{"report_id":"7cc3d57e-8b3e-4583-96f9-3a347e8642ff","version":0,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-09-20T13:00:06Z","url":{"schema":"http","addr":"instagram-visualizza-post.info/","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":0,"asn":41745,"as":"Baykov Ilya Sergeevich","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"instagram-visualizza-post.info/","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"title":"Instagram","dom":{"size":166241,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"ed1bb3316697c3cb859fed59e5f1fa78","sha1":"6fe10a415b0360fae9792b52f89b06e04335ae8b","sha256":"87fb27e422463362161707c7f7cec8cb3eb7849d809449b33c6b1409a0e27c20","sha512":"dbafbf238896d0b45804c70a355b4850e61fc3aec2f5949e49f85d9a7df1965143339ea024bf91f4c1ecf5d5b66f864ea6cddeb558e5322971fefa76e0a7521f","ssdeep":"3072:vz6SMHLiWxLzUgW6SIHLiWxLzUg56SIHLiWxLzUgc8qqTp6SFajivjz3vprGnIWv:OHLiWxLoSHLiWxLoDHLiWxLoh8qqThab","tlshash":"39f30a10e98252397b3f4af7d051a863f3148c46e6210cbef66933f7b58ab948777522","dom_hash":"domhash134378d97356ac739f8ff35711e9f6da","first_seen":"2026-09-20T12:53:45.517848Z","last_seen":"2026-09-20T13:00:08.295168Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagram-visualizza-post.info/","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":0,"asn":41745,"as":"Baykov Ilya Sergeevich","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T13:00:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-visualizza-post.info","ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-20T12:53:40.814154Z","last_seen":"2026-09-20T12:53:40.814154Z","alert_count":32,"request_count":8,"received_data":1271999,"sent_data":4149,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-visualizza-post.info/app.js","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"61df87a2614ef4c0d4fa8b2e9f9fae71","sha1":"eb132dc2c1c95316787f37ec7288d8213d3452c4","sha256":"8113574a7ebf0556cf9d5290b976fc3d17d181ee3c412c9eabece4ce6fc9e152","sha512":"13d0df51c1e33ea47d2c8db5d4084a77ed1b45430b2e96b416e9277255a868cd65db441d40049cbe06f3a207b042a9ca8a4d95d0e08a40ae7ccdb6444db1174e","ssdeep":"","tlshash":"fd5120a65c3b383546b760aa73db74213e2500636081fd62f1ec4e442fcca585ab67fe","size":2989,"data":"","first_seen":"2026-09-20T12:53:45.525559Z","last_seen":"2026-09-20T13:00:08.296069Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-visualizza-post.info/app.js","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.179Z","timestamp":1789909178179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"dljkgrj82do82b1\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 2989\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2989,"size_decoded":3292,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"61df87a2614ef4c0d4fa8b2e9f9fae71","sha1":"eb132dc2c1c95316787f37ec7288d8213d3452c4","sha256":"8113574a7ebf0556cf9d5290b976fc3d17d181ee3c412c9eabece4ce6fc9e152","sha512":"13d0df51c1e33ea47d2c8db5d4084a77ed1b45430b2e96b416e9277255a868cd65db441d40049cbe06f3a207b042a9ca8a4d95d0e08a40ae7ccdb6444db1174e","ssdeep":"","tlshash":"fd5120a65c3b383546b760aa73db74213e2500636081fd62f1ec4e442fcca585ab67fe","first_seen":"2026-09-20T12:53:45.525559Z","last_seen":"2026-09-20T13:00:08.296069Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/qq174U9cRET.webp","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.333Z","timestamp":1789909178333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /qq174U9cRET.webp HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dljkgqkp9hdg4m2\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:10 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 5978\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":5978,"size_decoded":6261,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"153f69a5f1fecefcefa6cf1483f53273","sha1":"f946633bc18565584fe0ccb86fe85e7d43ee6ed0","sha256":"08096c9664f82522f371f2b90fc7a889e13addaaf33f065e0bfda710a78b4bfa","sha512":"4b61f14272b71c1ad10c4749938822a05aa389451409553f02caa6a5a4c2327a83674b5725e005a4c135cbdcc1418a1ccc6e7037ec3e87bc4b10b7c6d03de472","ssdeep":"96:LRblY7cfgofUTKVnQaoGodsuWLEdkR1cnXdozIH/dRlgHBC+gedO4k/v:LRu76MTKVnnkbtCcnmOFR2dbk/v","tlshash":"40c19d99576f34e18cdf5c097ae122348bd84cda1bae0c4a8d71e145a59ecfb21b3187","first_seen":"2026-09-20T12:53:45.526899Z","last_seen":"2026-09-20T13:00:08.296851Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/visit","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.357Z","timestamp":1789909178357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"POST /visit HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://instagram-visualizza-post.info/\r\nContent-Length: 12\r\nOrigin: https://instagram-visualizza-post.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12,"data":"{\"page\":\"/\"}"}},"response":{"raw":"HTTP/2 201 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: https://instagram-visualizza-post.info\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":null,"data":{"size":14,"size_decoded":378,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8f5f9c7e5bf674892783767ddf8a23f1","sha1":"a8debd612b6eb393a46d1e577e0087e0c1601df7","sha256":"82a210beacaa01c555bf2a7ee6f4390ebb4f3879a8e8625b19f954db24d678d6","sha512":"77e39e7801f3d6f3daad7055970c7b234bedfb9993d1640da374cc2b70339a1b1880fb01ace89857db41a7ece424a1c269976382936d2faae69af86d477659af","ssdeep":"","tlshash":"8260003300000c30f0f0300003003f330000303000003000c00c300000f30300003003","first_seen":"2023-05-14T06:03:37Z","last_seen":"2026-09-20T13:00:08.297635Z","times_seen":25,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/rzWiSjZRxk5.webp","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.359Z","timestamp":1789909178359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /rzWiSjZRxk5.webp HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/webp\r\netag: \"dljkgpgacx78p0\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:07 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 900\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":900,"size_decoded":1181,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d1afc48a2d59c0cdfc653a8e8b30a80","sha1":"0154e8b04a95251db40b0d5ab7fb67c84a3b03ab","sha256":"5ea73220ab5bda046e21d3f0cba26eafadeb3cc2bbd07a91978774048c84b6ee","sha512":"e1b101e1682bda8ffab3290dae062e78af338a2c316c20f82d83ccf9e4b8214d571d7a881d3807854d5e48be7932797fac5e69f9fdb374bed6765973aaa26b8c","ssdeep":"","tlshash":"3411b3c045b6bccfd2ba853d595385972697f98c32ad03cb71625ce2e80a0237824853","first_seen":"2026-02-03T23:28:10.11414Z","last_seen":"2026-09-20T14:06:10.150377Z","times_seen":10170,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/QaBlI0OZiks.ico","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.361Z","timestamp":1789909178361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /QaBlI0OZiks.ico HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/x-icon\r\netag: \"dljkgr1vyls41pi\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:11 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 2214\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":2214,"size_decoded":2499,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c3431d927d91a0a9e9a538ce6c98c6b0","sha1":"95e8c80ee4b90b8157b1350248f5e3ea26e9644e","sha256":"d31ce478c9729130303a3537a43906bc8164debf5546f7ad4d1beed9d9b2c630","sha512":"212733ad240fa75c9f743076f0afb0d7bd60782de2ed415d1b736e79a847a1bd740619b31837f9e75bdca73141d1a7a294cd52c2dcaaea6a5875e6a6a5098999","ssdeep":"","tlshash":"c5413bc2e5eb261ae4828fb6be4911826ef2e9cc614d3050b915e331444c74d218b36e","first_seen":"2023-07-20T20:20:50Z","last_seen":"2026-09-20T14:06:10.130569Z","times_seen":27997,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T12:59:37.896Z","timestamp":1789909177896,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\netag: \"dljkgp50fofc3k8c\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:07 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 166188\r\ndate: Sun, 20 Sep 2026 12:59:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":166188,"size_decoded":166488,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"861f13598fedacb727343af769ec027d","sha1":"e20d40af26e3229145af1e520323a6d4d5c7fae8","sha256":"ded05ccbe87797ca0ea96b3f8df78850a523593c12195e7ee43fce3b0fc8fe11","sha512":"5a165b6e5b186bfa9586d3c9c24884de9b46c833c64a4a55ed39cba1c69935ff7eaaa99fc54cb1579a701a94019c1027bccb73b3d6ba8cb92db9099c9e5fe503","ssdeep":"3072:Tz6SMHLiWxLzUgW6SIHLiWxLzUg56SIHLiWxLzUgc8qqTp6SFajivjz3vprGnIWj:KHLiWxLoSHLiWxLoDHLiWxLoh8qqThaP","tlshash":"0df30a10e98252397b3f4af7d051a863f3148c46e6210cbef66933f7b58ab948777522","first_seen":"2026-09-20T12:53:45.520098Z","last_seen":"2026-09-20T13:00:08.299874Z","times_seen":4,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":7,"connect":14,"send":0,"wait":14,"receive":43,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/local-login.css","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.170Z","timestamp":1789909178170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /local-login.css HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css; charset=utf-8\r\netag: \"dljkgrdj8tu0um\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:11 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 1102\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1102,"size_decoded":1397,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (454)","md5":"d6f9916406bc1fb1041511d42da5a4f7","sha1":"c2c9d3304feaca81f7322472e31108cfca91a7d5","sha256":"8f5d6ff8b65c51f14e0d6fc2ecf8973e1ddacbb45aeb1d667d048dcbfe4c509c","sha512":"fd161c499ba62b1982b985dc49b40a4e06de5631628966354e0f89bb0e14da2eecf8ef90600dbb5b432b0d620e6df7f6419f38db8d360700d7e4a25f1a8728d2","ssdeep":"","tlshash":"8511e107274a0500a79a42d4fee36ba99e3c8052414e4cfed0d41a66cbdc3dc42bcb16","first_seen":"2026-09-20T12:53:45.522466Z","last_seen":"2026-09-20T13:00:08.300439Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-visualizza-post.info/3X-iJbMs74zXq3ROleCoYfF8momuZ_hrPfgQe914iiBfONMKn3YhINqU49pVNahkCkGzNiZ9AWV5Gs97xFZK--hB.css","fqdn":"instagram-visualizza-post.info","domain":"instagram-visualizza-post.info","tld":"info"},"ip":{"addr":"46.20.106.66","port":443,"asn":42689,"as":"Glide Student \u0026 Residential Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-visualizza-post.info/","date":"2026-09-20T12:59:38.173Z","timestamp":1789909178173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"instagram-visualizza-post.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 19 Sep 2026 19:19:40 GMT","end":"Fri, 18 Dec 2026 19:19:39 GMT"},"fingerprint":{"sha1":"1B:3A:E4:3A:9F:6B:CB:EB:07:7A:AE:7C:64:0C:34:C4:F9:E5:D1:8E","sha256":"99:FD:27:45:E6:CD:B1:26:92:22:18:AD:D5:46:86:92:80:07:64:05:29:50:37:11:CD:EE:6D:8A:4F:AE:B8:12"}}},"request":{"raw":"GET /3X-iJbMs74zXq3ROleCoYfF8momuZ_hrPfgQe914iiBfONMKn3YhINqU49pVNahkCkGzNiZ9AWV5Gs97xFZK--hB.css HTTP/1.1\r\nHost: instagram-visualizza-post.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-visualizza-post.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/css; charset=utf-8\r\netag: \"dljkgqf9d0y4nd7f\"\r\nlast-modified: Sat, 19 Sep 2026 20:14:09 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\ncontent-length: 1090203\r\ndate: Sun, 20 Sep 2026 12:59:38 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":1090203,"size_decoded":1090503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ac994b69d414026cd969955106b3a9e2","sha1":"0ebd1e5ea7778de90121bf5008e54bb942528238","sha256":"582e75548c34b37495c087b4dbf912e8ccb801f2b7a81d203e8047b04d63edd9","sha512":"8cb345c3d3c334fed12c45c5e7aa41a2f4f722df2592d6d6e18cb49b4f183ead4c3c24b212ea0009bf3b818a3dd2481c85e2adfe8f446aa0dac883e54e953522","ssdeep":"6144:jRbwp2CiRl5ZPIX+NtcRqqeLOAvwy2G3t0FkHhqJDrelqaCC:jRbLlP5RISAX+wy221g2","tlshash":"f825d795db82433cba1b846b52a9fd3e731abd039a0d07f5e68271707aca7ec5533508","first_seen":"2026-09-20T12:53:45.524067Z","last_seen":"2026-09-20T13:00:08.300928Z","times_seen":4,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"instagram-visualizza-post.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}