{"report_id":"8eee7da5-a017-4902-bc37-3271d52227eb","version":0,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-06-08T02:17:09Z","url":{"schema":"http","addr":"instagram-clone-eta.vercel.app/","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/login","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"title":"Login - Instagram","dom":{"size":4306,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4306), with no line terminators","md5":"cbd3bb39b3c2bf604d6d000373e4f377","sha1":"18d082b71e2f57dfac859c1658fadac85053cfbe","sha256":"af6a4a76b265998742a70651bf5c2a05c2f0b2c1e4e5151568648079718950ff","sha512":"a745a488c33a80c31181e3ee2498a59f92e6b6375526903c68ec56056fd82165784fcd1aefc033e07e1165bd5a27f94fdd42e9a5505f7221aead558ed0639101","ssdeep":"96:nOHR7RKqcjUdTyZK9OZwYiWv7HTVt2DinxVmX6Mk:OHdRK7UdB9yFHV663","tlshash":"be91b7f83a40f9ff12435cb431376828b09c8a1bcd77d894e39d80eaaab5d455913ab5","dom_hash":"domhashd2afe916241abde7e80a205bf7b908d0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagram-clone-eta.vercel.app/","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T02:17:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-clone-eta.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-24T18:18:46.906053Z","last_seen":"2026-05-24T18:18:46.906053Z","alert_count":40,"request_count":8,"received_data":859704,"sent_data":4084,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/main.de3c3ffe.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"002ef67a6a799966d33100140c21830e","sha1":"8b3addc7fe66b4286ca6aa4c715ad490fc2f48a2","sha256":"8976fa490d8a3cbb73ad827bfb739168642530abbc6c6039dd1f9b885eed599b","sha512":"4a0392951e5df2c72789bd4378001a2887423750651cd0b44d35fb9b7effebea3773dd4dbf123a892bd51cabce56eebd7fe45767b0b16409c5e299f72a519047","ssdeep":"","tlshash":"3f61245d7486f9cd5b9a1fe5862b003de23ba89b380de4618652c8c1a46d41d2133f8f","size":3243,"data":"","first_seen":"2026-05-24T18:18:51.481428Z","last_seen":"2026-06-08T02:17:11.648267Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/5.5f722933.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cbbec8043178937be7e4ae74ff098d1","sha1":"ab142b091a2c66f9036fdfae222f60bea9119415","sha256":"21051f46551169a544ee379fa025080c3c38ae699a96b14dc426ac2989d79c06","sha512":"670826b23f35eb955a11f1d8fcb94b2e38bd79697a7d0821d0af8a64fba9954c444157c05329bc87980d04ecd4a5d447c6a1368daac88a275e8464a7e499c5da","ssdeep":"192:BWWUNELzsaVkoSpBiKnnOqyFqEO1tqL445fkAIdj5uT:gizsaui/4XT8x5fbsVuT","tlshash":"7722a79c71d6f49d43936770901f100ae22e5949f90e9859e628e8e3b8b480df637fbd","size":10219,"data":"","first_seen":"2026-05-24T18:18:51.492847Z","last_seen":"2026-06-08T02:17:11.648976Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8b32995d223e17eb0376065b5071aa8","sha1":"51e5eb95e530b0aff72989f2efc692c394093c14","sha256":"42a58c596689970780bf16001bd3cb402b352b94dcd45b9020b43a8c2f835547","sha512":"99889afecfcfef906cda004089416d977561864119bddc1af5cba14ab1c5647d6d39af501b08ef584cf41f18cce622c7d56f5b6bf4c85bf284271e4869d47bfc","ssdeep":"","tlshash":"2f4183d837a4f9b9524218a8003f6425f13c2976097ee4d1d34ad8f9bc3ac4d812bfb9","size":2403,"data":"","first_seen":"2026-05-24T18:18:51.499353Z","last_seen":"2026-06-08T02:17:11.650154Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/3.20820c2e.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cc818aa27fe016da78b5b726349a979","sha1":"5dc8e9e94a1cf042a3b72d44891a744b15cce35a","sha256":"93c3f4f6712584c7bb972dcb06d82bf2e32ce898085d7e784e7731f9714f8ce8","sha512":"b7bee33d1ee5a7bfea686c4490a3a7b28fd18560c03f28733aebf54801c7b7e9036c2645a68abd2f1e96b8928f4e9968098069a45e8fe1fe5aa0b914524fc1cd","ssdeep":"6144:9+1Bs28P04DJF3cPNsT7QK2SxC+5QPfO8cLH92+sPGi/ovoJf:9U4/qNw7Q3SNQDPj/jf","tlshash":"7ce4c6ccf692f47143a360b6517f000bf33a6959a44e4068f664e9d67cb844ea23bf79","size":701113,"data":"","first_seen":"2026-05-24T18:18:51.490221Z","last_seen":"2026-06-08T02:17:11.647067Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/favicon.ico","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.589Z","timestamp":1780884959589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 850821\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"0d3b03b6b3a5d8d93f2e8e420352906459a9df4a19a34accac281e7ef1d07856\"\r\nlast-modified: Fri, 29 May 2026 05:55:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::frxvx-1780884959594-4085f3d7fd2b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5430,"size_decoded":4719,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dfa85bb1fd633c2ab91c0fe07586da95","sha1":"d83abdea02e3dc7f9b84841fec376fa378c0aec8","sha256":"0d3b03b6b3a5d8d93f2e8e420352906459a9df4a19a34accac281e7ef1d07856","sha512":"4904e784ab20b9a14bc4423176df9f7830de254619af574e20151ee9831c1e11e6e5b34a7b816bf75380c4d2d1d3d0330154d13d1745be63edae20048b32758c","ssdeep":"96:HW7QHJt9yT9kf/4ktWb0mWGlBp9bPefQMGDnC7Lm/xq+1De2v:20HY6/490mWGnpdefnGwLmY+pee","tlshash":"c2b12a66a5d02184d8af4875e382556acb23ef37d2165f8748c173f4997a2539038c3b","first_seen":"2023-04-05T15:42:50Z","last_seen":"2026-07-24T06:16:49.535035Z","times_seen":904,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/images/iphone-with-profile.jpg","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.595Z","timestamp":1780884959595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/iphone-with-profile.jpg HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 853426\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"iphone-with-profile.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"9076047e19eab6ac6008eb8bf4d4a566825354f57b9e50ad99fe84bec8e2ad69\"\r\nlast-modified: Fri, 29 May 2026 05:12:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::frxvx-1780884959601-0a803c7b8e7f\r\ncontent-length: 120857\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120857,"size_decoded":121447,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 908x1236, components 3","md5":"065afb49bc5d403aacaf846301f96faf","sha1":"131a3463481d0fd829b196100e96a70808cce967","sha256":"9076047e19eab6ac6008eb8bf4d4a566825354f57b9e50ad99fe84bec8e2ad69","sha512":"7dc982a4930877d9303e1d45243e84cc98dfb74719614dc204049d750b21ca3d632d403e5d48eaad899c7bd8c88ccffafa3e6e02b10e03beb7f9dba5d2e1bce4","ssdeep":"3072:dJ7MJR5blUEo0bQQB1Ly3c6STCI3sl1PY:d1cRHUEz9/ypSmI3sl1Y","tlshash":"f6c302bb6dcb1cc0e318b5b6e3a4946647a33fa3d74411fd12da9744fc93aa38293548","first_seen":"2023-06-04T01:18:09Z","last_seen":"2026-07-24T06:16:49.519482Z","times_seen":167,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/images/logo.png","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.597Z","timestamp":1780884959597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 854248\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"b9c604018a550b63d359608469904de09b8efc5f38395cca106faa49262dfde0\"\r\nlast-modified: Fri, 29 May 2026 04:58:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dmsfj-1780884959602-b58d7bf310e2\r\ncontent-length: 3841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3841,"size_decoded":4413,"mime_type":"image/png","magic":"PNG image data, 206 x 58, 8-bit colormap, non-interlaced","md5":"c46f54e523f2656d2f518d51623448a0","sha1":"d8f8311ae18fcd2b0d9bea85eb29a20e209518f8","sha256":"b9c604018a550b63d359608469904de09b8efc5f38395cca106faa49262dfde0","sha512":"9eb3830d8647d31cfbb5587c5fe0c06066e95bbeb23c3c65076eeb6448ec6d42c615fc42eba446af054866e15fefc7c9d205df4846d886b0242b76fba7e5602a","ssdeep":"","tlshash":"be810bd2b4a76ae747b49f5113467c77c43863c7454a915a682fa04f67387d20185790","first_seen":"2023-05-10T00:48:35Z","last_seen":"2026-07-24T06:16:49.521975Z","times_seen":683,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T02:15:58.749Z","timestamp":1780884958749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 843480\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 08 Jun 2026 02:15:58 GMT\r\netag: W/\"cc13ccc8d730571c4be880404997a42901a250f6055e8250f4f6132bbe11d780\"\r\nlast-modified: Fri, 29 May 2026 07:57:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ls6dm-1780884958797-3f6b8b91b377\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2947,"size_decoded":2162,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2947), with no line terminators","md5":"d12ed970f7665b28fb7314faa0d76cd6","sha1":"d571bfbd62028f39e239b293e2d8c81e9d339629","sha256":"cc13ccc8d730571c4be880404997a42901a250f6055e8250f4f6132bbe11d780","sha512":"e3fab35829716a42f482025e910be4911ee276ec462043b771250b94448538d2f390179fe9c9fa4099562831e87a03cf65f2b94c9642db6e5d9b3fc814562f24","ssdeep":"","tlshash":"2351d8d83e90f9bd531118a8143f7039e06c5966093af8e0d38ad8f9ad39d4d8527fb4","first_seen":"2026-05-24T18:18:51.484988Z","last_seen":"2026-06-08T02:17:11.640761Z","times_seen":4,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/css/main.c3b26419.chunk.css","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.031Z","timestamp":1780884959031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/css/main.c3b26419.chunk.css HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 843480\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.c3b26419.chunk.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"c024d790a46aed2fcc428ab49b8922902579481d62fc355dc54d9cd86cf1cee1\"\r\nlast-modified: Fri, 29 May 2026 07:57:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ls6dm-1780884959037-289fb011a24e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7432,"size_decoded":3160,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7313)","md5":"8f7245b5237a55cd029e352f09b52f3b","sha1":"1491f41c1a7460c41d91bcdfd299dba667bc94e3","sha256":"c024d790a46aed2fcc428ab49b8922902579481d62fc355dc54d9cd86cf1cee1","sha512":"04ccd0cd655f80cd9b81ff4b6035ed8bfa93a8dc6c5a5bc0c3418b75acfcf9dc941a181d7957314540e24903dbef4d9b93c4bda4af24d52961f8c52fc92d76a6","ssdeep":"96:4vymVz10TSv0S0kTf6pR52mDNDtsiAViiygL+vFNAfyLs5QVpEExGpsm2eLLaS8b:45v0RFKyu+nY28pBG7W8/4c","tlshash":"41e1935f9f14253abc7744f6a2d4ea9cb115b5c1ce2792e6f843a900cec17eb2e71908","first_seen":"2026-05-24T18:18:51.487637Z","last_seen":"2026-06-08T02:17:11.641474Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/3.20820c2e.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.033Z","timestamp":1780884959033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/3.20820c2e.chunk.js HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 843480\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"3.20820c2e.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"93c3f4f6712584c7bb972dcb06d82bf2e32ce898085d7e784e7731f9714f8ce8\"\r\nlast-modified: Fri, 29 May 2026 07:57:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::frxvx-1780884959038-2da2d0edfec7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":701113,"size_decoded":206588,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65462)","md5":"9cc818aa27fe016da78b5b726349a979","sha1":"5dc8e9e94a1cf042a3b72d44891a744b15cce35a","sha256":"93c3f4f6712584c7bb972dcb06d82bf2e32ce898085d7e784e7731f9714f8ce8","sha512":"b7bee33d1ee5a7bfea686c4490a3a7b28fd18560c03f28733aebf54801c7b7e9036c2645a68abd2f1e96b8928f4e9968098069a45e8fe1fe5aa0b914524fc1cd","ssdeep":"6144:9+1Bs28P04DJF3cPNsT7QK2SxC+5QPfO8cLH92+sPGi/ovoJf:9U4/qNw7Q3SNQDPj/jf","tlshash":"7ce4c6ccf692f47143a360b6517f000bf33a6959a44e4068f664e9d67cb844ea23bf79","first_seen":"2026-05-24T18:18:51.490221Z","last_seen":"2026-06-08T02:17:11.647067Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/main.de3c3ffe.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.034Z","timestamp":1780884959034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/main.de3c3ffe.chunk.js HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 843480\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.de3c3ffe.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"8976fa490d8a3cbb73ad827bfb739168642530abbc6c6039dd1f9b885eed599b\"\r\nlast-modified: Fri, 29 May 2026 07:57:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ls6dm-1780884959039-b7884e9825fb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3243,"size_decoded":1857,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3195)","md5":"002ef67a6a799966d33100140c21830e","sha1":"8b3addc7fe66b4286ca6aa4c715ad490fc2f48a2","sha256":"8976fa490d8a3cbb73ad827bfb739168642530abbc6c6039dd1f9b885eed599b","sha512":"4a0392951e5df2c72789bd4378001a2887423750651cd0b44d35fb9b7effebea3773dd4dbf123a892bd51cabce56eebd7fe45767b0b16409c5e299f72a519047","ssdeep":"","tlshash":"3f61245d7486f9cd5b9a1fe5862b003de23ba89b380de4618652c8c1a46d41d2133f8f","first_seen":"2026-05-24T18:18:51.481428Z","last_seen":"2026-06-08T02:17:11.648267Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-clone-eta.vercel.app/static/js/5.5f722933.chunk.js","fqdn":"instagram-clone-eta.vercel.app","domain":"instagram-clone-eta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-clone-eta.vercel.app/","date":"2026-06-08T02:15:59.568Z","timestamp":1780884959568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/5.5f722933.chunk.js HTTP/1.1\r\nHost: instagram-clone-eta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-clone-eta.vercel.app/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 843480\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"5.5f722933.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 08 Jun 2026 02:15:59 GMT\r\netag: W/\"21051f46551169a544ee379fa025080c3c38ae699a96b14dc426ac2989d79c06\"\r\nlast-modified: Fri, 29 May 2026 07:57:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dmsfj-1780884959574-46ea1b683238\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10219,"size_decoded":4390,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10174)","md5":"3cbbec8043178937be7e4ae74ff098d1","sha1":"ab142b091a2c66f9036fdfae222f60bea9119415","sha256":"21051f46551169a544ee379fa025080c3c38ae699a96b14dc426ac2989d79c06","sha512":"670826b23f35eb955a11f1d8fcb94b2e38bd79697a7d0821d0af8a64fba9954c444157c05329bc87980d04ecd4a5d447c6a1368daac88a275e8464a7e499c5da","ssdeep":"192:BWWUNELzsaVkoSpBiKnnOqyFqEO1tqL445fkAIdj5uT:gizsaui/4XT8x5fbsVuT","tlshash":"7722a79c71d6f49d43936770901f100ae22e5949f90e9859e628e8e3b8b480df637fbd","first_seen":"2026-05-24T18:18:51.492847Z","last_seen":"2026-06-08T02:17:11.648976Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"instagram-clone-eta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"instagram-clone-eta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}