{"report_id":"dc538c0e-34b5-4d55-9baf-14c7e14b3ddc","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-05-19T18:28:23Z","url":{"schema":"http","addr":"srv-creator.github.io/insta/","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"srv-creator.github.io/insta/","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"title":"Instagram","dom":{"size":2291,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c25d492a1a85c3762b6914117a9868d2","sha1":"9c1f45e41cacb58d79f04ff7cb69ce1803ab0180","sha256":"c29529fee87f494425061af78d79f68a7a05006057fc4d373d061b5fded303cb","sha512":"f283c02b266f0e3f037ba8212081e49fce8ec8a70febd95e0a33bb614f0e0745d77e592d45ef66e8e853c38ed2c6e1c79f1d57274ab38c804e1e91f7cb916e32","ssdeep":"","tlshash":"f441487a04f25a7e8b47d1a0322ab63c9cc3d507bd856885b2de1987dfd2e93900314f","dom_hash":"domhashec24e64396c221b6525f242dd8b25f7d","first_seen":"2026-03-17T12:00:25.231661Z","last_seen":"2026-05-19T18:28:24.327989Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"srv-creator.github.io/insta/","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.110.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T18:28:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"srv-creator.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-03-16T11:58:34.014925Z","last_seen":"2026-05-19T12:35:23.9129Z","alert_count":14,"request_count":7,"received_data":601793,"sent_data":3278,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"srv-creator.github.io/insta/","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T18:28:00.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/ HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69b7d0f5-9d2\"\r\nexpires: Tue, 19 May 2026 18:38:00 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9CDE:12603D:14CA15C:1514ECF:6A0CABB0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 18:28:00 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.683707,VS0,VE142\r\nvary: Accept-Encoding\r\nx-fastly-request-id: c9af10bc71bfaf3cb9a05a59368221e25fb22dba\r\ncontent-length: 774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2514,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"7b043cc53d13e977a1be007f43948187","sha1":"e68969b1c4f4840792e4460f69921a187afe02f2","sha256":"781af4cf8433931a31d0dcb6f230f27233dbce2e0cb36af4fc40b8a2b03b9286","sha512":"ee830d352afc1e1e69799dff3fb16ea1c4ec8fca8c23876962fb530df4f4d1b9dc7c8308fc11d4adb102802f2e00c2d07c85d6477dc645056d35bbd2ebd81085","ssdeep":"","tlshash":"5b517b7a04f29b7e974ad1a0322a763c9cc3d547be852889b1de1956dfd2e93c00318f","first_seen":"2026-03-17T12:00:25.236401Z","last_seen":"2026-05-19T18:28:24.332374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":138,"dns":41,"connect":45,"send":0,"wait":188,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/style.css","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/style.css HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69b7d0f5-95c\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: A0D2:2815EA:1525796:1570566:6A0CABB0\r\naccept-ranges: bytes\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.024885,VS0,VE128\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b4ae7d11711627409e62202ee4cd05e3ddc858c2\r\ncontent-length: 805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"86f06eaf2108d23a942b0f0670dd3628","sha1":"8a70c355799195471236489c7e800341d2be81a6","sha256":"bacc7a502cd02282664f6981ed96c8ded9b5090048ad373dd5d001af31897741","sha512":"93f344c895090be055fd255cfd53de299e497c977756a99d50de3d53ee1abdf889dfc4b19c1d95d65ca6201151e1f1254d6a3bdcfd6c38a0019e552745a98978","ssdeep":"","tlshash":"514103d729640815a9a798507c61db5473cdd4a3480fd9f92ff1645cfe8d3ca24a3b0e","first_seen":"2026-03-17T12:00:25.239289Z","last_seen":"2026-05-19T18:28:24.335505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/images/main.jpg","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/images/main.jpg HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69b7d0f5-2346\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: CCE2:F5BD7:14CAF24:1515BA1:6A0CABAF\r\naccept-ranges: bytes\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.027654,VS0,VE133\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f0d341ca07c89bf206192cd6904e02925b971bf7\r\ncontent-length: 9030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 320x320, components 3","md5":"c78bbeac653197298c90e93dcfd8fe1a","sha1":"b3c8607b550dc03e7344ad74dd6b7cc9e1b3b7aa","sha256":"34cb409dd123c2e0dc92779c5774053ae4e575d504cbfdb0280ad888ba6838f0","sha512":"909606e765f59482066f77b7cadd41c6e3423eadd659e7609360a218ea30c692522b08c58df26a29277074238ef1baf31a7d6e731e1237f9a89eb04448f05cf3","ssdeep":"192:9j+VUpPvdmac24SO8jyZdV0jmlrIW8pKh3klOOx/eAFNkdcB44f71d:96aZwYbgREKhYAaMcC4Bd","tlshash":"7b129e04618b1917ec93977a4ff1bd01b7103d58ced549abf087a691324e9f2dba60cd","first_seen":"2026-03-17T12:00:25.247545Z","last_seen":"2026-05-19T18:28:24.338133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/images/image.webp","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/images/image.webp HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nx-origin-cache: HIT\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69b7d0f5-8a23a\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: BC9C:103A1C:14CA961:15154B1:6A0CABB0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.030837,VS0,VE181\r\nvary: Accept-Encoding\r\nx-fastly-request-id: bf05409390984e46bc60220c7aa94f372270f7f3\r\ncontent-length: 565818\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":565818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2baf7b3a70694cfa91970d06a0b67cd","sha1":"b749fab03831b04fc69edf8ba7b96f9b4f511bc4","sha256":"94a749dbefd9b52ad0abbb703bb95e6670cebe373b98ff263e4ece67217809e6","sha512":"a6a913e990d0ad242972e126f9ef449a53a9b91ec82df8ab31eaeb13eb062878906fab421e3ee8e2f50720ca0071dcfdf615677d193cd68d0e10b5c3fe03ec7c","ssdeep":"12288:yiTisqEgaUhCmAlN/XDvLsTuVb+02iFgxh1rLIaETg7c06eUP:JRUhIL/zvYT4bpxy14jTg7cWUP","tlshash":"abc423c5a7d3dd0ade66903da32494b39025a532e92878c14703a8f0ecad57ad647d3f","first_seen":"2026-01-30T18:58:33.866775Z","last_seen":"2026-07-31T17:47:06.050871Z","times_seen":1818,"resource_available":false,"data":null}},"time_used":6320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":6093,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/images/fb.webp","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/images/fb.webp HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69b7d0f5-9b6\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: C934:1410FE:151ACE3:1565A20:6A0CABB0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.032128,VS0,VE142\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 04ba91d04efb4117de6bcff759d25f9364dde2e9\r\ncontent-length: 2486\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cdcc89b9a976fa207deb141ccfd639a","sha1":"d5d7cee400228b198c3d5549bfec66de04e1bd0e","sha256":"499008bb5d979353236499a2aa7b5e26ed43c771eba589b5c9b55d70f0ee1bcb","sha512":"296e731c5f2ee8d313380b0f943ca175f5c0131025d5161c0d8433484690b17554aa2deb7ec95b3430e2d0739373d1d1e3815a6d3392f323a5398378e1ed29bf","ssdeep":"","tlshash":"545117e801b6a145ec0a294406e3208a3544383bf6c4e96bb625f8f0c04bdb8a2cf33c","first_seen":"2026-03-17T12:00:25.245428Z","last_seen":"2026-05-19T18:28:24.342874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/images/meta.jpg","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/images/meta.jpg HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69b7d0f5-1fad\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 8F62:386A04:14FFF6F:154ACA2:6A0CABB0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.034867,VS0,VE160\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 07f890e2008b5cc3ef2b1b3b8651498f084f2e50\r\ncontent-length: 8109\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 600x600, segment length 16, progressive, precision 8, 350x350, components 3","md5":"5580137237707757c3668d0f40a64b28","sha1":"9ac873733823700304fef3e2948c30811797f747","sha256":"a31ae0db4ff307b819909e3e2186a8cf6ac82e4ef1605eea60d35cc045a6a1b3","sha512":"676cb327bc317963e506e001bee46bc8374b1ee12599c0efbfc316375840ed85916d76c51a1035018636e22fa4a692b4eff9448d5e54d699256566f164c8f16f","ssdeep":"192:qo7QxDeYzkx7FUBzOjW3ED216UJWNRFKa240k4HgFXjgS+QI:LExDeYQ9FUsjWUD21ZEFKw+H6gS1I","tlshash":"26f1af341f5e8b14e37da0bf01d86571d031ae22fe395230162aa94b5cadcfe76c093a","first_seen":"2026-03-17T12:00:25.242548Z","last_seen":"2026-05-19T18:28:24.345592Z","times_seen":2,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"srv-creator.github.io/insta/images/favicon.webp","fqdn":"srv-creator.github.io","domain":"srv-creator.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://srv-creator.github.io/insta/","date":"2026-05-19T18:28:01.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /insta/images/favicon.webp HTTP/1.1\r\nHost: srv-creator.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://srv-creator.github.io/insta/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/webp\r\nlast-modified: Mon, 16 Mar 2026 09:44:21 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69b7d0f5-19be\"\r\nexpires: Tue, 19 May 2026 18:38:01 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A0D2:2815EA:15257F0:15705C1:6A0CABB1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Tue, 19 May 2026 18:28:01 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410021-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1779215281.359987,VS0,VE134\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d7661ac553586aa1681edb0b01357e1a152d4005\r\ncontent-length: 6590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ffa26ac8b25c799bed5b78dbf203bc1","sha1":"1cc42731fb6794bb47908773aa22c879fc5ba73c","sha256":"e9b000e1ff6ad81a8f0aa4801d340b8dc9b55d4eab9ec96fca6fd661ec8e2a66","sha512":"20f062347ee84a1af5a9d36ff13e0f1e053342f6b04097c43c4db8fe24794f4feb7d2a00109df577e418729fac1e27620b8bdaf72683d30214021200b05e9776","ssdeep":"192:Ha71DzXlZxOyFLAVFfIaICT6LAMmrP4p9:HoDzXTlLArfRIC2LDmr4p9","tlshash":"07d18d606f3d051ec0c769853625e164d2b66d414d1c51e33ed1abe3b8b89f2ed39c85","first_seen":"2026-03-17T12:00:25.249884Z","last_seen":"2026-06-03T05:43:09.530785Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1630,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1212,"receive":418,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-19","alert":"Sinkholed","trigger":"srv-creator.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}