{"report_id":"aa445d37-3232-4321-b76d-03f47e08e8ef","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2025-10-17T02:10:18Z","url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"title":"Instagram"},"submit":{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T02:10:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app/","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-cyan-kappa.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-16T07:33:46.077533Z","last_seen":"2025-10-16T07:33:46.077533Z","alert_count":150,"request_count":25,"received_data":608827,"sent_data":12266,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"1000logos.net","ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-09-07","domain_rank":51487,"first_seen":"2017-01-24T12:12:42Z","last_seen":"2025-10-16T07:33:46.527227Z","alert_count":0,"request_count":1,"received_data":39383,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/3627521c-30c38d1296a1ad41.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"026afa934410137e568d275386573fd0","sha1":"7441972dc88867ea2b8164aba594cb251e62b34f","sha256":"5c1638a29192b018a3daa5d49922c077e43b5e3a51182ae3ff53b5174019f1b7","sha512":"fcb7827a8b30e7c9b08bc8a19f3b041df4b9c644337088c0b4632bce92f30157b07dadc1775d51d9b263b6d79f6e37fcdecf885805d8a3533989115efb7ed749","ssdeep":"","tlshash":"f751ff7f9588a1ac6c9d16f858235832634c4aae30c7273adb5eccb0b5635d8d663c4e","size":2454,"data":"","first_seen":"2025-10-16T07:33:50.63606Z","last_seen":"2025-10-17T02:10:22.418398Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-16T19:35:54.895175Z","times_seen":227432,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"de93e04267cfd2bc4d05630daf649633","sha1":"0bf78838dda91e171016dd391c60f8555faf042b","sha256":"e7cc1f486dc2b33a2d1001e64f9ef9d9219a9e84116a043b1ece6500de3efd42","sha512":"f90d63187f8018463b474a735a7da81068afe696110a424a0d7d3993aa16c63fb78b68244a931e83e7dd0d115ac74c15d79b907ff52183b1abf3dc5a8705b2a6","ssdeep":"","tlshash":"36e0cd00f84bede3ec62e00831360e744094a5b885945d94a799c9d344720f80295ede","size":306,"data":"","first_seen":"2025-10-16T07:33:50.664753Z","last_seen":"2025-10-17T02:10:23.460325Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7a4d3df44cf0ea760fb99ca7ee5ae133","sha1":"c241b3d0273d306c1050529723cadd8c8919391a","sha256":"2511879cd6705f48c7a6a3bf10f022c937f03ac708136687357e16c53f614500","sha512":"9dc6142c31d6b26ffa779093570985a803854338dd5d2cc0afbe4d4265d289c09ee8a81b3da4bd0cb9508864af51cbb29916769ef91a93812dd912aa4ef2e093","ssdeep":"","tlshash":"e9b01218c484ac6685328006103905b6814c896d49a445246764ca95832a0e95354ce7","size":95,"data":"","first_seen":"2025-10-16T07:33:50.669506Z","last_seen":"2025-10-17T02:10:23.493954Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"70190ded19858575008f502c9b074e5f","sha1":"8d38674bcdc285b05a52bce045bff3fd77b8d373","sha256":"6f508d9dfac2e8f6d5a7465d8b2eb15afb1c3afcb478d022b86fd565eca42ae5","sha512":"fa3990e18ba607a67061ff2a806975f1abfd62683b8e10e262926c974fa0acbcb15e08c8f1ef640d6f796dc81aac9ce829ab597261ae38805f06534cfa2a2129","ssdeep":"","tlshash":"4bf0c2bf30a0fe535c22ee160a2b5f3345449832e975e821953cbd85079a47183e68b0","size":589,"data":"","first_seen":"2025-10-16T07:33:50.676239Z","last_seen":"2025-10-17T02:10:23.517563Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/app/layout-329f1eb81e916f06.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e24428ea67fc0441c9b64b4f0b2ee10","sha1":"715580b5d45256c2bef863899ccdda3582df5c6b","sha256":"45539132465a5657ec0bb447336998181dd607059df431a3c4fb2c1245f5b0e9","sha512":"e5bfec751e32826d5623d717e1a09660c51387ab4c8674d42e69eaaaceff5e0494618a7732b563283711c4eb95205c72fef81a590858e076bb7d8c3f747541ab","ssdeep":"","tlshash":"f83186987481b5f753f38ce6e52f9885322e0168241e5cb0e2e2d8d40c772ec4173eda","size":1876,"data":"","first_seen":"2025-10-16T07:33:50.59895Z","last_seen":"2025-10-17T02:10:22.545654Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/00cbbcb7-2ec4e1685ef2e1f4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8eeb0c7f8259aebacb2d6bc2939696f0","sha1":"c70082d67d38452080768a79416c83dc1e684586","sha256":"a43de86ab6bea2298dec74497c83daeee10077edc5f21c06b072b5f3e01252f7","sha512":"e37f94e777be54f8cf99ff06b9c3bc762693b9d67e70106787335cf1d03b706705855bbf05bd86c8de65096e79151cae1baf863b3507d6e95612b5352d4e39b3","ssdeep":"","tlshash":"9e117d786f9d76ac7653c468572be017536e91bd74ed80350dae84e4a4a3018c1b3489","size":905,"data":"","first_seen":"2025-10-16T07:33:50.617428Z","last_seen":"2025-10-17T02:10:22.583111Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/webpack-08881a3da8443e65.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f839149027adaea10298f28a1764d621","sha1":"e5671019db5805ed24edb236138181c43aed039c","sha256":"650ad3e472c48ba52962753427b2a2a2dfe1b847df28269a7418632af57cc10c","sha512":"5e7497e0f9a59482d00bb001168de3dbc0cef6cba4216a2fd8250ad5adf1beb682f50162e25ff59b39c66a1e606140055e713821c3a3f58a22289f850c0b07a3","ssdeep":"","tlshash":"b571b7dd72a1f8ba179294a1003fa556f13f28b22c1ed4a0db15d4f5fc759488223fa8","size":3775,"data":"","first_seen":"2025-10-16T07:33:50.585111Z","last_seen":"2025-10-17T02:10:22.759929Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/596-df5363086751fdcd.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b65117c30e09708dc905651b22574f99","sha1":"e2b33a0c83deff688d779dc20124d26e811f2f2b","sha256":"1d293701c6628dfb0dcebc368b83d8a79316dd8c3874aec6c06e6701d1bc503a","sha512":"56e9b8800369062288d4a61650258cf510d7018a5c68904eb04cf06c2e38ecd59c0a4f1ba4c4965fe0aabed07aabb62fc6c3532df21f9272d2a1e3be727471b2","ssdeep":"1536:ESkfE3OS32jjI/lYF3IaLSUSNMKXTqJSB5:PVaGM4TZ5","tlshash":"74a3d7b672d0f8e1079744e6843b000af3751d3e106f7490a3e6ccd9baa15de91a3f6a","size":102017,"data":"","first_seen":"2023-09-17T23:46:25Z","last_seen":"2026-08-07T21:38:31.950083Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f9413b5bef157d09f3e5e6ba1081532","sha1":"51c41c48e61e28d72b397493144571ca67039bcc","sha256":"6848370e29a0b4ee2dff6d6568b295cc9c4c0865c45b13b0050f4fdd5c140a96","sha512":"b659eb9368a85a1a0f8822db916a7d32dbc96a8be5b0f7038be5040956ce6dcbb57e924ba6bff59dfae883b76373d85cf99a9f8600a6b8b25cf4c2daad482ae3","ssdeep":"","tlshash":"97f06d7f34e0fe125c22ee020a2b5f738658e833d935e061d92cad89124a47593eac70","size":577,"data":"","first_seen":"2025-10-16T07:33:50.680533Z","last_seen":"2025-10-17T02:10:23.568504Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/bc9c3264-cfaf148c69cd335e.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a998d88b71248bbde24135d86a48460","sha1":"62339bc96e655e88e46bf486e82aa28097b630d8","sha256":"9c421a404906b264dde56bc1e9d3f0da35fcf9dccf796af5e1e5729e26a5e267","sha512":"11142d6c474d5629d431c6d04af457762f7c85b5cc11e7eeafdcf7a9b370bfffa4d851b7338d82e81075a91b1dec35576b313792860dafe5ecd35f96fcaa1ace","ssdeep":"","tlshash":"ea111e48f7d8f610644804705067f433a6fd36ef308f60980b5684a0d29592dda37c8f","size":1064,"data":"","first_seen":"2025-10-16T07:33:50.613995Z","last_seen":"2025-10-17T02:10:22.892547Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/app/page-aeff157e76f9382d.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac6ffe6f933c452726f5434bfdf5aec0","sha1":"9783fff3fe90255a822367584d4af547b71709f1","sha256":"7dae0089c974b89636a522828203d5a3c5c6a7e2e07defd6b53842dee3b9d326","sha512":"fd7d1ea7a3f4a47003906bbe00006653c3f9f05c15b100f12a4f108a4e835c3c31a211f1e1d9eb3ea04896cd5afc4f4db816087b7a698586adccc5c09d93cbb4","ssdeep":"192:qn1fAI+MmisS0fxv714q64WupfjaYeJjK5ZCncOzxaLecSHp/36:sy/isS0JR4pZupfRBEdcT","tlshash":"7e72a781dba1ebb8f93648cc901f840df61eaf05e7298cb07679d40915da6943b26fcd","size":17178,"data":"","first_seen":"2025-10-16T07:33:50.642803Z","last_seen":"2025-10-17T02:10:23.163375Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/fd9d1056-3c3605bc8d8428a6.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8068870aa9f03e919fc3ea886995aab","sha1":"28690628f7185b74bf532ca6d1573c1af9753e05","sha256":"ecf5645d5ec8f5acdc5c9667b5ec19a789d4faea07ed79f7eeee6bddec25aa8e","sha512":"bb38e007a8969a1125751bafffceb26d28776a3e373d801dae3ec8d732e2e17e6d29971c2cd0d224001e41c71f2b366a9704298a86300c66950a716235801aa9","ssdeep":"1536:p+hezABQ7HVx50ew9hENZnAaqKdtM+frLSrQD4SOlvxIsizWMcnGcI1SMW+q2z66:DzrDVxAKvHqMc1PvxhTGWMWx6","tlshash":"87f3f8e83995f6626ab31277009f1803737c262b280d4d60b211fd9eb5b845ab17bfdd","size":160712,"data":"","first_seen":"2023-09-07T02:44:20Z","last_seen":"2026-08-13T22:39:21.615673Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca48743bf8061f36b9c63e40003ad12c","sha1":"2e38fb7855cb790f76a2808d3bac30f24e00e3d0","sha256":"959761c196961355b3db1e0d4b33006de937f499eaa382dcc444a99a9a5092cd","sha512":"ae9fab2275d03da06bf329f09bac37e79c249fde47d1de6975764ac83dfced3cce379d773dd2217902d186cb8deda90ffd4c51de6f1f4ec40e62fdbf57c43695","ssdeep":"","tlshash":"7df0500974a5ff022c25de0b6a330e32d4409c33d531d529c15cee08234553303ff991","size":551,"data":"","first_seen":"2025-10-16T07:33:50.686719Z","last_seen":"2025-10-17T02:10:23.619901Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b293c1d0f59d152b6041de1aaa2bd2be","sha1":"01fb6a99fe7663ae4c1499511874b0f90ef9d4f6","sha256":"47801384f2965562032a029d7ede4caec8f871557838aad47c9ae2fa8debab39","sha512":"2964c1828bf370ed38c47aee35dcc3c919710455c1a833b820913bdf32075303acce897981630e4220a677d03860d324e8245f1083a058bb625a0b56ac410245","ssdeep":"","tlshash":"8051f93c6009dd4fed997c19027eac3a64cd08ab0be49ebc87d8ce004a420be7792dc0","size":2453,"data":"","first_seen":"2025-10-16T07:33:50.69279Z","last_seen":"2025-10-17T02:10:23.650915Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/9081a741-32f439200c28d850.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"612183187b5f5906d7b544d63ece1418","sha1":"23ed820bae4f44080c8a0e0c7b633b031f90b747","sha256":"8f37af649544fb981ed356a8dc5ec9e00472c1a6f5630a7ae127ae1cf0bca84b","sha512":"0eeb0b0f38a1c49731b3c115fb43b2a92b637fa12d16d6d1384d56222157f8d2f992cb31dd9efc0f5cbad9a264ea6af0cbf3b23161b6cbf4e14d05711a68332f","ssdeep":"","tlshash":"a701158ef0d47a9c5dd907f84467ad356f9f119d14f8c4e88da14490715354c8a52cba","size":695,"data":"","first_seen":"2025-10-16T07:33:50.623896Z","last_seen":"2025-10-17T02:10:22.425987Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/691-0e2c72d7a41e92b4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1794a6e1adf92f54ed00c669dc3c1aa8","sha1":"fab5c0f267e7d1e80b152d2b93317b725f433c22","sha256":"1143b792386d268bd909356414545e5f82730d483e14db721af5fc67619f7676","sha512":"37711192568db242c9305279a6635a648cfde2a7bb314a881b3397270a8b82772f9f3435848ce891e4a3ddf8d7114515ccd19d636de7a4e9c76113a85032973e","ssdeep":"192:KbJt9FWfKRN3t9CwzCAawCoBYi/eFIaCDyDVum710RFVYYPIu4B8uCKr08rH:KbHjWCRPnCh2yDF7GtX4Oq0c","tlshash":"4d52097731d5f8ea13cad0e5943f040df3a22d79a22ab05467e4c8c9e6b055861b2f7a","size":14173,"data":"","first_seen":"2024-07-21T18:29:26Z","last_seen":"2025-10-17T02:10:23.095398Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/main-app-a6fcb8f21de3abc1.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41d208b25747b3d6e024409d6fa48fe4","sha1":"1b5ece2c6ab0ee984a1385664cc7bc351eaeade8","sha256":"f75a545a28209d8680a4c7aee99a6b7e3ee1a0226cd3b09bef9748f9e37a46ad","sha512":"07b445469c320ded542da3649f6e02105e9af9bfe324f527ec85bf530a57aa20f424ea0c55bbf339d254af5f52d8fd77dd9652dcdaa713da1af539cf2252e141","ssdeep":"","tlshash":"f1f082d9274d701f3913ad20fdd76c2e255e816828575c506a05dda12c33668d3e1c6d","size":463,"data":"","first_seen":"2023-09-17T23:46:25Z","last_seen":"2026-08-13T22:39:21.634152Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e5f80d6c61178aa18639ac547bbb14a","sha1":"dfe2c5ea2f2a26208424d81d95899812607ef5cd","sha256":"103382024ebc0f94a626984af63812b984da7f7871d97a316de8de6441874d07","sha512":"ff9b636615ff7c5a4d808f07002367d63e3b5c65311004cb54aa330e2256bb3fa5fabaffb1b127305063d1e608177a5fdc42219f2afefaccf63fbd9b3a0a80c2","ssdeep":"","tlshash":"a4f09ea19c01dd0ecb9a5f24187e1c3d30cdc36607859543e4c4cd1446a3d390ee1e85","size":503,"data":"","first_seen":"2025-10-16T07:33:50.696775Z","last_seen":"2025-10-17T02:10:23.693133Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/98916abf-2d027fe80a75862c.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b51a9d9ba77722b691722814cecd458f","sha1":"420e3639c3ab8b8f9842cca104a6fc530b2294d7","sha256":"81ef3685ef791b1ee857067886ccdca8d21ab4a9a09aa119883ad8e2f9ad3a19","sha512":"16caa716b4f3aa876693283583df2697027f16a87d74377b361d7f3b42fd7fde73dce428bfa8fc0fe408cbb5785d065a685d425315533401c8739380303ddcb1","ssdeep":"","tlshash":"cbe055822095f82c6e5654a485b6445357fc0c6a346a94f83faa14c1a178aac8abbcde","size":434,"data":"","first_seen":"2025-10-16T07:33:50.620704Z","last_seen":"2025-10-17T02:10:22.631418Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/956-3ca471cc5daa9db4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2493256d4fc2163757016ad8c7100202","sha1":"b18acdbae6c5aefa11f91edad7e359089edcb7c9","sha256":"e57e79d5cc7a8c151fecbf671fe7518c02d89dc9d3644f9fa2275c1f4c0fa09d","sha512":"c69bc2e1fc9292d768aad6832adbbfd40677485b35368fa42114664f0fb4aa0dce28f63fbbe59fefb57e076714d60e758f9406b2542b9c081f12d64e7b518832","ssdeep":"","tlshash":"4a616184b546b87c72a348e8913b751bf33e2a2e741e55809aa5c4f0b8794cc5133efe","size":3205,"data":"","first_seen":"2025-10-16T07:33:50.639156Z","last_seen":"2025-10-17T02:10:22.92355Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/3627521c-30c38d1296a1ad41.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/3627521c-30c38d1296a1ad41.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85805\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3627521c-30c38d1296a1ad41.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"026afa934410137e568d275386573fd0\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/3627521c-30c38d1296a1ad41.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4rvlg-1760666996621-6d0386cb794b\r\ncontent-length: 997\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2454), with no line terminators","md5":"026afa934410137e568d275386573fd0","sha1":"7441972dc88867ea2b8164aba594cb251e62b34f","sha256":"5c1638a29192b018a3daa5d49922c077e43b5e3a51182ae3ff53b5174019f1b7","sha512":"fcb7827a8b30e7c9b08bc8a19f3b041df4b9c644337088c0b4632bce92f30157b07dadc1775d51d9b263b6d79f6e37fcdecf885805d8a3533989115efb7ed749","ssdeep":"","tlshash":"f751ff7f9588a1ac6c9d16f858235832634c4aae30c7273adb5eccb0b5635d8d663c4e","first_seen":"2025-10-16T07:33:50.63606Z","last_seen":"2025-10-17T02:10:22.418398Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/9081a741-32f439200c28d850.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/9081a741-32f439200c28d850.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9081a741-32f439200c28d850.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"612183187b5f5906d7b544d63ece1418\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/9081a741-32f439200c28d850.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4rvlg-1760666996626-c87dba015177\r\ncontent-length: 695\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":695,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (695), with no line terminators","md5":"612183187b5f5906d7b544d63ece1418","sha1":"23ed820bae4f44080c8a0e0c7b633b031f90b747","sha256":"8f37af649544fb981ed356a8dc5ec9e00472c1a6f5630a7ae127ae1cf0bca84b","sha512":"0eeb0b0f38a1c49731b3c115fb43b2a92b637fa12d16d6d1384d56222157f8d2f992cb31dd9efc0f5cbad9a264ea6af0cbf3b23161b6cbf4e14d05711a68332f","ssdeep":"","tlshash":"a701158ef0d47a9c5dd907f84467ad356f9f119d14f8c4e88da14490715354c8a52cba","first_seen":"2025-10-16T07:33:50.623896Z","last_seen":"2025-10-17T02:10:22.425987Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/favicon.ico","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241590\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: W/\"48399e9b91c280c9bf161c820cd70726\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996961-7afe4ce25ebf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":73688,"size_decoded":0,"mime_type":"image/x-icon","magic":"Targa image data - Map 32 x 8130 x 1 +1","md5":"48399e9b91c280c9bf161c820cd70726","sha1":"db10eda3d90c6603c3e3fac50127ff83b20f63d2","sha256":"9079f71cd3105d1278c61e312410b01a90b736d99c2c14da60d6d4594c278e97","sha512":"732b12c69a70f5545a4ab8f1ebdb520ef8c83a77c2d54dc4475eec3797c9b10d092e79fff61801a0b85850eaa904f6737ef08fd4c7058e00bcdb6c22b4c1040a","ssdeep":"1536:6OfUleSO/vuM8VDJk60FUlAZfAmpB6f1TrNPCGjFvI/Vz27m8:9SGWM8VD+pfAaBAooYVx8","tlshash":"0a730259684b84f5a7ba022cb6cd35cf7f80d1674f224a1a8ae5481d3774278b8dbf40","first_seen":"2025-10-16T07:33:50.62713Z","last_seen":"2025-10-17T02:10:22.455232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/media/0e4fe491bf84089c-s.p.woff2","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/media/0e4fe491bf84089c-s.p.woff2 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"0e4fe491bf84089c-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"5e22a46c04d947a36ea0cad07afcc9e1\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/0e4fe491bf84089c-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996456-f2a94bb450c8\r\ncontent-length: 11040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11040,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11040, version 1.0","md5":"5e22a46c04d947a36ea0cad07afcc9e1","sha1":"6091d981c2a4ee975c7f6b56186ee698040bb804","sha256":"0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44","sha512":"3e2dcb20c7416160573ea7c7a17bf7250132c5203161b03aeaa3cf065e3ce609da6d1b317d3739aad7fc0c092c44cd0c4ea5657a63bfa530c66f9b0ecb9daf15","ssdeep":"192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt","tlshash":"3b32d0a8682c19fc49357837b8034109dfdfa1c1428c0a5633ebf5f45da3a264e2fe61","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-08-16T18:41:24.017117Z","times_seen":68997,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/image?url=%2Fimages%2Fprofile.jpg\u0026w=64\u0026q=75","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fprofile.jpg\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241592\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"profile.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\nlast-modified: Thu, 02 Oct 2025 17:16:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/profile.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996613-3779598538cb\r\ncontent-length: 1630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x67, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c51a67eb879824602af97218870a227d","sha1":"d35672409cfba9b4de366b17f6312d0c3d8d4544","sha256":"e6e604a87148f11e068008c973d3d00f471bd65030e60d410a4ec75b4d20733e","sha512":"ee44f3690d00dde62333a2b7fe3ab3baaa5c4560c81b024ea4a5a107f7e432e95e3b446487835e94f1654fbed703dbb98c6847f50c41d409307873fd5879c2c7","ssdeep":"","tlshash":"f731c851354356152c2a9ca588cc7f88fb12995098bb66e41d7c94249624a31729a78d","first_seen":"2025-10-16T07:33:50.630505Z","last_seen":"2025-10-17T02:10:22.494287Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/app/layout-329f1eb81e916f06.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-329f1eb81e916f06.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-329f1eb81e916f06.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"8e24428ea67fc0441c9b64b4f0b2ee10\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/layout-329f1eb81e916f06.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hqdvk-1760666996618-6c608db84e02\r\ncontent-length: 1064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1876,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (931)","md5":"8e24428ea67fc0441c9b64b4f0b2ee10","sha1":"715580b5d45256c2bef863899ccdda3582df5c6b","sha256":"45539132465a5657ec0bb447336998181dd607059df431a3c4fb2c1245f5b0e9","sha512":"e5bfec751e32826d5623d717e1a09660c51387ab4c8674d42e69eaaaceff5e0494618a7732b563283711c4eb95205c72fef81a590858e076bb7d8c3f747541ab","ssdeep":"","tlshash":"f83186987481b5f753f38ce6e52f9885322e0168241e5cb0e2e2d8d40c772ec4173eda","first_seen":"2025-10-16T07:33:50.59895Z","last_seen":"2025-10-17T02:10:22.545654Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/00cbbcb7-2ec4e1685ef2e1f4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/00cbbcb7-2ec4e1685ef2e1f4.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"00cbbcb7-2ec4e1685ef2e1f4.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"8eeb0c7f8259aebacb2d6bc2939696f0\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/00cbbcb7-2ec4e1685ef2e1f4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996620-d2e2e8ca60a6\r\ncontent-length: 905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":905,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (905), with no line terminators","md5":"8eeb0c7f8259aebacb2d6bc2939696f0","sha1":"c70082d67d38452080768a79416c83dc1e684586","sha256":"a43de86ab6bea2298dec74497c83daeee10077edc5f21c06b072b5f3e01252f7","sha512":"e37f94e777be54f8cf99ff06b9c3bc762693b9d67e70106787335cf1d03b706705855bbf05bd86c8de65096e79151cae1baf863b3507d6e95612b5352d4e39b3","ssdeep":"","tlshash":"9e117d786f9d76ac7653c468572be017536e91bd74ed80350dae84e4a4a3018c1b3489","first_seen":"2025-10-16T07:33:50.617428Z","last_seen":"2025-10-17T02:10:22.583111Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/98916abf-2d027fe80a75862c.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/98916abf-2d027fe80a75862c.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"98916abf-2d027fe80a75862c.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"b51a9d9ba77722b691722814cecd458f\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/98916abf-2d027fe80a75862c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmqml-1760666996623-41f580131e13\r\ncontent-length: 434\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (434), with no line terminators","md5":"b51a9d9ba77722b691722814cecd458f","sha1":"420e3639c3ab8b8f9842cca104a6fc530b2294d7","sha256":"81ef3685ef791b1ee857067886ccdca8d21ab4a9a09aa119883ad8e2f9ad3a19","sha512":"16caa716b4f3aa876693283583df2697027f16a87d74377b361d7f3b42fd7fde73dce428bfa8fc0fe408cbb5785d065a685d425315533401c8739380303ddcb1","ssdeep":"","tlshash":"cbe055822095f82c6e5654a485b6445357fc0c6a346a94f83faa14c1a178aac8abbcde","first_seen":"2025-10-16T07:33:50.620704Z","last_seen":"2025-10-17T02:10:22.631418Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/media/934c4b7cb736f2a3-s.p.woff2","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/media/934c4b7cb736f2a3-s.p.woff2 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"934c4b7cb736f2a3-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"1f6d3cf6d38f25d83d95f5a800b8cac3\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/934c4b7cb736f2a3-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hqdvk-1760666996457-7ca81d84a39a\r\ncontent-length: 11028\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-08-16T18:41:24.041655Z","times_seen":75702,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/css/3d0e5585b28df4bb.css","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/3d0e5585b28df4bb.css HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3d0e5585b28df4bb.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"3552e2c5fec431b5bd69c4310b725631\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/3d0e5585b28df4bb.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996458-08fca10cb136\r\ncontent-length: 1351\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5087,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5087), with no line terminators","md5":"3552e2c5fec431b5bd69c4310b725631","sha1":"71e98a2fe79f259d292a693bbd4dd9a0bd42d1fc","sha256":"6d86c6db039328842fb13efebd62acd84b6a8db390e8d0d46daf1d54f876a0bf","sha512":"32dcaa78fd1622cd34fe0a69975b9b8a363fba6895763e81873457d40c1e6c84c896e16f67c93a7aca03ef1ea191fe157bb12ca029a93ca86b0acda4efb06a54","ssdeep":"48:sl6lFTDl4lhlMYJVrlp1ejl5cagaqTDaoaoaBYJVraG1ejagcdGq/qAWdA4/0eaX:kJXtJRRWm4/0eUH","tlshash":"3ba1ef20803b98a096f7cd7735ca7b13704d5415e5a00a3afa2e5aad8fe743b13e5f18","first_seen":"2025-10-16T07:33:50.577534Z","last_seen":"2025-10-17T02:10:22.683284Z","times_seen":3,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/webpack-08881a3da8443e65.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-08881a3da8443e65.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-08881a3da8443e65.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"f839149027adaea10298f28a1764d621\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-08881a3da8443e65.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmqml-1760666996460-164a1f4c2baa\r\ncontent-length: 1933\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3775,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3775), with no line terminators","md5":"f839149027adaea10298f28a1764d621","sha1":"e5671019db5805ed24edb236138181c43aed039c","sha256":"650ad3e472c48ba52962753427b2a2a2dfe1b847df28269a7418632af57cc10c","sha512":"5e7497e0f9a59482d00bb001168de3dbc0cef6cba4216a2fd8250ad5adf1beb682f50162e25ff59b39c66a1e606140055e713821c3a3f58a22289f850c0b07a3","ssdeep":"","tlshash":"b571b7dd72a1f8ba179294a1003fa556f13f28b22c1ed4a0db15d4f5fc759488223fa8","first_seen":"2025-10-16T07:33:50.585111Z","last_seen":"2025-10-17T02:10:22.759929Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/fd9d1056-3c3605bc8d8428a6.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-3c3605bc8d8428a6.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-3c3605bc8d8428a6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"a8068870aa9f03e919fc3ea886995aab\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/fd9d1056-3c3605bc8d8428a6.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996461-c53dfd082745\r\ncontent-length: 51701\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":160712,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65200)","md5":"a8068870aa9f03e919fc3ea886995aab","sha1":"28690628f7185b74bf532ca6d1573c1af9753e05","sha256":"ecf5645d5ec8f5acdc5c9667b5ec19a789d4faea07ed79f7eeee6bddec25aa8e","sha512":"bb38e007a8969a1125751bafffceb26d28776a3e373d801dae3ec8d732e2e17e6d29971c2cd0d224001e41c71f2b366a9704298a86300c66950a716235801aa9","ssdeep":"1536:p+hezABQ7HVx50ew9hENZnAaqKdtM+frLSrQD4SOlvxIsizWMcnGcI1SMW+q2z66:DzrDVxAKvHqMc1PvxhTGWMWx6","tlshash":"87f3f8e83995f6626ab31277009f1803737c262b280d4d60b211fd9eb5b845ab17bfdd","first_seen":"2023-09-07T02:44:20Z","last_seen":"2026-08-13T22:39:21.615673Z","times_seen":166,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/image?url=%2Fimages%2Fmarvel.jpg\u0026w=48\u0026q=75","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarvel.jpg\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241592\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"marvel.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\nlast-modified: Thu, 02 Oct 2025 17:16:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/marvel.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996613-bff9a64672c2\r\ncontent-length: 518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 48x48, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a454ce18eb350fe711e3f03e67e01607","sha1":"f9c7dee9a7b6cfe92dbf68df68c64d2a30956314","sha256":"946011ca585ba29236244ddc6560343e0f49e8d67cf1e972209ff5a9dbd51986","sha512":"e5ed93f5694c0f4f287b9e68cedd75cd9e25bbde0ed60faf51ff858ee0680b49472df77af2b9943421eddf455dcb7455c84153c36f0301c224ce450f8a49417d","ssdeep":"","tlshash":"8df00e9806288615782a532037e19f74e72a49ec2e3a650f4f122eda24295b786be6c4","first_seen":"2025-10-16T07:33:50.610469Z","last_seen":"2025-10-17T02:10:22.805072Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/image?url=%2Fimages%2Fmarvel3.avif\u0026w=640\u0026q=75","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarvel3.avif\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241592\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"marvel3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\nlast-modified: Thu, 02 Oct 2025 17:16:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/marvel3.avif\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996615-f1e1eec837de\r\ncontent-length: 26232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":26232,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53fedc649a7fcdf3d984cab7310934d2","sha1":"7110adb13266d31d3f143ff42fdfed93dc847268","sha256":"ca6f633828e7f48fffafe7f0da3b653acb2c91f68d78cc954c5f17ee621bf4a1","sha512":"5dcf7ad85fabc2dc43dad6cdb1b58280a35890ce0e0ae05107444c7dbdc310d2ed3291bcabdc2fa8c589341d05c9548b7026dfef5922319f96a9b3e74d575ddf","ssdeep":"768:oJgvOa9p3Cg/b/5BdeLPUE+zvOwg0DA9o:oOvjfD1SPl+z2FQAK","tlshash":"97c2e0f77984d730ce13be8b43af15d9462f550c45019c17012cb28ba9bea99dac3d5b","first_seen":"2025-10-16T07:33:50.649607Z","last_seen":"2025-10-17T02:10:22.864137Z","times_seen":3,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/bc9c3264-cfaf148c69cd335e.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/bc9c3264-cfaf148c69cd335e.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85805\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"bc9c3264-cfaf148c69cd335e.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"4a998d88b71248bbde24135d86a48460\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/bc9c3264-cfaf148c69cd335e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmqml-1760666996619-6e04390c1749\r\ncontent-length: 476\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1064), with no line terminators","md5":"4a998d88b71248bbde24135d86a48460","sha1":"62339bc96e655e88e46bf486e82aa28097b630d8","sha256":"9c421a404906b264dde56bc1e9d3f0da35fcf9dccf796af5e1e5729e26a5e267","sha512":"11142d6c474d5629d431c6d04af457762f7c85b5cc11e7eeafdcf7a9b370bfffa4d851b7338d82e81075a91b1dec35576b313792860dafe5ecd35f96fcaa1ace","ssdeep":"","tlshash":"ea111e48f7d8f610644804705067f433a6fd36ef308f60980b5684a0d29592dda37c8f","first_seen":"2025-10-16T07:33:50.613995Z","last_seen":"2025-10-17T02:10:22.892547Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/956-3ca471cc5daa9db4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/956-3ca471cc5daa9db4.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85805\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"956-3ca471cc5daa9db4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"2493256d4fc2163757016ad8c7100202\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/956-3ca471cc5daa9db4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996628-c68c29ad286d\r\ncontent-length: 1537\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3205,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2862)","md5":"2493256d4fc2163757016ad8c7100202","sha1":"b18acdbae6c5aefa11f91edad7e359089edcb7c9","sha256":"e57e79d5cc7a8c151fecbf671fe7518c02d89dc9d3644f9fa2275c1f4c0fa09d","sha512":"c69bc2e1fc9292d768aad6832adbbfd40677485b35368fa42114664f0fb4aa0dce28f63fbbe59fefb57e076714d60e758f9406b2542b9c081f12d64e7b518832","ssdeep":"","tlshash":"4a616184b546b87c72a348e8913b751bf33e2a2e741e55809aa5c4f0b8794cc5133efe","first_seen":"2025-10-16T07:33:50.639156Z","last_seen":"2025-10-17T02:10:22.92355Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T02:09:56.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 727284\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: W/\"68aac97ebde87f0276b0f2e73dd88fcb\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996277-3e6341fcd7db\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32322,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32321), with no line terminators","md5":"68aac97ebde87f0276b0f2e73dd88fcb","sha1":"da2171f4d095e0a657f7d68c2e2d143aa6c7b5fb","sha256":"19eacf8a421aa4725ffb2caef2a2722e7a611824a9ee7e9e5e9e760dffd0a95a","sha512":"1bfe311095fff99be6b0b466e164885e84deea826e454da506dd9dcb0e772685a430799edc1a2d56219693cb50742e5ace5d928f4f417f05aec27c7ded60907a","ssdeep":"768:oxR0N13gLhNMM1YYYYYYYYYYYYYZMCoSM4faM8efWIoQQN9koK8yU3C:Z0T1YYYYYYYYYYYYYZzL1yBMtQN9YhkC","tlshash":"d3e29530c2089e2fd427448c3679db6b52cad2a9fa5e4b1873ccca6413d7cb6ed72485","first_seen":"2025-10-16T07:33:50.573515Z","last_seen":"2025-10-17T02:10:22.964774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":78,"dns":57,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app/","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/css/ec937685742183c7.css","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/ec937685742183c7.css HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"ec937685742183c7.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"7f1dfc650ccbe5f454cbc28e6a10c201\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/ec937685742183c7.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996485-bb9f14646956\r\ncontent-length: 2486\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10586,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10586), with no line terminators","md5":"7f1dfc650ccbe5f454cbc28e6a10c201","sha1":"e8f748214c48f5f759740fa87b8e6136208918bf","sha256":"bea1180594e549ec5752eff6ace0e06f6f3b0618340963e90ef17fb3910e5d39","sha512":"05c88bd43834005d488a6a0806a4abfdbb558df4e793123d461bd835cd22afd3b80c33886f5aa70d1b1a7431aa6547c61aab3b6f73f0df9ba5be620e2a63b8e5","ssdeep":"96:ohj3XBVq8jwRVmCVk2iRGY37d9REwyCEj1CE5MO/iOGZ62iqd24CZkWukGuM4L+r:w3X/qBVuvqE62v23ZkWukVMGPU7puw","tlshash":"4c229a771f22293df462c10d77c1d5de2a49c423e727aad1f9929e1ec8cb265093098e","first_seen":"2025-10-16T07:33:50.581151Z","last_seen":"2025-10-17T02:10:23.032635Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/main-app-a6fcb8f21de3abc1.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/main-app-a6fcb8f21de3abc1.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-a6fcb8f21de3abc1.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"41d208b25747b3d6e024409d6fa48fe4\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-a6fcb8f21de3abc1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996463-c56a114518cc\r\ncontent-length: 463\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (463), with no line terminators","md5":"41d208b25747b3d6e024409d6fa48fe4","sha1":"1b5ece2c6ab0ee984a1385664cc7bc351eaeade8","sha256":"f75a545a28209d8680a4c7aee99a6b7e3ee1a0226cd3b09bef9748f9e37a46ad","sha512":"07b445469c320ded542da3649f6e02105e9af9bfe324f527ec85bf530a57aa20f424ea0c55bbf339d254af5f52d8fd77dd9652dcdaa713da1af539cf2252e141","ssdeep":"","tlshash":"f1f082d9274d701f3913ad20fdd76c2e255e816828575c506a05dda12c33668d3e1c6d","first_seen":"2023-09-17T23:46:25Z","last_seen":"2026-08-13T22:39:21.634152Z","times_seen":74,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/691-0e2c72d7a41e92b4.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/691-0e2c72d7a41e92b4.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 102147\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"691-0e2c72d7a41e92b4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"1794a6e1adf92f54ed00c669dc3c1aa8\"\r\nlast-modified: Wed, 15 Oct 2025 21:47:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/691-0e2c72d7a41e92b4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gmqml-1760666996629-ed9beee6f357\r\ncontent-length: 5443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14173,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14173), with no line terminators","md5":"1794a6e1adf92f54ed00c669dc3c1aa8","sha1":"fab5c0f267e7d1e80b152d2b93317b725f433c22","sha256":"1143b792386d268bd909356414545e5f82730d483e14db721af5fc67619f7676","sha512":"37711192568db242c9305279a6635a648cfde2a7bb314a881b3397270a8b82772f9f3435848ce891e4a3ddf8d7114515ccd19d636de7a4e9c76113a85032973e","ssdeep":"192:KbJt9FWfKRN3t9CwzCAawCoBYi/eFIaCDyDVum710RFVYYPIu4B8uCKr08rH:KbHjWCRPnCh2yDF7GtX4Oq0c","tlshash":"4d52097731d5f8ea13cad0e5943f040df3a22d79a22ab05467e4c8c9e6b055861b2f7a","first_seen":"2024-07-21T18:29:26Z","last_seen":"2025-10-17T02:10:23.095398Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/app/page-aeff157e76f9382d.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/app/page-aeff157e76f9382d.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85805\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-aeff157e76f9382d.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"ac6ffe6f933c452726f5434bfdf5aec0\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-aeff157e76f9382d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hqdvk-1760666996629-3fcfcf9b7311\r\ncontent-length: 5077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17178,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17178), with no line terminators","md5":"ac6ffe6f933c452726f5434bfdf5aec0","sha1":"9783fff3fe90255a822367584d4af547b71709f1","sha256":"7dae0089c974b89636a522828203d5a3c5c6a7e2e07defd6b53842dee3b9d326","sha512":"fd7d1ea7a3f4a47003906bbe00006653c3f9f05c15b100f12a4f108a4e835c3c31a211f1e1d9eb3ea04896cd5afc4f4db816087b7a698586adccc5c09d93cbb4","ssdeep":"192:qn1fAI+MmisS0fxv714q64WupfjaYeJjK5ZCncOzxaLecSHp/36:sy/isS0JR4pZupfRBEdcT","tlshash":"7e72a781dba1ebb8f93648cc901f840df61eaf05e7298cb07679d40915da6943b26fcd","first_seen":"2025-10-16T07:33:50.642803Z","last_seen":"2025-10-17T02:10:23.163375Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/api/get_all_users","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /api/get_all_users HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: application/json\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /api/get_all_users\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::r6pqn-1760666996719-24abc183e6e1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6dfdc392be86a13ff53fc0bbaff4e028","sha1":"98780dd3bed67f0302c80b34d51c8a7e7628fa6c","sha256":"4854181899642024b5b08228b151680a60c1cb9be5fb0ae8105fa8900e9279ae","sha512":"b5b00f74537dfb93e054c95cffe04df4bf5b09c9580a9ecbef8be02bd958b20291a28ff33ae234dcfa0fb0842aaf5d09c589469e1807cb14683eaca3d6807179","ssdeep":"","tlshash":"51d0a7576bc39c37835514d35485e00d7ba67861162b545e0d05d17f70b659ee602168","first_seen":"2025-10-16T07:33:50.646163Z","last_seen":"2025-10-17T02:10:23.260965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/favicon.ico","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241590\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: W/\"48399e9b91c280c9bf161c820cd70726\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hqdvk-1760666996962-ef57b5c6981c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73688,"size_decoded":0,"mime_type":"image/x-icon","magic":"Targa image data - Map 32 x 8130 x 1 +1","md5":"48399e9b91c280c9bf161c820cd70726","sha1":"db10eda3d90c6603c3e3fac50127ff83b20f63d2","sha256":"9079f71cd3105d1278c61e312410b01a90b736d99c2c14da60d6d4594c278e97","sha512":"732b12c69a70f5545a4ab8f1ebdb520ef8c83a77c2d54dc4475eec3797c9b10d092e79fff61801a0b85850eaa904f6737ef08fd4c7058e00bcdb6c22b4c1040a","ssdeep":"1536:6OfUleSO/vuM8VDJk60FUlAZfAmpB6f1TrNPCGjFvI/Vz27m8:9SGWM8VD+pfAaBAooYVx8","tlshash":"0a730259684b84f5a7ba022cb6cd35cf7f80d1674f224a1a8ae5481d3774278b8dbf40","first_seen":"2025-10-16T07:33:50.62713Z","last_seen":"2025-10-17T02:10:22.455232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/image?url=%2Fimages%2Fmarvel2.jpeg\u0026w=640\u0026q=75","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/image?url=%2Fimages%2Fmarvel2.jpeg\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1241592\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"marvel2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\nlast-modified: Thu, 02 Oct 2025 17:16:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /images/marvel2.jpeg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r6pqn-1760666996616-54cee002e52c\r\ncontent-length: 38102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":38102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x333, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67efbd499fc842fbad5f09cb457cd922","sha1":"f7dc1f99fccf15c1a01291449ce7eb5d40e23dec","sha256":"9a6d5c6ffd73ee415f609b85c4a27e61fc9391d1dd72d2268e0de4beaa296137","sha512":"4b04589155fd1a045a77440a506c15f121a6c83a329c0c7e9f13f7f932659946b222d9175f2fbc377921c865faaf092abec8a3ee3613bcbfbf86bbe04847ec58","ssdeep":"768:5AxAYOaDgBHt8uP7TsWxMrD3O/025GrY2iBSEVQkbBD97Q:aAYOGQ+sXsM8+aEBSxk1D97Q","tlshash":"9c03f1398a7d64b204a55977385b1989ea1d2cdc020046a37bfcdafc046e77e6cf1ee4","first_seen":"2025-10-16T07:33:50.653023Z","last_seen":"2025-10-17T02:10:23.33932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"1000logos.net/wp-content/uploads/2017/02/Logo-Instagram.png","fqdn":"1000logos.net","domain":"1000logos.net","tld":"net"},"ip":{"addr":"172.67.71.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1000logos.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 04:06:32 GMT","end":"Sun, 04 Jan 2026 05:06:30 GMT"},"fingerprint":{"sha1":"46:D2:17:33:3F:12:A6:63:E2:C0:07:84:EE:0A:1D:71:4E:91:B4:0B","sha256":"83:5E:9E:00:FE:98:56:AF:88:2D:03:8D:90:7F:A2:51:62:65:B7:E9:46:32:8F:42:56:F1:B0:FA:16:03:D6:FA"}}},"request":{"raw":"GET /wp-content/uploads/2017/02/Logo-Instagram.png HTTP/1.1\r\nHost: 1000logos.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 38690\r\nserver: cloudflare\r\nlast-modified: Sun, 20 Feb 2022 10:08:00 GMT\r\netag: \"62121300-9722\"\r\nexpires: Fri, 17 Oct 2025 06:34:02 GMT\r\ncache-control: max-age=172800\r\naccept-ranges: bytes\r\nage: 156954\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5rcbH1pp1TjPq5EjH89Uiod04rPzU1%2BQFNGvvnK8w75GRlFhXrFOrDTFT%2FLb9X9Sw6nomBML1QxszOY%2BRKVo%2BMV77Y%2BWLCDwZqCQw%3D%3D\"}]}\r\ncf-ray: 98fc41b86859a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"d9cd5c9f5733a6c5a745b6e219606938","sha1":"0cd49caf4c8244151ec2745fb587f98b1cb63476","sha256":"d2734b8b073276fe65f811b12ae4ba2b90090d69d1b37f604e066bfb33512f0d","sha512":"8413b21975afc03cf70612abd884256aa0ca6b83ee2e1a321770a44537026c4d8b20b6400e60867534bcea3d38110ff0f35400b3077579d8c4a2509a884f33b4","ssdeep":"768:E7GwpycBGs1i7D7ZLiJiSutwT3fS8ieLBhrpDquDyFRTFt3dAa:E71pawi7/8Xlh0uuRTFQa","tlshash":"5103f16773380e4bf1a9af7950b8536be1e3a0920231f5eacf820256d51ba801b3717d","first_seen":"2023-10-01T03:32:55Z","last_seen":"2026-07-20T04:17:26.62569Z","times_seen":20,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":80,"dns":20,"connect":1,"send":0,"wait":8,"receive":2,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-cyan-kappa.vercel.app/_next/static/chunks/596-df5363086751fdcd.js","fqdn":"instagram-cyan-kappa.vercel.app","domain":"instagram-cyan-kappa.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-cyan-kappa.vercel.app/","date":"2025-10-17T02:09:56.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/596-df5363086751fdcd.js HTTP/1.1\r\nHost: instagram-cyan-kappa.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-cyan-kappa.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 85808\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"596-df5363086751fdcd.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 02:09:56 GMT\r\netag: \"b65117c30e09708dc905651b22574f99\"\r\nlast-modified: Thu, 16 Oct 2025 02:19:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/596-df5363086751fdcd.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kx2nn-1760666996485-7fb01c6d7ec4\r\ncontent-length: 27148\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102017,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b65117c30e09708dc905651b22574f99","sha1":"e2b33a0c83deff688d779dc20124d26e811f2f2b","sha256":"1d293701c6628dfb0dcebc368b83d8a79316dd8c3874aec6c06e6701d1bc503a","sha512":"56e9b8800369062288d4a61650258cf510d7018a5c68904eb04cf06c2e38ecd59c0a4f1ba4c4965fe0aabed07aabb62fc6c3532df21f9272d2a1e3be727471b2","ssdeep":"1536:ESkfE3OS32jjI/lYF3IaLSUSNMKXTqJSB5:PVaGM4TZ5","tlshash":"74a3d7b672d0f8e1079744e6843b000af3751d3e106f7490a3e6ccd9baa15de91a3f6a","first_seen":"2023-09-17T23:46:25Z","last_seen":"2026-08-07T21:38:31.950083Z","times_seen":98,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-17","alert":"Phishing - Instagram","trigger":"instagram-cyan-kappa.vercel.app","verdict":"phishing","severity":"medium","comment":"Instagram","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"instagram-cyan-kappa.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}