Report - instaposts.pages.dev/

Report Overview

Visited public
2023-12-04 22:37:42
Tags
URL
instaposts.pages.dev/
Finishing URL
instaposts.pages.dev/
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
Recover Deleted Instagram Photos

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-04 06:42:16	911 B	8.2 kB	142.250.74.106
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-04 05:09:04	448 B	29 kB	104.17.25.14
instaposts.pages.dev	unknown	2020-09-02	2023-10-06 03:09:23	2023-10-23 00:08:16	5.9 kB	902 kB	188.114.96.1
unpkg.com	11693	2016-01-06	2016-01-08 00:26:01	2023-12-04 07:43:01	870 B	48 kB	104.16.124.175
dby7kx9z9yzse.cloudfront.net	unknown	2008-04-25	2022-05-28 14:37:11	2023-11-16 04:18:05	430 B	14 kB	54.230.241.48
d2ze9scn6abmic.cloudfront.net	unknown	2008-04-25	2023-08-06 22:23:59	2023-11-30 07:31:20	1.9 kB	22 kB	143.204.42.204
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17 07:36:13	2023-12-04 05:28:09	2.0 kB	138 kB	172.64.204.20
kit.fontawesome.com	1868	2012-10-18	2019-12-16 20:51:31	2023-12-04 05:23:47	461 B	12 kB	104.18.40.68

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram
2023-11-13	medium	instaposts.pages.dev/	Instagram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	From	Size	First Seen	Last Seen
	dby7kx9z9yzse.cloudfront.net/5b1744a.js	ScriptElement	27 kB	2023-10-05	2024-09-28
Pretty URL dby7kx9z9yzse.cloudfront.net/5b1744a.js IP 54.230.241.48 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-05 03:27 Last Seen2024-09-28 07:08 Times Seen153 Hash 1d4bf449a445ba3f51ddbb265bb20a66 776c9032ba78f5e4e5bee3c84ef435f79d9db4c6 f2c83aa51a9a14329803e75c79a3ef8727216c8a7f4614db3258237442b95db2 Loading...

	kit.fontawesome.com/8493700253.js	ScriptElement	12 kB	2023-12-04	2024-08-20
Pretty URL kit.fontawesome.com/8493700253.js IP 104.18.40.68 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-04 02:47 Last Seen2024-08-20 16:52 Times Seen15 Hash f9c880f6392103b5226119021cda8306 2a28ecb1be52d2c667e5dea7ca15f9eb68626525 4249c18e1d0580442af3e998733f1d5c35c085ccee7a34c803ddcdc65917a861 Loading...

	unpkg.com/axios/dist/axios.min.js	ScriptElement	34 kB	2023-11-14	2025-05-07
Pretty URL unpkg.com/axios/dist/axios.min.js IP 104.16.124.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-14 21:38 Last Seen2025-05-07 12:10 Times Seen6726 Hash a68c57e04fd79331988c16fc3585405d 413c97b8c8ba0be18c36a65a5be940239c5956c2 550f26d03776c62d33e90b8028c6b4e2e7d1301c6ff769cff94592a93df71c68 Loading...

	instaposts.pages.dev/	ScriptElement	64 B	2023-03-07	2024-08-21
Pretty URL instaposts.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:07 Last Seen2024-08-21 08:27 Times Seen29 Hash cac371c5f1fa982230ebd6a7c694df09 daa9afcf894730b61ccd25a039dc18d8fcd5925d 7ee7de859a85bf474f12ac7db04a246dea634c7e0137a7365e88e692adef0e11 Loading...

	instaposts.pages.dev/	ScriptElement	6.7 kB	2023-03-13	2024-08-21
Pretty URL instaposts.pages.dev/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 17:14 Last Seen2024-08-21 04:05 Times Seen10 Hash 4a198b9a8cea1b2152f04974e80974fb 3368fe530dfd90d9a1e53bd08092f39fd0062a71 ab577999ed7490c24aa8571fe0024786525286281ba1ac03acdaaa31a354d20f Loading...

	d2ze9scn6abmic.cloudfront.net/public/external/v2/htmlxf.2131664.27eca.0.js	ScriptElement	13 kB	2023-12-04	2024-08-20
Pretty URL d2ze9scn6abmic.cloudfront.net/public/external/v2/htmlxf.2131664.27eca.0.js IP 143.204.42.204 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-04 23:37 Last Seen2024-08-20 16:45 Times Seen2 Hash c86c29470985372cc68742c711a28772 9a15351376214499a5f0fcbf58c8884971be4f78 fdf1fac54ecd6a119258d1f96fed1aa44979ce612c6506acbde042ab8403e803 Loading...

	d2ze9scn6abmic.cloudfront.net/public/external/check.php?it=2131664&time=1701729454531	ScriptElement	72 B	2023-08-12	2025-05-09
Pretty URL d2ze9scn6abmic.cloudfront.net/public/external/check.php?it=2131664&time=1701729454531 IP 143.204.42.204 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-12 16:35 Last Seen2025-05-09 21:49 Times Seen842 Hash 69d77690ed201acd0627e99dd35c96eb 05ffc794be6dae3836ee5df72d82d917323b2941 577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38 Loading...

	instaposts.pages.dev/src/cDg-min.js	ScriptElement	339 B	2023-03-07	2024-08-21
Pretty URL instaposts.pages.dev/src/cDg-min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07 Last Seen2024-08-21 08:27 Times Seen31 Hash 0432a28d2866927cc06604ea078acd0d 6c0cb9dc21a5bb8dad6776cc94d0b3d04ca7d203 c8e4bd11bcb018fb25d2e6db0ded4e5b7201e7f59ef7d2338960ea9f9ba36b42 Loading...

	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js	ScriptElement	88 kB	2023-03-07	2025-05-10
Pretty URL cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-10 06:08 Times Seen68160 Hash 220afd743d9e9643852e31a135a9f3ae 88523924351bac0b5d560fe0c5781e2556e7693d 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a Loading...

HTTP Transactions (28)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js

104.17.25.14

200 OK

28 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65451)
Size
28 kB (27748 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 27748
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15851"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 658306
expires: Sat, 23 Nov 2024 22:37:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KRF7SoVnWeDeSIMg6JyedhfPKanaQnlFtIRqz8roeruejkjfC%2FjDUjWy%2ByQRBzSfvCt3jUBV34BTtL%2BxG2LxmGJ7qfuu8nKx6k9Rlqe3JJI8U6kq0n8iRZFuIV7GB3l78GgjYfao"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 830788a95e295695-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

instaposts.pages.dev/img/menu.png

188.114.96.1

200 OK

1.3 kB

URL GET HTTP/3
instaposts.pages.dev/img/menu.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
PNG image data, 82 x 80, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1255 bytes)
Hash
579d48db9ec97dde9cae51924612fbe9
c9bc0617a5d1b23f73828f21d534afcdd007551b
468fa718d9bd09dbb42e483507865d2faf36d474901f010e05087e1aad0dcaa6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/menu.png HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/png
content-length: 1255
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "137d1286fcbcaed4167b43e17831114a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FswHXu%2FFQJX%2FdruboBlftp0CPYaktCd7fFnWp%2FGlMrEHJZJvC6aHiayTQx2rTKeJFC%2BU1hN%2F%2F9KOcT9cm5ofBf7Qad5FS5qcGFlzUI%2FzbK%2Fd%2FAjog3hZqb9cOOxTnz2migN9oGSZVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8e9f41c06-OSL
alt-svc: h3=":443"; ma=86400

instaposts.pages.dev/img/ihpne.png

188.114.96.1

200 OK

32 kB

URL GET HTTP/3
instaposts.pages.dev/img/ihpne.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
PNG image data, 1200 x 1200, 8-bit colormap, non-interlaced\012- data
Size
32 kB (31620 bytes)
Hash
9c09eee3daebc943fb6966eaddd0b1f2
71b7d6ce3cef5751369f974b4254f9e0e221a34a
3274b0721cc0970b2cc977647a7daa2b4351b2ab305ebd9da0365586d9fe9431

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/ihpne.png HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/png
content-length: 31620
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "97fcde8e9186f98feae26ae3f6ebaa72"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qsj1jFbJoQ5KL7aWfJBVPbpRm%2BT7iLO2z0oyg5qdFsC7fnrjqeL4CP2JCJDuCVfrWAgDtLvcO7LPfhl5E6C7u8dKiyFc439CcCOBuxASAzwrJF9H332I4E2hBlIN56PX%2B1n00mGaow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8f9fb1c06-OSL
alt-svc: h3=":443"; ma=86400

unpkg.com/axios@1.6.2/dist/axios.min.js

104.16.124.175

200 OK

13 kB

URL GET HTTP/2
unpkg.com/axios@1.6.2/dist/axios.min.js
IP
104.16.124.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type
ASCII text, with very long lines (33582)
Size
13 kB (13344 bytes)
Hash
a68c57e04fd79331988c16fc3585405d
413c97b8c8ba0be18c36a65a5be940239c5956c2
550f26d03776c62d33e90b8028c6b4e2e7d1301c6ff769cff94592a93df71c68

HTTP Headers

GET /axios@1.6.2/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: application/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=31536000
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
etag: W/"8355-QTyXuMi6C+GMNqZaW+lAI5xZVsI"
via: 1.1 fly.io
fly-request-id: 01HGCN3VFCPPSGV0YWPCZJNHHR-arn
cf-cache-status: HIT
age: 497596
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830788aa1acf5685-OSL
content-encoding: br
X-Firefox-Spdy: h2

instaposts.pages.dev/img/wig.png

188.114.96.1

200 OK

211 kB

URL GET HTTP/3
instaposts.pages.dev/img/wig.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
PNG image data, 4500 x 4500, 8-bit/color RGBA, non-interlaced\012- data
Size
211 kB (210574 bytes)
Hash
8b1ccf1bc154ed976d5f38e16d1a0a91
4963601be5d4c5d9f4885fbfda1ccdd28c36d403
f786287e3d9bc2b2bf4418f0ffdc9432bf40cbd5077ece97b7bde037ad0ce597

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/wig.png HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/png
content-length: 210574
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "26959a384eda47f780afe9b1f3bf1ae6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5CexFG3CvJGtWfQgRU13Sp3TCu0%2FD9AOj0ZqRa9Q7e%2BaWAaYvFVqKETkoF9vYBXkkeIQoCwkJcis23ilkwqPAV%2BeVnN4NI4qLkWWie55whpXoNN298HdFdUTMO8oUtqlRuCCW0Hn3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8e9f51c06-OSL
alt-svc: h3=":443"; ma=86400

instaposts.pages.dev/img/loadercr.gif

188.114.96.1

200 OK

220 kB

URL GET HTTP/3
instaposts.pages.dev/img/loadercr.gif
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
GIF image data, version 89a, 146 x 146\012- data
Size
220 kB (219813 bytes)
Hash
75dac2aa5f448ddba938ebb784077224
c0515516309e317bc6e7754c2995b96c7789cf09
3af49083959404c8b4de27de90f6b5145b3430322a8b8b15300eb6e558aad38e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/loadercr.gif HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:26 GMT
content-type: image/gif
content-length: 219813
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "31a19fd587b87ba2b262ad2cd34f423f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=16FG%2FoJYP8byhbnXw%2F7NQBiNymGJlUdSy%2FwC8AFbitj0D1Qy3P%2Fh2WsRxDWSAc8u5CPuG3A4VYM0a1rfPR%2FfIRPB%2BUZJqA2Jcallm6PzK7dlZMGyRPBYIfAw0S8W8xI8Qb9nbY%2FHXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8e9f61c06-OSL
alt-svc: h3=":443"; ma=86400

dby7kx9z9yzse.cloudfront.net/5b1744a.js

54.230.241.48

200 OK

14 kB

URL GET HTTP/2
dby7kx9z9yzse.cloudfront.net/5b1744a.js
IP
54.230.241.48:443
ASN
#16509 AMAZON-02

Requested by
https://instaposts.pages.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
C source, ASCII text, with very long lines (1637), with CRLF line terminators
Size
14 kB (13453 bytes)
Hash
1d4bf449a445ba3f51ddbb265bb20a66
776c9032ba78f5e4e5bee3c84ef435f79d9db4c6
f2c83aa51a9a14329803e75c79a3ef8727216c8a7f4614db3258237442b95db2

HTTP Headers

GET /5b1744a.js HTTP/1.1
Host: dby7kx9z9yzse.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Wed, 04 Oct 2023 02:19:24 GMT
server: AmazonS3
content-encoding: br
date: Mon, 04 Dec 2023 02:27:28 GMT
etag: W/"1d4bf449a445ba3f51ddbb265bb20a66"
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4-4sJ7Su745m7oZ8oaYPvCM37ncjlWEXnUfUh5GEsMmHJyj-NrjU1g==
age: 72598
X-Firefox-Spdy: h2

d2ze9scn6abmic.cloudfront.net/public/clockers/CustomButton/cssXF.css

143.204.42.204

200 OK

896 B

URL GET HTTP/2
d2ze9scn6abmic.cloudfront.net/public/clockers/CustomButton/cssXF.css
IP
143.204.42.204:443
ASN
#16509 AMAZON-02

Requested by
https://instaposts.pages.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
896 B (896 bytes)
Hash
4c31e2e879fda3248e38f318494d6676
9f74294ca7491752f72ea705e6fc992549e1ade9
01054ae4581776870b0514bfb9607e8764927456f14d8eb6de6ba84f12f9c3d6

HTTP Headers

GET /public/clockers/CustomButton/cssXF.css HTTP/1.1
Host: d2ze9scn6abmic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
content-length: 896
date: Mon, 04 Dec 2023 22:37:27 GMT
server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Thu, 17 Aug 2023 03:35:04 GMT
etag: "380-60316190d8c31"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kCC4A6qFjIFin7m2a8DMoFbinnOL5wPJp7d9ZtElrtwYXjMelDj3hA==
X-Firefox-Spdy: h2

instaposts.pages.dev/img/igicon.png

188.114.96.1

200 OK

384 kB

URL GET HTTP/3
instaposts.pages.dev/img/igicon.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size
384 kB (384430 bytes)
Hash
a11315201911a2d50acb12f211af971d
d9040ab32ed1da500c94ca06a3e42fa6d60da81d
3906a915835476abc70cf1cf63ec02271d46a690fe1603750c3bffee8f99b32a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/igicon.png HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:27 GMT
content-type: image/png
content-length: 384430
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5983c45272feb2d00f92a8613e91b2aa"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yNwV%2BoVQ14F0SXYRD0pCh4GslakTjqA5EAkISxt2uRFHX6UmZWzdbSAuVpH6N1sCmyrlsaR6x4wZJVepu%2BvIIbowcKONcE0cC%2FBGKsYAw9g%2FPD7Hvzy0ahaBe5RRsjs0mJdW5AolXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788af6d241c06-OSL
alt-svc: h3=":443"; ma=86400

d2ze9scn6abmic.cloudfront.net/public/external/check.php?it=2131664&time=1701729454531

143.204.42.204

200 OK

72 B

URL GET HTTP/2
d2ze9scn6abmic.cloudfront.net/public/external/check.php?it=2131664&time=1701729454531
IP
143.204.42.204:443
ASN
#16509 AMAZON-02

Requested by
https://instaposts.pages.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text
Size
72 B (72 bytes)
Hash
69d77690ed201acd0627e99dd35c96eb
05ffc794be6dae3836ee5df72d82d917323b2941
577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38

HTTP Headers

GET /public/external/check.php?it=2131664&time=1701729454531 HTTP/1.1
Host: d2ze9scn6abmic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 72
date: Mon, 04 Dec 2023 22:37:29 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DyuihjSo3y4doQ-UxSEmXdiLGl3ar9vM5qcnn-FbIJ9wB39-UcORPw==
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.1/css/free.min.css?token=8493700253

172.64.204.20

200 OK

103 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.1/css/free.min.css?token=8493700253
IP
172.64.204.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT

File type
ASCII text, with very long lines (65321)
Size
103 kB (103173 bytes)
Hash
edc53d8d44037708e54122b9e30bb2a1
7210b158d88b1e463ba0b08d26835a9fd4e6c57e
b2bfe99e2e78f71c88eb00c49e1392a15531fb6486d0d0c2ea71937dda34deab

HTTP Headers

GET /releases/v6.5.1/css/free.min.css?token=8493700253 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
Origin: https://instaposts.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 30 Nov 2023 17:25:52 GMT
etag: W/"edc53d8d44037708e54122b9e30bb2a1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f546fae491a152f9c1396e6d0a62bb42.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: Uqi-iEtTSDuGodS0aEIHnETGDrOAI8W0rxb_tc7vG8CqHsqs-texlg==
age: 6454
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JuFNYxt%2BjzhGqo9ux7gBWrU34Z%2BvrFVDwk3j%2FNyZoH8rFUO3qzk%2B%2B8Qt%2FvDo2bnJhsoFNdS476P45MD1EEVbvGjZS4ZHrj2TegvlYAfzLHnI5UISwWNW%2BXdpJQiR4k4YOjkRs4QHLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830788ad084a0732-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

unpkg.com/axios/dist/axios.min.js

104.16.124.175

302 Found

34 kB

URL GET HTTP/2
unpkg.com/axios/dist/axios.min.js
IP
104.16.124.175:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F
ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT

File type

Size
34 kB (33621 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /axios/dist/axios.min.js HTTP/1.1
Host: unpkg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/plain; charset=utf-8
access-control-allow-origin: *
cache-control: public, s-maxage=600, max-age=60
location: /axios@1.6.2/dist/axios.min.js
vary: Accept, Accept-Encoding
via: 1.1 fly.io
fly-request-id: 01HGVFJ1PK95J8NVVA01VJ8WR9-arn
cf-cache-status: HIT
age: 106
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 830788a93a3c5685-OSL
X-Firefox-Spdy: h2

instaposts.pages.dev/img/pc.svg

188.114.96.1

200 OK

634 B

URL GET HTTP/3
instaposts.pages.dev/img/pc.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (675), with no line terminators
Size
634 B (634 bytes)
Hash
198635f3a8a5b82a7e02b160f0e4f128
ff818965beac93c748cae0bd689f4798502af9f9
b543b783344fb04d24ac85c564e5e994b537debf9a1e640d8fa7974d93e1c143

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/pc.svg HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"11550f2328f258b82398cd014b2c952a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dN%2BtccUzPFMMBelQ6ldQgn%2BwqEgnXuGvhcrmKPnqaOc1Wl%2Bhy7tdKGzdaCxiXjQSdRcSoo659eh227njBA0UqfdDAzoU%2FCBknKnfofl6ZIsodbo9lmM8pBXIJNQiNZ2APuBN0SLS2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8f9fe1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2ze9scn6abmic.cloudfront.net/public/external/css_frontXF.css

143.204.42.204

200 OK

6.1 kB

URL GET HTTP/2
d2ze9scn6abmic.cloudfront.net/public/external/css_frontXF.css
IP
143.204.42.204:443
ASN
#16509 AMAZON-02

Requested by
https://instaposts.pages.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (6540), with no line terminators
Size
6.1 kB (6134 bytes)
Hash
c1801db5f380073be5f2b95a315f147c
5f7aa5f52f6a21580c29809d13f2f71baf9b1e4b
33234f8b457d3bf112bc9dcbeb6fdd4ec18f6f6e1f38d6ad71f56f8b00c25b73

HTTP Headers

GET /public/external/css_frontXF.css HTTP/1.1
Host: d2ze9scn6abmic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
content-length: 6134
date: Mon, 04 Dec 2023 22:37:26 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
last-modified: Thu, 17 Aug 2023 03:23:51 GMT
etag: "17f6-60315f0f18c9f"
accept-ranges: bytes
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 1RUiLM4gs_aRSgaj32Fp7pCte9wuXucRQjFG51aNAK01-rd7potN2Q==
X-Firefox-Spdy: h2

kit.fontawesome.com/8493700253.js

104.18.40.68

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/8493700253.js
IP
104.18.40.68:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
ASCII text, with very long lines (11461)
Size
12 kB (11890 bytes)
Hash
f9c880f6392103b5226119021cda8306
2a28ecb1be52d2c667e5dea7ca15f9eb68626525
4249c18e1d0580442af3e998733f1d5c35c085ccee7a34c803ddcdc65917a861

HTTP Headers

GET /8493700253.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
Origin: https://instaposts.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F50FC6ADe3HjE5dCYJhC
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 830788a929971c12-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

instaposts.pages.dev/css/st.css

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
instaposts.pages.dev/css/st.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
ASCII text
Size
12 kB (12183 bytes)
Hash
85b5b9f1533d1bd173eac422a3a0174b
928d37e769e3da1194e74ba085832ab9b5916516
63ef61c9f9b934ca64b51b5660fa35dc6a176f06877628937c22a6786dd77fef

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /css/st.css HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"48d3f172d4de78e9e7bcd13d9393b55b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VCua6hsu6AFHKKEmBA93soWB5somx71Q1OxHXwts6gNCRzgt3r76zzLd8H19jLci64nDX5yYtaHOe2uWWye6EQ8ATIMkANWY1oDeMhQC8ZNdNhWz%2F3q0bXZnDE2X1rvYswHvS5YjJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8d9e91c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

instaposts.pages.dev/src/cDg-min.js

188.114.96.1

200 OK

339 B

URL GET HTTP/3
instaposts.pages.dev/src/cDg-min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (359), with no line terminators
Size
339 B (339 bytes)
Hash
88449e4a0de3aa447aadc11ba4179de2
77cb520b19beb6d20c31abcf425073aec47c4b86
13015e846f589f133fb33cadb0a39e5bb8a64e0425a507a924461255a80732ae

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /src/cDg-min.js HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"7dbeab961f348fe3f59d5b8417f5070e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TVY4KPBxTteIp%2F2h6tu1%2FchU8t14P0iGAI2rQTONtcmmFu2bhlWK2emkeyJaQlcU90nniFAFOxsmuvzM3Y2uyieEudnjoe2eqotnulezht3XH9B2lllioDm42xwnP7XYYYIqlH2NIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8d9e81c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-shims.min.css?token=8493700253

172.64.204.20

200 OK

28 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-shims.min.css?token=8493700253
IP
172.64.204.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT

File type
ASCII text, with very long lines (27377)
Size
28 kB (27592 bytes)
Hash
604d6da359831b0dc67e0f522f1ff94d
48b776b939a780fde0270dedf7cc163d25e28bb1
5031c11dd77875afefe4eeddfaa320af07fdccea327f7416a5ee8980674c9c76

HTTP Headers

GET /releases/v6.5.1/css/free-v4-shims.min.css?token=8493700253 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
Origin: https://instaposts.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 30 Nov 2023 17:25:51 GMT
etag: W/"604d6da359831b0dc67e0f522f1ff94d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f546fae491a152f9c1396e6d0a62bb42.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: zklCKhiyeY8UemPOtop1VDk-gc-AFHqb8GXLjt2ph8UB2YO5qzpdgg==
age: 6454
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2Bo%2BwBlp6RzFwqIu9Ozr0E2pM22KquWK4P%2FcnYr17iys%2BRAnLVLs2j8DdNh%2BCk9N1Q4%2B8AZAEnZ5WzTG9Nu%2FlRB1luIYW2KAKGJhJs5trpthmEMSpT5VQVISNfTo1igmoylxC8hlZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830788ad084b0732-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

instaposts.pages.dev/css/style.css

188.114.96.1

200 OK

12 kB

URL GET HTTP/3
instaposts.pages.dev/css/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
ASCII text
Size
12 kB (11918 bytes)
Hash
ac3075533b099e788af09f89560163b2
63af6921ede94c4c265c23e31de5769efc5edd22
1d386ae3a552f382f3f0ff2970714c1d82ac857c140959cdc7c896a63121a159

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /css/style.css HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"94889aa95f6a9c85ebc2ab0140934d55"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Xm8%2BCPaCtBfkRgV0UHNFF80rJB7mdVizlZuXwGBPcye5iX7uhj0Yg%2F2wM%2BaHj77HQz00Yu3%2FX2HQWcf%2FDxUtolWIkTimPwudWOkQOhUvbYYm4rOQgv7M2MtRdQLEzC8kzfEx5EWVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8d9e61c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-font-face.min.css?token=8493700253

172.64.204.20

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.1/css/free-v4-font-face.min.css?token=8493700253
IP
172.64.204.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
b0e7ed6622101ceea9a31043809aabaf
22fefad8852cf1d903fc7d99970d572ddc6b613c
5f9c11fbca88fe6e6e8ce0de6c76eaca7b8c258572153af5ff88c831316347d0

HTTP Headers

GET /releases/v6.5.1/css/free-v4-font-face.min.css?token=8493700253 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
Origin: https://instaposts.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 30 Nov 2023 17:25:51 GMT
etag: W/"cc84affe95dbdd9726525f57d20b4ea6"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c9e93510e33ab69af0de2f41455fbb80.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: DAaObgz1zIXciK1TS5bUThdtCNqWzT3qTDwOIWrB2lkU5Mt1UHvO5g==
age: 6454
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y%2Ba4eQVx0zu%2B4osBD%2FOtyLxduit%2B0E1E637c3TY6OMSKfm9t7KnKwV8Oe%2F2oQxhHVKJWNzVr3OI2Y589r0PGav5%2FpNDujGgoybpOJsLWHRN%2BkDXMIFv2ZLWLTDXhDb6YIIYqj0JlGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 830788ad08470732-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/icon?family=Material+Icons

142.250.74.106

200 OK

565 B

URL GET HTTP/2
fonts.googleapis.com/icon?family=Material+Icons
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (588), with no line terminators
Size
565 B (565 bytes)
Hash
bdcf60bde5544e1017e1f2e60888a9c7
6fb24309b7ff90c1c99d19c0c7a127a16508840e
d701601406acfca6bfc0c58b411446e3e0e96c659f35c143355d3dd72c390952

HTTP Headers

GET /icon?family=Material+Icons HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 22:37:25 GMT
date: Mon, 04 Dec 2023 22:37:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:100,300,400

142.250.74.106

200 OK

6.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:100,300,400
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT

File type
ASCII text, with very long lines (6523), with no line terminators
Size
6.4 kB (6355 bytes)
Hash
01cb5697003980c614f58682ccebe2e0
fcd8645e5db98c7c717a1026c31adddc89d7cf2d
2996533be05f508533215a6bb14b19d031bf466e476a0b5f9ff2fac44b9e34fb

HTTP Headers

GET /css?family=Roboto:100,300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 04 Dec 2023 22:37:25 GMT
date: Mon, 04 Dec 2023 22:37:25 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

instaposts.pages.dev/img/ig.svg

188.114.96.1

200 OK

5.7 kB

URL GET HTTP/3
instaposts.pages.dev/img/ig.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (5759), with no line terminators
Size
5.7 kB (5741 bytes)
Hash
9670afb71679cfbdd58c35e37c35802f
55cd596f3ad9f99d2f435665fa65822241a3fe97
72532cce93d41b04d8c2ccaafe89d70dc2a277398088563ac524e0c273bdee6b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/ig.svg HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d988cfc8cf7a06749cbac0fa92f059d1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FUhaVYEFhqjgHZ6bDaFq61ECw806wTWZ4ud5KuMvZ7V2QPfMQ1C6LEsKrNXoWrKEL4yxXH6hTuKzI6WxYT5B7MfnUKw84X7jN%2BouuvnQTSb3crVkmuUeEcxpyCCXZB5OmM011FQ9yQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8e9f21c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

instaposts.pages.dev/

188.114.96.1

200 OK

12 kB

URL User Request GET HTTP/2
instaposts.pages.dev/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type

Size
12 kB (11656 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET / HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:24 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"47b29c1035b2fe6ff85113a627c880a9"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eMH3zxO54x7D8FWGuN3Uo%2FjURcKeQkdcdQWgMV5gxCwTPWybgQr84uFjA5BNaglgmwEdrd%2FFsEtUpuElb%2FI%2Bcl1n9npAImCWjv8DZOhsOFe1UHfNoFHIYhsGS10ETO%2FOSw1PjN3xZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a6af900b4d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

instaposts.pages.dev/img/android.svg

188.114.96.1

200 OK

1.5 kB

URL GET HTTP/3
instaposts.pages.dev/img/android.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1616), with no line terminators
Size
1.5 kB (1548 bytes)
Hash
e3bd1ae7b6fb23b46841dd43238771cf
e32fae3b38b03e39a6a74003beee32ad78c0eaa6
9cc5982e828bcc3993658cac49f5080f844c36a76e3aecab705b895189959132

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/android.svg HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"081d21a567403e791ff46bf2a7c17f80"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gQK5jBwi0%2FMW5afp2CH1bDlqG9hMeSJNJ%2BXBZVN4kvQzpM4bdwWJlDfki5EiqBJ2FbSxZcNXlGxBkYLdyvGiied94elefzaIvRby9z6bmq3qwoHIO9kzWW4qEgMyhZTJM3VBgCFulA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8f9fc1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ka-f.fontawesome.com/releases/v6.5.1/css/free-v5-font-face.min.css?token=8493700253

172.64.204.20

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.1/css/free-v5-font-face.min.css?token=8493700253
IP
172.64.204.20:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintBC:9B:12:21:8D:67:FE:B5:D3:76:65:FC:D3:F7:91:AE:B4:65:CA:81
ValidityWed, 08 Nov 2023 07:11:36 GMT - Tue, 06 Feb 2024 07:11:35 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
e6d3783736d2fad2b606057fbb27accf
42a95cbe55b5192414282a64e5f0a106ebd0cfcd
428e4fa90d3cad30b14fe0c63a3a23e6487de4dad755477a33a385844e5a91a7

HTTP Headers

GET /releases/v6.5.1/css/free-v5-font-face.min.css?token=8493700253 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
Origin: https://instaposts.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Thu, 30 Nov 2023 17:25:51 GMT
etag: W/"496965a55b1faa4d5c41073ef276afc0"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 17a77a72dc1e9981253a822e540e37c2.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: 7xtwEVNTv7mO7LRUKWCgR_9a23vLp67usgBJiLrt-NOtp9Ec6BwZnA==
age: 6454
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X9b0OpPzqZ6Ijkni1UMkmqDb4caAwnho9zybjm77KnMrxDoM2HrcbUMVbCT%2FLW55x%2FlYhggCMVUIEuiyD%2B5nYEBJ0uEfzW3Vwcb5YTT0l7mIoFdZxjpJSSIfzW9RwL5noGPaJ3Jnqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788ad18580732-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

instaposts.pages.dev/img/apple.svg

188.114.96.1

200 OK

828 B

URL GET HTTP/3
instaposts.pages.dev/img/apple.svg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://instaposts.pages.dev/
Certificate
IssuerLet's Encrypt
Subjectinstaposts.pages.dev
FingerprintB8:E9:72:79:14:CD:48:55:0A:4C:F1:13:26:D4:1A:02:7F:24:4D:4A
ValidityMon, 04 Dec 2023 03:03:51 GMT - Sun, 03 Mar 2024 03:03:50 GMT

File type
SVG Scalable Vector Graphics image\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (873), with no line terminators
Size
828 B (828 bytes)
Hash
2b97862e900c78261d3400640f163065
e4ef33b368dfa479702b228ab2f27e8b412aa4bc
dbe2c2a5ad104153468d563ab073b7e3683cf4c964550725ccd9f531a67b48ba

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Instagram

HTTP Headers

GET /img/apple.svg HTTP/1.1
Host: instaposts.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 04 Dec 2023 22:37:25 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"a0f5764eb46f4b717f4a1948712b5366"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dtNAb5xi5HH%2Bm52XPN2nFIRe8gYfshbtY91ipDPpV7rgvnyR5Xqj6FCgKQnokMV40pCTeoaUKF6LaObbDOLhfln6aJXqs%2BEU2AWnhlZNZqAXADeUq5ZzRZ2DeliHZdc%2FPwBF6Ttw8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 830788a8f9fd1c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

d2ze9scn6abmic.cloudfront.net/public/external/v2/htmlxf.2131664.27eca.0.js

143.204.42.204

200 OK

13 kB

URL GET HTTP/2
d2ze9scn6abmic.cloudfront.net/public/external/v2/htmlxf.2131664.27eca.0.js
IP
143.204.42.204:443
ASN
#16509 AMAZON-02

Requested by
https://instaposts.pages.dev/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (11943), with CRLF line terminators
Size
13 kB (13228 bytes)
Hash
c86c29470985372cc68742c711a28772
9a15351376214499a5f0fcbf58c8884971be4f78
fdf1fac54ecd6a119258d1f96fed1aa44979ce612c6506acbde042ab8403e803

HTTP Headers

GET /public/external/v2/htmlxf.2131664.27eca.0.js HTTP/1.1
Host: d2ze9scn6abmic.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://instaposts.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
date: Mon, 04 Dec 2023 22:37:26 GMT
server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11
x-powered-by: PHP/7.4.11
x-cache: Miss from cloudfront
via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 89s4UIwHzeJkyoHt2Ex-ZXD7FESDGYArHo0gCE9elcxbF3EI6zpRJA==
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (28)

URL GET HTTP/2

IP

ASN