urlquery.net
Investigate/Report/7ed0e8ea-1bfa-45d9-8595-afaf32fdf103
WEBSITE ANALYSIS REPORT

http://instagram-version.vercel.app/

public
Report tags
instagram meta social phishing
Submit tags
openphish
Request review
Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document511 B212 ms6 alerts
GET200script1.02 MB54 ms6 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://instagram-version.vercel.app/assets/index-BLQjm_A5.js

IP / ASN

United States 216.198.79.3

AS16509 · AMAZON-02

Requested by
https://instagram-version.vercel.app/

Resource information

File type
JavaScript source, ASCII text, with very long lines (37534)
MIME type
application/javascript; charset=utf-8
First seen (UTC)
19 Oct 2026 · 01:15:50.323 UTC
Last seen (UTC)
20 Oct 2026 · 12:45:14.723 UTC
Times seen
6
Size
1.02 MB (1072354 bytes)
MD5
e7dba20ec69682a594a2bc5093e3cf50
SHA1
7c6689556ceb4e8a65b6dc73e8dbf052d5ac43ae
SHA256
ef546841eddfe2309c2aede6738b621f1a281073c026f54123d47adeca149271

Certificate information

Issuer
Google Trust Services · WR1
Subject
*.vercel.app
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC
Valid from
Sat, 29 Aug 2026 19:48:09 GMT
Valid until
Fri, 27 Nov 2026 19:48:08 GMT

Technology fingerprints

  • HSTS (Security)
  • Vercel (PaaS)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
urlquery Phishing - InstagrammediumPhishing
Quad9 DNS SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
CIRA Canadian Shield DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /assets/index-BLQjm_A5.js HTTP/1.1
Host: instagram-version.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://instagram-version.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
age: 90640
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="index-BLQjm_A5.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Mon, 19 Oct 2026 09:11:11 GMT
etag: W/"dd3f72c98b5402910eb322f787f9ec67"
last-modified: Sun, 18 Oct 2026 08:00:31 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::f7stz-1792401071472-3f1ad831fa14
X-Firefox-Spdy: h2
GET200stylesheet170 B51 ms6 alerts
GET200img13.2 KB46 ms6 alerts
GET200img1.09 MB4522 ms6 alerts
GET200img15.5 KB2407 ms6 alerts
GET200img4.8 KB4515 ms6 alerts
GET200img4.8 KB4421 ms6 alerts
8 visible / 8 matching / 8 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot