{"report_id":"bca40c1b-491a-44c8-85f7-7b7ee5fac0cf","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-05-18T21:39:51Z","url":{"schema":"http","addr":"instagram-react-blue.vercel.app/","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/login","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"title":"Login - Instagram","dom":{"size":4287,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2823)","md5":"bd7f6699baf4b288a80ed8b8149df7a4","sha1":"63c777b07f28899e328fa26e72f86eaca379f1c0","sha256":"b9b2ffbcc44457f156a7496a9ae4ed8f925105f49da8c789725d72212fde6bc8","sha512":"629f8a2bfbbd628ce69dff8c310bc20a667154cae8b7d9f35b02c32450e26b58fab71e673e2bcd11e43cd561e543e07798d6633734641b87045533bfea2f6bd5","ssdeep":"96:nGnLq7aXKqGjUdTyZRSUv7/NBE2BinxVmX65:GnLCaXKHUdSrpBf65","tlshash":"b191b5e93650f9be52431cf4313b6818f098961b8977d8d4f39c80ababb1d458813bb1","dom_hash":"domhash3c2433e5c341ed3f9e9e73cca18bf36c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagram-react-blue.vercel.app/","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T21:39:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-react-blue.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-30T06:10:17.908471Z","last_seen":"2026-05-18T13:50:13.866404Z","alert_count":40,"request_count":8,"received_data":2263152,"sent_data":3831,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d4dd3daf439e08ab2b036330b2756c3","sha1":"4f06927e04640eff3a54584a341fa38195aea4aa","sha256":"3e5718c4eba160f672f08b26a5fba962f9a737ee644fd34827b231d4bbfc6954","sha512":"75cc0d0b2ae257213da4af758c0f70fa5008e65d1f9449f92d7c906842b227e50bb196a3e28ec01aee5444d1c06032468d645907b2c91842bb556ce00c768ae3","ssdeep":"","tlshash":"d34194d837a4f9bd524258a8043f602af13d1976093ee9d1e349d8f9bc3ac098117fb5","size":2385,"data":"","first_seen":"2026-04-30T06:10:22.351465Z","last_seen":"2026-05-18T21:39:53.721249Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/main.554b123e.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05513e8c8e3b9b81bbe347459c2904fc","sha1":"af235490cd5e405816c14ad604164e6863c79704","sha256":"148f076c31924c57da9a9b04b89dce2faba33091ceda0cbaa808425d7ba147da","sha512":"1905b06f7bca9093b4cc995b04eba8b95caed16a22e9b34aa3390ee167d07838c17cb92f636c9caf87bbe8ec556d5cb18cf75066a87742b413d758a2211bf715","ssdeep":"","tlshash":"c551ff5c7482f9ce1bab1eee517b043ee26ba496780de4618113c8d2386940da132fcb","size":3015,"data":"","first_seen":"2026-04-30T06:10:22.343637Z","last_seen":"2026-05-18T21:39:53.71936Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/3.03f3df59.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e00347c359c9d8286d5cf3000ec29850","sha1":"86a6066c4b87ab0c777b2301e21a04837c5c8644","sha256":"57cfb70f84c45575d7c9e4eb1adc4bd5de6870a30c564ed76900fda740f814d2","sha512":"9fc5f4b5c7777eb0a14865600c435d654c785f9bfad183f1e86c85e83918815a4780b3454d87c6957b0557a4b03907161dab308adee988748a53012f166999e2","ssdeep":"6144:cIK9GiX2VhIKfewL3RxWHos8sOv/DEPf3+l6CLHw2x+mz/zLUtG:chcs2Mw94HolsOIy+M/+G","tlshash":"7ce4b6ccf692f47543a360b6507f100af33a695da44e4068f255e9e67cb844ea23bf78","size":709785,"data":"","first_seen":"2026-04-30T06:10:22.348669Z","last_seen":"2026-05-18T21:39:53.717701Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/8.523067f6.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb68ade1b5dfe3f60ac3d20a485dd081","sha1":"2963309a124db09b0531efeb6bea67f6fa124c29","sha256":"6fc4b19df353c71816de3c79ac6780c0e8b1cfb583002b3fb9c18fe892b8055b","sha512":"9149298f8fe48638736dbfc09d9e39cf5d9e584567e6d4fa9e61ffe99a332dbc35450307733dbd1264fcdc218db46e7e2f39c9f9a546d33df667afb0e92f32ca","ssdeep":"192:6CuKUNELzsaVkQSpBiKnn+qypqEO1tqL445g0alF2Zc:6P2zsaOi3sXT8x5gN7oc","tlshash":"8312869cb1c6f4ad43932770d01f100ae22e5559f90e8459e628e4e2b8b480eb637f7d","size":9642,"data":"","first_seen":"2026-04-30T06:10:22.344635Z","last_seen":"2026-05-18T21:39:53.720289Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T21:39:28.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1642648\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 18 May 2026 21:39:28 GMT\r\netag: W/\"05b32e40f92cdd7aff9301a658ae2182cfd262a33b6c010303f1daa762b43a96\"\r\nlast-modified: Wed, 29 Apr 2026 21:22:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c4fpn-1779140368742-7fc9ca74ce72\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3025), with no line terminators","md5":"015f71a8e852fe9af66cd1327b196bcb","sha1":"490fbd38abc2cf231c0c6c0be1125abeaea5b21a","sha256":"05b32e40f92cdd7aff9301a658ae2182cfd262a33b6c010303f1daa762b43a96","sha512":"c020c112fd5c170b63f85ee94a545ce2dfdc27f70e39c1e7b97b8497b2246afa2b80d3ef75284d4cb5f3973e37090da4cf150d0293d9db565038ba1f054ae215","ssdeep":"","tlshash":"3b51e8c53ba4f57ca31118a8143f7029e17c596a187aecd0d389d8faac35e4c8927fb5","first_seen":"2026-04-30T06:10:22.346799Z","last_seen":"2026-05-18T21:39:53.716496Z","times_seen":9,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":37,"dns":8,"connect":1,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/css/main.4a958b10.chunk.css","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:28.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/css/main.4a958b10.chunk.css HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1642647\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.4a958b10.chunk.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 18 May 2026 21:39:28 GMT\r\netag: W/\"34b54c54671c4380e81b2c3f70fd23f048a7cc0d784452770ea3b8e98cd6aa42\"\r\nlast-modified: Wed, 29 Apr 2026 21:22:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tkn98-1779140368909-88cf2348a0c4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1402911,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a576403ad408bf516b5cee40bf54d70f","sha1":"9d5a62fed040819ec1cc642dc02b95c7c105ecad","sha256":"cc5153f26c9de09d6767e422d79c2cda39da66b02703b81e9a03860a5fc640fc","sha512":"028200f248025e9dfe10d0bd658c060d4431f4ba92c12dc6de5278c26b20f0659c30c0101ce4ecbbbafedac90ace8856d62208c3e9504afea6332f87eb8c07e6","ssdeep":"24576:4NmEvSaQZE4HakZKmTKMQxQ4/+R+NTEZcRSILdxe9Hk5kFO43s:4NmEvSaQZE4HakZKmTKMQxQ4/+R+NTEK","tlshash":"4325516e5f62252f5cb786d5e291feec6116a088ed3104e7fd6304128d83bbbca1b174","first_seen":"2026-04-30T06:10:22.347686Z","last_seen":"2026-05-18T21:39:53.717115Z","times_seen":9,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/3.03f3df59.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:28.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/3.03f3df59.chunk.js HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1659167\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"3.03f3df59.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 18 May 2026 21:39:28 GMT\r\netag: W/\"57cfb70f84c45575d7c9e4eb1adc4bd5de6870a30c564ed76900fda740f814d2\"\r\nlast-modified: Wed, 29 Apr 2026 16:46:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6jdg-1779140368912-15e6b50e82bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":709785,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65462)","md5":"e00347c359c9d8286d5cf3000ec29850","sha1":"86a6066c4b87ab0c777b2301e21a04837c5c8644","sha256":"57cfb70f84c45575d7c9e4eb1adc4bd5de6870a30c564ed76900fda740f814d2","sha512":"9fc5f4b5c7777eb0a14865600c435d654c785f9bfad183f1e86c85e83918815a4780b3454d87c6957b0557a4b03907161dab308adee988748a53012f166999e2","ssdeep":"6144:cIK9GiX2VhIKfewL3RxWHos8sOv/DEPf3+l6CLHw2x+mz/zLUtG:chcs2Mw94HolsOIy+M/+G","tlshash":"7ce4b6ccf692f47543a360b6507f100af33a695da44e4068f255e9e67cb844ea23bf78","first_seen":"2026-04-30T06:10:22.348669Z","last_seen":"2026-05-18T21:39:53.717701Z","times_seen":9,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/favicon.ico","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:29.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1659157\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 18 May 2026 21:39:29 GMT\r\netag: W/\"0d3b03b6b3a5d8d93f2e8e420352906459a9df4a19a34accac281e7ef1d07856\"\r\nlast-modified: Wed, 29 Apr 2026 16:46:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c4fpn-1779140369251-c1b4056f7afc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dfa85bb1fd633c2ab91c0fe07586da95","sha1":"d83abdea02e3dc7f9b84841fec376fa378c0aec8","sha256":"0d3b03b6b3a5d8d93f2e8e420352906459a9df4a19a34accac281e7ef1d07856","sha512":"4904e784ab20b9a14bc4423176df9f7830de254619af574e20151ee9831c1e11e6e5b34a7b816bf75380c4d2d1d3d0330154d13d1745be63edae20048b32758c","ssdeep":"96:HW7QHJt9yT9kf/4ktWb0mWGlBp9bPefQMGDnC7Lm/xq+1De2v:20HY6/490mWGnpdefnGwLmY+pee","tlshash":"c2b12a66a5d02184d8af4875e382556acb23ef37d2165f8748c173f4997a2539038c3b","first_seen":"2023-04-05T15:42:50Z","last_seen":"2026-07-24T06:16:49.535035Z","times_seen":904,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/images/logo.png","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:29.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1629121\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Mon, 18 May 2026 21:39:29 GMT\r\netag: W/\"b9c604018a550b63d359608469904de09b8efc5f38395cca106faa49262dfde0\"\r\nlast-modified: Thu, 30 Apr 2026 01:07:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tkn98-1779140369261-158dc9ebeaaa\r\ncontent-length: 3841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 58, 8-bit colormap, non-interlaced","md5":"c46f54e523f2656d2f518d51623448a0","sha1":"d8f8311ae18fcd2b0d9bea85eb29a20e209518f8","sha256":"b9c604018a550b63d359608469904de09b8efc5f38395cca106faa49262dfde0","sha512":"9eb3830d8647d31cfbb5587c5fe0c06066e95bbeb23c3c65076eeb6448ec6d42c615fc42eba446af054866e15fefc7c9d205df4846d886b0242b76fba7e5602a","ssdeep":"","tlshash":"be810bd2b4a76ae747b49f5113467c77c43863c7454a915a682fa04f67387d20185790","first_seen":"2023-05-10T00:48:35Z","last_seen":"2026-07-24T06:16:49.521975Z","times_seen":683,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/main.554b123e.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:28.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/main.554b123e.chunk.js HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1659167\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.554b123e.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 18 May 2026 21:39:28 GMT\r\netag: W/\"148f076c31924c57da9a9b04b89dce2faba33091ceda0cbaa808425d7ba147da\"\r\nlast-modified: Wed, 29 Apr 2026 16:46:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dqm9t-1779140368911-af937fb8e99b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3015,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2967)","md5":"05513e8c8e3b9b81bbe347459c2904fc","sha1":"af235490cd5e405816c14ad604164e6863c79704","sha256":"148f076c31924c57da9a9b04b89dce2faba33091ceda0cbaa808425d7ba147da","sha512":"1905b06f7bca9093b4cc995b04eba8b95caed16a22e9b34aa3390ee167d07838c17cb92f636c9caf87bbe8ec556d5cb18cf75066a87742b413d758a2211bf715","ssdeep":"","tlshash":"c551ff5c7482f9ce1bab1eee517b043ee26ba496780de4618113c8d2386940da132fcb","first_seen":"2026-04-30T06:10:22.343637Z","last_seen":"2026-05-18T21:39:53.71936Z","times_seen":9,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/static/js/8.523067f6.chunk.js","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:29.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /static/js/8.523067f6.chunk.js HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/login\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1659166\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"8.523067f6.chunk.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 18 May 2026 21:39:29 GMT\r\netag: W/\"6fc4b19df353c71816de3c79ac6780c0e8b1cfb583002b3fb9c18fe892b8055b\"\r\nlast-modified: Wed, 29 Apr 2026 16:46:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c4fpn-1779140369228-1566db7e424a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9642,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9597)","md5":"bb68ade1b5dfe3f60ac3d20a485dd081","sha1":"2963309a124db09b0531efeb6bea67f6fa124c29","sha256":"6fc4b19df353c71816de3c79ac6780c0e8b1cfb583002b3fb9c18fe892b8055b","sha512":"9149298f8fe48638736dbfc09d9e39cf5d9e584567e6d4fa9e61ffe99a332dbc35450307733dbd1264fcdc218db46e7e2f39c9f9a546d33df667afb0e92f32ca","ssdeep":"192:6CuKUNELzsaVkQSpBiKnn+qypqEO1tqL445g0alF2Zc:6P2zsaOi3sXT8x5gN7oc","tlshash":"8312869cb1c6f4ad43932770d01f100ae22e5559f90e8459e628e4e2b8b480eb637f7d","first_seen":"2026-04-30T06:10:22.344635Z","last_seen":"2026-05-18T21:39:53.720289Z","times_seen":9,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-react-blue.vercel.app/images/iphone-with-profile.jpg","fqdn":"instagram-react-blue.vercel.app","domain":"instagram-react-blue.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-react-blue.vercel.app/","date":"2026-05-18T21:39:29.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /images/iphone-with-profile.jpg HTTP/1.1\r\nHost: instagram-react-blue.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-react-blue.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1629121\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"iphone-with-profile.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Mon, 18 May 2026 21:39:29 GMT\r\netag: W/\"9076047e19eab6ac6008eb8bf4d4a566825354f57b9e50ad99fe84bec8e2ad69\"\r\nlast-modified: Thu, 30 Apr 2026 01:07:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c4fpn-1779140369260-4ca3a8ae7656\r\ncontent-length: 120857\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":120857,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 908x1236, components 3","md5":"065afb49bc5d403aacaf846301f96faf","sha1":"131a3463481d0fd829b196100e96a70808cce967","sha256":"9076047e19eab6ac6008eb8bf4d4a566825354f57b9e50ad99fe84bec8e2ad69","sha512":"7dc982a4930877d9303e1d45243e84cc98dfb74719614dc204049d750b21ca3d632d403e5d48eaad899c7bd8c88ccffafa3e6e02b10e03beb7f9dba5d2e1bce4","ssdeep":"3072:dJ7MJR5blUEo0bQQB1Ly3c6STCI3sl1PY:d1cRHUEz9/ypSmI3sl1Y","tlshash":"f6c302bb6dcb1cc0e318b5b6e3a4946647a33fa3d74411fd12da9744fc93aa38293548","first_seen":"2023-06-04T01:18:09Z","last_seen":"2026-07-24T06:16:49.519482Z","times_seen":167,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"instagram-react-blue.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"instagram-react-blue.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}