{"report_id":"d1e2e1a7-adc4-4a81-81bf-4e4068cf657f","version":6,"status":"done","tags":["instagram","meta","social","phishing","suspicious"],"date":"2026-05-07T15:43:22Z","url":{"schema":"https","addr":"instagram-uson.vercel.app/","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-uson.vercel.app/","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"title":"Instagram","dom":{"size":16744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9868)","md5":"f4f9fd4d3c1c91069027d46c1d589cc2","sha1":"1798d65d046344b8aca1074bda8d0dacb5ed7f64","sha256":"be34261e86e7050a596a92a65a70eeafbccea20c7d31785e736238c6c3a927f0","sha512":"006bb62a4f62dbf6d2a8b84847187518851c85b20f02d93df0c2c989dc3ae0646715ebd982266a7ea5137539182154da1673408dd7a28650ae86bfc8e55a0b15","ssdeep":"384:tYBvATKTzKjRCf9GfGN/dLAwgre5LjYimOqupOWcLPmwDiJ+jZ:6YKTzKjRCVGfAdcv4IiVqJLPoJ+jZ","tlshash":"b672af599cb5a5be4666d5e1fa2a728e2cd0e26394840dd079ad3dcbdbc3c0f8c0356c","dom_hash":"domhash9db917cd433e9c034af67e2799021ded","first_seen":"2026-02-07T12:31:27.634718Z","last_seen":"2026-05-07T15:43:23.50739Z","times_seen":10,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"instagram-uson.vercel.app/","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-11T15:43:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"instagram-uson.vercel.app/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"instagram-uson.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"instagram-uson.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-07T23:02:37.357811Z","last_seen":"2026-05-07T15:43:16.886058Z","alert_count":14,"request_count":3,"received_data":21361,"sent_data":1376,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Axios:1.1.2","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"static.cdninstagram.com","ip":{"addr":"31.13.72.53","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2014-05-01","domain_rank":21477,"first_seen":"2017-02-22T19:40:09Z","last_seen":"2026-05-07T00:32:19.962882Z","alert_count":0,"request_count":2,"received_data":20033,"sent_data":950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-03T22:36:05.340423Z","alert_count":0,"request_count":1,"received_data":27703,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-05-06T19:43:46.993563Z","alert_count":0,"request_count":1,"received_data":2138,"sent_data":510,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-uson.vercel.app/script.js","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ab4adbc2cef7f6b70c03ea00101d60f","sha1":"2d6cbecef1f7e8e861b3ab53b92a4847c73520d3","sha256":"57399ae4ebecc3c82f4bc96bb26fa25314d9ef3a658d6af13468e6086719c1fe","sha512":"f8f3f4e3878f57a01aaaf5bd051593859560512cdee00bc94c09056633c521dd48e839d2352e5b125cda6d39f0550740b5a9fb8cf297a1b478e7a5488586b8e1","ssdeep":"","tlshash":"c3f00c3904fa0d7806bfe1c3b414f594284841276c03f822829cc886ff6ec822399759","size":612,"data":"","first_seen":"2026-02-07T12:31:27.638676Z","last_seen":"2026-05-07T15:43:23.51865Z","times_seen":10,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"instagram-uson.vercel.app/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.1.2/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b395fd3cd02432ec6ce3a4a34332c0","sha1":"69edb681673e5ad794d33f9f05b8b08ea940c13b","sha256":"ffb6e270a7bbb1ea1b797965ae85e35760b38b98744478a4151ddee79a31d215","sha512":"6c7793fb3fa7f2b87d08aad2adbc9f6c8371bbb82c06648794309bde0505d418e68c3cca8682aca7207bd64d022110528c4e4855088c3150600968c5eb4aacbc","ssdeep":"384:mbUb3yPszow2RM6vC7lhDlgnOcsNbscG1FJcI3VDuznyOUCjPnoLnNs9aAjjJFDU:CPMivC7zDCFUbsciFujyR34DkTF","tlshash":"3fc2f9cdba91b06153e73174506f150bf33aa926a44e8490f120ecea7cb924e9763f7d","size":26580,"data":"","first_seen":"2023-03-08T08:20:01Z","last_seen":"2026-08-11T00:25:48.160971Z","times_seen":2978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-uson.vercel.app/","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-07T15:43:00.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-uson.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1092095\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\netag: W/\"f8da0344f44204831c4917075c20b6ac\"\r\nlast-modified: Sat, 25 Apr 2026 00:21:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::n5467-1778168580269-6717f537f9c7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Axios:1.1.2","description":"Promise based HTTP client for the browser and node.js","website":"https://github.com/axios/axios","common_platform_enumeration":"","icon":"Axios.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":17116,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9852)","md5":"f8da0344f44204831c4917075c20b6ac","sha1":"af9599e802480653da0c1bd79119edda5d9cd956","sha256":"53d8af0ef133c16e70d0e4b4f2d722290cfcf726e6fcae872d7f2da53fa28e7b","sha512":"348060df4c9285bb1828a17f20cfc6dfb337f88a2f1bb2a26ad665f9043f3c314a9db05d02f9b7131b27e1ccbc3eacd145793233b532d732ea543dbac4c7aa29","ssdeep":"384:pYBvATKTzKjRCf9GfGN/dLAwgre5LjYcmOqupOWcCtbeoxjd:WYKTzKjRCVGfAdcv4IcVqJCooxjd","tlshash":"8072ae589db5a6fe466a95f1ba27724e2cd0e2a395400dd479bd3ccbdfc3c0a880359c","first_seen":"2026-02-07T12:31:27.640976Z","last_seen":"2026-05-07T15:43:23.509481Z","times_seen":10,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":25,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"instagram-uson.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-uson.vercel.app/style.css","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: instagram-uson.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1092095\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\netag: W/\"cea3f9e24186ea071e9f0d5566bbbaa5\"\r\nlast-modified: Sat, 25 Apr 2026 00:21:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pdxbm-1778168580500-4bce464995cd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cea3f9e24186ea071e9f0d5566bbbaa5","sha1":"1c5528fbb980b3c6e782182d2e658fb71e47f141","sha256":"c4e04b5d10d8e774fde35ac792c856c6ca83c50d2b50fc343f9638812c053c42","sha512":"78baf11628ce99c953c97d9d922217acfe7f05c00d9e206ed97ee06aa0c16aa9840a5f08786f63760289ecb99a6a46d437ce5beb14c5671cc1d03fc4946e5faf","ssdeep":"","tlshash":"35412cda26631001bc22b9782f7a9b05a281d503d50fdd6f7bc4225ccf8a2dd99f178c","first_seen":"2026-02-07T12:31:27.641826Z","last_seen":"2026-05-07T15:43:23.511983Z","times_seen":10,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"instagram-uson.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"static.cdninstagram.com/rsrc.php/v3/yv/r/_UbeIRgTpG-.png","fqdn":"static.cdninstagram.com","domain":"cdninstagram.com","tld":"com"},"ip":{"addr":"31.13.72.53","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.instagram.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:6F:7E:43:91:62:AF:8D:70:11:59:6F:20:E1:B3:47:F5:FC:2F:BE","sha256":"86:4E:73:9F:52:12:71:09:0C:A4:68:30:E8:ED:FC:91:B8:9C:35:BA:A6:9F:88:D6:BA:3A:26:1A:ED:50:D2:95"}}},"request":{"raw":"GET /rsrc.php/v3/yv/r/_UbeIRgTpG-.png HTTP/1.1\r\nHost: static.cdninstagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: QTzwFAZUzIeS3eKX9DWQIQ==\r\nexpires: Fri, 07 May 2027 15:42:57 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: aMV0ZZnSqsaMhd7qmi1aW+4G4ixO/jkyypxX0P4TLHfUc/Qafv57FsYWaT094hz2HvMkf6wuYnVF2vjJx2JnTg==\r\ncontent-length: 9801\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=4060, tp=-1, tpl=-1, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 864 x 312, 8-bit colormap, non-interlaced","md5":"413cf0140654cc8792dde297f4359021","sha1":"77205c274ae200abe77f3c2e5c51986a0bf3f8eb","sha256":"149e05bd820a77c3346ed4bda7f6ef27e92a5703ef4115d1656cb8f2aee560bd","sha512":"7a3c269b533429ace97015b29d4467b3c132488eea481b263ad65755af7fa678702df87423802254557815226c39d6add879dbea0bd93aebe855211ab1155c0a","ssdeep":"192:V/bL40SoURa/dn9nDbv3NglI6WYkGYS7UZw+fIYYE:z/9n/v3Ngm6zkGYRe+fIYYE","tlshash":"5e12cfb2782ddf8200c715c5a6b1724a97acb8b905e7a02d1cc7b42473095c2da72ff5","first_seen":"2023-05-21T21:45:24Z","last_seen":"2026-06-10T13:01:51.804051Z","times_seen":31,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":72,"dns":1,"connect":7,"send":0,"wait":9,"receive":5,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdninstagram.com/rsrc.php/v3/yr/r/fDjwyLC88oO.png","fqdn":"static.cdninstagram.com","domain":"cdninstagram.com","tld":"com"},"ip":{"addr":"31.13.72.53","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.instagram.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:6F:7E:43:91:62:AF:8D:70:11:59:6F:20:E1:B3:47:F5:FC:2F:BE","sha256":"86:4E:73:9F:52:12:71:09:0C:A4:68:30:E8:ED:FC:91:B8:9C:35:BA:A6:9F:88:D6:BA:3A:26:1A:ED:50:D2:95"}}},"request":{"raw":"GET /rsrc.php/v3/yr/r/fDjwyLC88oO.png HTTP/1.1\r\nHost: static.cdninstagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\naccess-control-allow-origin: *\r\nlast-modified: Mon, 01 Jan 2001 08:00:00 GMT\r\ncontent-md5: lY7w7qi6h8sQZrOZULZ8tA==\r\nexpires: Fri, 07 May 2027 15:42:57 GMT\r\ncache-control: public,max-age=31536000,immutable\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ntiming-allow-origin: *\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nreporting-endpoints: permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\norigin-agent-cluster: ?1\r\nx-fb-debug: 63YedLjqtESbNEnNoQqWCSoBSI7/rC66QpC9prB/SjKigjRJGS+e1Ala80brJ5X8TBcF5JmyGiIptRZK3eROfw==\r\ncontent-length: 6357\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=27, mss=1380, tbw=15430, tp=-1, tpl=-1, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 564 x 168, 8-bit colormap, non-interlaced","md5":"958ef0eea8ba87cb1066b39950b67cb4","sha1":"9b7946fd2281a2a2176ecdd6e90b15aa7894733e","sha256":"2b2208bc9046a5b7c16261bc83f8b8da79b865e568129036ac65b0979ee10ef9","sha512":"c44c45a7362cd8875b9f3d9c8638083a19b885653fef97eee77ddde117b212f508b0135f9af08553344426e2553fd31bb14d8cbd6210f21cb6bc205248a4e288","ssdeep":"192:05svuVkns0hxiwQ72s1IdphRHawDH+CTe:4svuGs0I2s1I5RHXi","tlshash":"b3d19e0e9fb2bc0283f65588cc4585fa34232a1475e25b3bf523b52b966a1926250e72","first_seen":"2023-05-21T21:45:24Z","last_seen":"2026-06-10T13:01:51.819429Z","times_seen":32,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":118,"dns":1,"connect":23,"send":0,"wait":8,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-uson.vercel.app/script.js","fqdn":"instagram-uson.vercel.app","domain":"instagram-uson.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: instagram-uson.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1092094\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\netag: \"9ab4adbc2cef7f6b70c03ea00101d60f\"\r\nlast-modified: Sat, 25 Apr 2026 00:21:25 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pdxbm-1778168580507-569ab0ea51bd\r\ncontent-length: 612\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":612,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"9ab4adbc2cef7f6b70c03ea00101d60f","sha1":"2d6cbecef1f7e8e861b3ab53b92a4847c73520d3","sha256":"57399ae4ebecc3c82f4bc96bb26fa25314d9ef3a658d6af13468e6086719c1fe","sha512":"f8f3f4e3878f57a01aaaf5bd051593859560512cdee00bc94c09056633c521dd48e839d2352e5b125cda6d39f0550740b5a9fb8cf297a1b478e7a5488586b8e1","ssdeep":"","tlshash":"c3f00c3904fa0d7806bfe1c3b414f594284841276c03f822829cc886ff6ec822399759","first_seen":"2026-02-07T12:31:27.638676Z","last_seen":"2026-05-07T15:43:23.51865Z","times_seen":10,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-05-07","alert":"Detects file containing Telegram Bot API","trigger":"instagram-uson.vercel.app/script.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-07","alert":"Sinkholed","trigger":"instagram-uson.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-07","alert":"Phishing Block","trigger":"instagram-uson.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/axios@1.1.2/dist/axios.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/axios@1.1.2/dist/axios.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 07 May 2026 15:43:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10153\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.1.2\r\nx-jsd-version-type: version\r\netag: W/\"67d4-ae22gWc+WteU0z+fBbiwjqlAwTs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220152-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 1483594\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iv9Byr5XBRbJVAhmz3PQ5QHYXMsfVm7oByNiAaNpL6jwDV5T4IOt8IVrMuCSy%2BtoW8sa70ti%2F%2FPJf2E2se57q6hov3%2BvdHTCs%2BhiwvBD6ILYXmVLm5gvh26EUjbfm8KkQ%2Bo%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f81567c4e2cb4f3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26580,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26541)","md5":"68b395fd3cd02432ec6ce3a4a34332c0","sha1":"69edb681673e5ad794d33f9f05b8b08ea940c13b","sha256":"ffb6e270a7bbb1ea1b797965ae85e35760b38b98744478a4151ddee79a31d215","sha512":"6c7793fb3fa7f2b87d08aad2adbc9f6c8371bbb82c06648794309bde0505d418e68c3cca8682aca7207bd64d022110528c4e4855088c3150600968c5eb4aacbc","ssdeep":"384:mbUb3yPszow2RM6vC7lhDlgnOcsNbscG1FJcI3VDuznyOUCjPnoLnNs9aAjjJFDU:CPMivC7zDCFUbsciFujyR34DkTF","tlshash":"3fc2f9cdba91b06153e73174506f150bf33aa926a44e8490f120ecea7cb924e9763f7d","first_seen":"2023-03-08T08:20:01Z","last_seen":"2026-08-11T00:25:48.160971Z","times_seen":2978,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQN0E-Vjx6bN6USkW3i6UrZnEdvfHOZApBKaw\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-uson.vercel.app/","date":"2026-05-07T15:43:00.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Apr 2026 05:19:27 GMT","end":"Wed, 01 Jul 2026 05:19:26 GMT"},"fingerprint":{"sha1":"BF:D8:14:32:18:86:B9:95:54:75:8D:F9:5F:29:DE:4E:F8:F8:F7:13","sha256":"0E:FA:80:0B:F4:13:81:81:4D:CF:50:35:5A:DD:DB:FA:00:0B:34:B2:2D:5D:28:08:E4:45:1F:2C:EF:D2:21:C2"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQN0E-Vjx6bN6USkW3i6UrZnEdvfHOZApBKaw\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-uson.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 1326\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 May 2026 15:42:57 GMT\r\nexpires: Fri, 07 May 2027 15:42:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 24 Jul 2019 01:03:48 GMT\r\ncontent-type: image/png\r\nage: 3\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"d849ea28c1c6358d59818d4842701cd6","sha1":"4e5dd0c689c78fd419606f76524e28162176d662","sha256":"e3caf7d745057a179881a70cf5525aaf937268ce5570e609741314b33077808f","sha512":"b9fb7a94077b748535a170fcfb8f68f8217c490d0ab05189da50b537e027f25d282a668e565b796f1453fcd0c61709874988c1662ca5133e9cc13d2fdd7ee273","ssdeep":"","tlshash":"e521cbf693a37175d436513e12d60610b7ffee4e0184777ac5c50578b59d5c130503e9","first_seen":"2024-08-29T17:24:45.249356Z","last_seen":"2026-05-07T15:43:23.523369Z","times_seen":13,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":57,"dns":6,"connect":7,"send":0,"wait":9,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}