{"report_id":"852c480c-6b85-44a5-a402-f6cbfc29f4b7","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-06-06T23:44:51Z","url":{"schema":"http","addr":"meta-meta.xyz","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"meta-meta.xyz/","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"title":"Instagram","dom":{"size":8133,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"709702c1e4aaf63e1406ccd15bdfd751","sha1":"73c5001eec4d6eabf7302d2f1f2389299413c1ee","sha256":"6aed7e9209b741d25f612a5e5849f6596173f024076adb51074ff47478674243","sha512":"8ea6d6b33c45d19bd61e74f164618bebebd32efa6de6eba1526d08b3508c3d581fb1c1b853a38ce000035d00ccb26e08a0d6dfa2bdf38bb015f529ecc832150d","ssdeep":"96:lqR8YDIb0N/TJzSZSToASZSZST1STfUjXWzZUPblY8RP6eAZcAAePJ:lqa2MIIII4QkOGC2Am","tlshash":"0af121b103f4443f4607c2d8b32562ededd69147fd4a5110b2aeabca4fa6dc2bd1304a","dom_hash":"domhash3df1df8726197dfa204af395b9f8529a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meta-meta.xyz","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"ip":{"addr":"178.16.54.253","port":0,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T23:44:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"meta-meta.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"meta-meta.xyz","ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-06-04","domain_rank":0,"first_seen":"2026-06-06T02:14:21.062641Z","last_seen":"2026-06-06T02:14:21.062641Z","alert_count":18,"request_count":3,"received_data":260447,"sent_data":1346,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-06-03T16:00:59.358639Z","alert_count":0,"request_count":1,"received_data":21366,"sent_data":437,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"meta-meta.xyz/","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T23:44:30.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta-meta.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 17:53:28 GMT","end":"Wed, 02 Sep 2026 17:53:27 GMT"},"fingerprint":{"sha1":"45:A6:BF:40:88:43:07:0E:A9:EA:8A:D2:75:AC:AF:08:67:E0:AD:07","sha256":"8A:CC:9C:BF:B5:A8:94:CA:EA:DE:24:B0:0D:E8:22:8F:DF:FB:F4:AC:A4:5D:DF:E6:54:B6:66:12:3E:66:37:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meta-meta.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 03 Jun 2026 06:48:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1703\r\ndate: Sun, 07 Jun 2026 07:21:00 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8190,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"f00d27b76f722007b76f1f8971907118","sha1":"4ae4b9dea55f24d6a068161901eb3233a1dedc79","sha256":"4259950dd67920e932cb7638aea42fa591b16ce5093096f762a9b43a39f8d21a","sha512":"1bb39f246c93a6802f72b3bd746a65b6badd0bdf7480718eb1b6b0f92708e9bc9852f4e07ff52ae12e27e22a6faa83fe1e8e2e999a98fc2be7642bc10a7ea960","ssdeep":"96:VRX+EjbrrnLJI0SZSTWPSZSZSTRSTaUEQWzecUtmaNR6uEe1rW+eI:V9LGNIrII0TkW/O+J","tlshash":"45f10e7112c1943f4737c2d8a724a2edfed69183fa8a5110b1aeb7cb5fb6c81ad13049","first_seen":"2026-06-06T02:14:24.022069Z","last_seen":"2026-06-06T23:53:28.170715Z","times_seen":3,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":294,"dns":163,"connect":61,"send":0,"wait":62,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"meta-meta.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"meta-meta.xyz/style.css","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meta-meta.xyz/","date":"2026-06-06T23:44:31.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta-meta.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 17:53:28 GMT","end":"Wed, 02 Sep 2026 17:53:27 GMT"},"fingerprint":{"sha1":"45:A6:BF:40:88:43:07:0E:A9:EA:8A:D2:75:AC:AF:08:67:E0:AD:07","sha256":"8A:CC:9C:BF:B5:A8:94:CA:EA:DE:24:B0:0D:E8:22:8F:DF:FB:F4:AC:A4:5D:DF:E6:54:B6:66:12:3E:66:37:E2"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: meta-meta.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meta-meta.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 07:21:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 06:48:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2408\r\ndate: Sun, 07 Jun 2026 07:21:00 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10836,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (671), with CRLF line terminators","md5":"3dd9fb9377bad5b5c0fc7864c25a38e6","sha1":"0366f35be68c06306e234594c35c07b2c6754df4","sha256":"3c51e7e38d495aa2942af94c7e5fb6c96c7b307d8cacf79f647bad1680cef11b","sha512":"8e2899f84cfe71a151ef4784297ed8d55a11aea61727a932dcc2c7891b635dbd7ac635ef6293579b2ea728aa1ce8bfba379426c2ce97846d97d3bed1f5cc4c79","ssdeep":"192:zoUGqu8s8isMauwAtiSO8XNaTjWPhz5m2NRER5FRZHxv65:0Ilhji5","tlshash":"ad22436c96031086b337cabcafb14649e79550179b4352bc7edcb2458ffa12892a1fdc","first_seen":"2026-06-06T02:14:24.023257Z","last_seen":"2026-06-06T23:53:28.171442Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"meta-meta.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1529156069898-49953e39b3ac?w=400\u0026q=80","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.194.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meta-meta.xyz/","date":"2026-06-06T23:44:31.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1529156069898-49953e39b3ac?w=400\u0026q=80 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: cbf3ae75743553507a3eb899b56d680551a7b8b0\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 02 Jun 2026 11:20:29 GMT\r\nserver: imgix\r\ndate: Sat, 06 Jun 2026 23:44:31 GMT\r\nage: 390241\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230161-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 20765\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 400x225, components 3","md5":"e09d54f7099dd6becbc80f83c60000d9","sha1":"85360730042eae14a0d8fae6bc381f5648c85255","sha256":"bb0aa302e1525c5164dd335df00dcc504289d00722ed6b60f147449f9ed998e7","sha512":"9c852f40ae45a5ffad12c21d4d9459ee36416d99626ab7580dc8e143b8eaf47eb60ea31dd85bcb5e5cbe052f597aec66e5ef204c36c54436a7a4599c9a05d7a3","ssdeep":"384:3vAMI+q2lbNojIDVLQQmV1yn/kadvGKTOX/dR5T6L164k7aNXrfPrWK7:3UwocZQEn/lduKS/djT61k7ibX3","tlshash":"b292c02687365112fb2756f22020d711e396605033caa28f790dada4f73fde23a756d9","first_seen":"2026-04-18T22:22:45.468521Z","last_seen":"2026-06-06T23:53:28.16987Z","times_seen":4,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":72,"dns":10,"connect":26,"send":0,"wait":27,"receive":7,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meta-meta.xyz/images/favicon.png","fqdn":"meta-meta.xyz","domain":"meta-meta.xyz","tld":"xyz"},"ip":{"addr":"178.16.54.253","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://meta-meta.xyz/","date":"2026-06-06T23:44:31.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meta-meta.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 17:53:28 GMT","end":"Wed, 02 Sep 2026 17:53:27 GMT"},"fingerprint":{"sha1":"45:A6:BF:40:88:43:07:0E:A9:EA:8A:D2:75:AC:AF:08:67:E0:AD:07","sha256":"8A:CC:9C:BF:B5:A8:94:CA:EA:DE:24:B0:0D:E8:22:8F:DF:FB:F4:AC:A4:5D:DF:E6:54:B6:66:12:3E:66:37:E2"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: meta-meta.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://meta-meta.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 14 Jun 2026 07:21:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 30 May 2026 00:01:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 240052\r\ndate: Sun, 07 Jun 2026 07:21:00 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":240052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 799, 8-bit/color RGBA, non-interlaced","md5":"8c955460d30774293a39ba49f551e6db","sha1":"05263bfe22470fbcc8f475e752fe8ed9b6f38893","sha256":"6df6ca1f4473278c25691f352d1edb82d6c78b06d79ee123d25320126ba18434","sha512":"8d02b32a15400ccb86eda19329f673c742ea5524a6d041977a963213bba107513ef0c25ef17bdfbd3815480126c0ef08fc144963e40aa6847991b8c799334657","ssdeep":"6144:Y+7kzCYgT9s0dM00UJjdUTdugucXcuWXyIwLl3UY2m2F2s:tB5TO0D6ugu3tXyIwR3UBN","tlshash":"bb3412509679e06d0ea0aebbbe4011f8d9bbd0c382b6815de9ccf34558958375f288df","first_seen":"2023-07-17T06:43:47Z","last_seen":"2026-06-06T23:53:28.172192Z","times_seen":29,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"meta-meta.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"meta-meta.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}
