F3B0:F0DFF:584F727:5938D94:69FCA8A8\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165928.066390,VS0,VE129\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 66e1349b74d78b4c3c2f28c8dbf254906209cb34\r\ncontent-length: 3754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 306 x 90, 8-bit colormap, non-interlaced","md5":"4b70f6fae44727678540b68e876908b1","sha1":"d5a23520acdf18636380e1a88d3de2a1efbf6ce1","sha256":"14c09561486ba385a8a62bc0a8b41e03638a6334648113a7f28be47271eccb5e","sha512":"f00497bbf393f680c0352c4485e74fc7519557ec6dae6fedeeb206b094ac849c1fbccd62dd5943fc8b40247245065fd81e170846bc0da8a3fc33e332352ec7c3","ssdeep":"","tlshash":"9e714bb93ec9d6933a2d1c51f968b6d3543d7a0a0664f94728e1f3d11e0330f22dae1a","first_seen":"2023-04-10T20:03:56Z","last_seen":"2026-08-08T13:41:34.309879Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/img/googleplay-button.png","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/img/googleplay-button.png HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/login/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"67bb4b2a-2757\"\r\nexpires: Thu, 07 May 2026 15:08:48 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 94F8:1518:1B9E567:1BE582B:69FCA8A7\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165928.066781,VS0,VE143\r\nvary: Accept-Encoding\r\nx-fastly-request-id: badc1a56ba143358b0b993fdd1b4a7fdfb8fef0f\r\ncontent-length: 10071\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 564 x 168, 8-bit/color RGBA, non-interlaced","md5":"f06b908907d5d4f2aaf733e2bee7ea8e","sha1":"073dcf14c7c312be5daeb4fa2113429e019fdbc7","sha256":"583714033cab0d76045a8d4bbfb2326983f40d5c2cfa239e9527da9617686e6b","sha512":"32cabbc903ec76538c30b4734924267bd1364236629abfb36919cfe4be498360a6c0d3142bbc8593b8418b807336912e612e56e358993ca80e6f93947e9434d3","ssdeep":"192:qg2y7LIhCKi1ihWVEYumqlG+fhNmCdLhpUP4FKxozeMTGiI2TUiut8:qfy4hl67VXqg+fh39WxyeMzTU8","tlshash":"aa22bff21e75c3b4673b077706cb2c885dc771b342812a96e5b897ad596cc6844f2738","first_seen":"2023-04-10T20:03:56Z","last_seen":"2026-08-08T13:41:34.31043Z","times_seen":3150,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"unpkg.com/axios@1.6.7/dist/axios.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /axios@1.6.7/dist/axios.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f8115ba6b1d4c11-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KNWJ6R9X3FJ0YQ7FNBBK1MDT-arn\r\naccess-control-allow-origin: *\r\nage: 1848680\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 07 May 2027 14:58:48 GMT\r\nlast-modified: Fri, 10 Apr 2026 20:44:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:NDS2dZXGgHGCThQtB3zn4QXUCsQLFRZIltEeVAeNAhM=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":40997,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40958)","md5":"a46ffdababfaea9a1d2f8da24fd43086","sha1":"a54d5dade6f704214f6184c815926158c0fc21e0","sha256":"3434b67595c68071824e142d077ce7e105d40ac40b15164896d11e54078d0213","sha512":"3507c1fdb0da07c91a49717c13bec98e11c6e4f33a5d5471bc7ce4662c25ddd7560843c16b6dd3efa32e592c0025d306267990a8cd15798f6416ccecac1105ad","ssdeep":"768:M+/XtcUl+5BCzCk3cuyl+lRCj1Q3w8zdTtWaqlBxHdhJNK/1:ZtPZleRSJzB2qt","tlshash":"2e03d8c9b6d2f06143a771b4806f200bf23aa915b48d8454f225ece67cb950e936bf7d","first_seen":"2024-01-25T21:42:49Z","last_seen":"2026-08-02T08:07:45.627396Z","times_seen":13703,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":9,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/img/insta-fav.ico","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/img/insta-fav.ico HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/login/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/vnd.microsoft.icon\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"67bb4b2a-1536\"\r\nexpires: Thu, 07 May 2026 15:08:48 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 74B0:182DF2:589FC85:5988E96:69FCA8A8\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165929.645127,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c31ee531ef4998977f88c88c093b87b5274aaf4a\r\ncontent-length: 4091\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dfa85bb1fd633c2ab91c0fe07586da95","sha1":"d83abdea02e3dc7f9b84841fec376fa378c0aec8","sha256":"0d3b03b6b3a5d8d93f2e8e420352906459a9df4a19a34accac281e7ef1d07856","sha512":"4904e784ab20b9a14bc4423176df9f7830de254619af574e20151ee9831c1e11e6e5b34a7b816bf75380c4d2d1d3d0330154d13d1745be63edae20048b32758c","ssdeep":"96:HW7QHJt9yT9kf/4ktWb0mWGlBp9bPefQMGDnC7Lm/xq+1De2v:20HY6/490mWGnpdefnGwLmY+pee","tlshash":"c2b12a66a5d02184d8af4875e382556acb23ef37d2165f8748c173f4997a2539038c3b","first_seen":"2023-04-05T15:42:50Z","last_seen":"2026-08-08T13:26:55.835244Z","times_seen":908,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T14:58:47.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/ HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"67bb4b2a-1465\"\r\nexpires: Thu, 07 May 2026 15:08:47 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 5536:15D61F:590199A:59EABCB:69FCA8A7\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165928.750534,VS0,VE136\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7d6b39a284501188ee07086cdf3ddd7e05046884\r\ncontent-length: 1681\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Axios:1.6.7","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":5221,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ea4db62d45fe23f5fbb9679d740063a5","sha1":"8ec68ec3cf811513fc169fecbb0b274021d2f4db","sha256":"cb2230764d8378b5582814894be29816f4605fedef1ce30df2fe8191e91aaf46","sha512":"e30052f938bab7d80eb4720318d4215de6759c1c6c11caac8d33f715523aed2b7d287469a312698f837596b3ddbd6159a7e663479522e102eef93e38f401f0ff","ssdeep":"96:mqlV/CnEeuSTSOlJTYyJjMIZI9nf6AOFrEY7Y3soNX:myVqFeOltFWIZI9nSAOHV2","tlshash":"94b1325620f1086b03a3a5ae7d536a146c928093e71ff94931ac4b9f6fd6f134d832de","first_seen":"2025-11-30T15:54:29.644657Z","last_seen":"2026-05-07T14:59:10.876281Z","times_seen":11,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":78,"dns":16,"connect":26,"send":0,"wait":163,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"hamzachehlaoui.github.io/login/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"hamzachehlaoui.github.io/login/styles.css","fqdn":"hamzachehlaoui.github.io","domain":"hamzachehlaoui.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hamzachehlaoui.github.io/login/","date":"2026-05-07T14:58:48.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /login/styles.css HTTP/1.1\r\nHost: hamzachehlaoui.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hamzachehlaoui.github.io/login/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sun, 23 Feb 2025 16:22:02 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"67bb4b2a-d82\"\r\nexpires: Thu, 07 May 2026 15:08:48 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 74B0:182DF2:589FBB6:5988DC9:69FCA8A7\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Thu, 07 May 2026 14:58:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410032-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778165928.063456,VS0,VE515\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5da37c82717ec0ac085b56c87d837216f3d061a9\r\ncontent-length: 1080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3458,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"79f44a9d0863c69478c0e4071613b454","sha1":"0d6c3b19a40046eb9a62e20e1bde16913c9535a7","sha256":"3384150c010ea0b95845b00f950cd9869be4b7248bcbcbbd4f7d28d6414f3804","sha512":"e5d0923d5af75924f54c3abf828d893061bbfebef75c749bbb1717ca7335a39ea1b428edff4fa1a05fc9c7ced64a3d9371731ef8fdecca5c73be00898ada154e","ssdeep":"","tlshash":"7461466271531505a043ec693feac64122adc123610af9ff3ecd2584df8f79811e2b9d","first_seen":"2023-06-21T20:40:02Z","last_seen":"2026-06-24T01:22:33.143652Z","times_seen":110,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"hamzachehlaoui.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}