{"report_id":"e23ddabf-14fe-4ddd-8445-36d0d18d71c8","version":6,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-03-21T17:22:14Z","url":{"schema":"http","addr":"share-instagram.com","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"share-instagram.com/","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"title":"Instagram","dom":{"size":10402,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"701d5556821e3dfd4dd0eb50218bd3f0","sha1":"bd0aaff42e18b79356e885bad22a77b2c0091686","sha256":"84f423041905c79116dd519d3972c0fbc7da2e6d9db049d7362c986a3709942a","sha512":"9c178db681bc3ddc63d08d291233044a2129baa7e67259c8287b70510066859ea7f42ac8160c93761c26cf02bb772283d74f16dac615b3c692114f53d4673079","ssdeep":"192:8rgJBBuiSjJwj72njlww8fVxtj9VBSaRX/JYjB:8rg6Z8fTtJS6w","tlshash":"8722412151f41137419bc6c5aaa55b2f7ee2ea4bde4b420073ac0bd55febce2ec03159","dom_hash":"domhash4ab90d0830bafa1b89c124d4d7a34bac","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"share-instagram.com","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"216.198.79.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T17:22:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"share-instagram.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"play.google.com","ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2026-03-16T00:19:30.92382Z","alert_count":0,"request_count":1,"received_data":18892,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"developer.apple.com","ip":{"addr":"17.253.39.131","port":443,"asn":6185,"as":"APPLE-AUSTIN","country":"Sweden","country_code":"SE"},"domain_registered":"1987-02-19","domain_rank":27727,"first_seen":"2012-06-25T15:34:34Z","last_seen":"2026-03-18T20:22:54.779398Z","alert_count":0,"request_count":1,"received_data":12225,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]}]},{"fqdn":"share-instagram.com","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-03-21T17:22:14.954059Z","last_seen":"2026-03-21T17:22:14.954059Z","alert_count":16,"request_count":4,"received_data":28596,"sent_data":1791,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-03-18T21:38:40.232287Z","alert_count":0,"request_count":3,"received_data":140990,"sent_data":1474,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cdninstagram.com","ip":{"addr":"31.13.72.53","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2014-05-01","domain_rank":21477,"first_seen":"2017-02-22T19:40:09Z","last_seen":"2026-03-18T18:27:15.772758Z","alert_count":0,"request_count":1,"received_data":3715,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":4,"received_data":405169,"sent_data":2142,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"share-instagram.com/script.js","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d36032a0bddffaa0e906c4eca5f6589e","sha1":"5db0285a525204b6abcd8398f6809411296a14d9","sha256":"7e3c515208f5bb4498da38ef41114dd608552fe6a3dab95207370724d4402f53","sha512":"71f5db75787ba1a677bdce94ddd47e99a1b8a1470e27d3a14d37906d49cdf76463841fa1bddbee273dc344b4d722967be923bd06a59bf859d0a399424cc3b635","ssdeep":"","tlshash":"985165a3317c1a314f8752fa24d647ae3136802b3a86d5543ebd864c2b5af121773af9","size":2672,"data":"","first_seen":"2026-03-21T17:22:19.036616Z","last_seen":"2026-04-17T08:27:26.322921Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share-instagram.com/","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"4ab23fbedee2e6bcfdb68b9d6eeed425","sha1":"c075710fb6befc1e90c9766449b7344f2faac3be","sha256":"3de4fb6a7d9af0bdd2c954b2f745fcf14eebad4904eb3a418188e4aea7b6c6b3","sha512":"2a014573785ee038ac642fbe2ed65ee9042beb6e4fd062d7a05553228b57847442fdf7cecfa10a7e29e35a54dfea40b0dd8b4bcbe89d9ffa12468942bdf5f61c","ssdeep":"","tlshash":"ceb01295d26161431009441c9305a252a803445741120d9841e1619cb3ca832156c28f","size":96,"data":"","first_seen":"2026-03-21T17:22:19.038322Z","last_seen":"2026-04-17T08:27:26.35307Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"share-instagram.com/favicon.ico","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"share-instagram.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:50:37 GMT","end":"Thu, 18 Jun 2026 16:50:36 GMT"},"fingerprint":{"sha1":"0B:7C:2C:1E:C1:85:98:84:A8:0C:94:53:3C:54:FB:0F:FF:20:36:13","sha256":"85:47:F3:11:F8:61:AD:0E:C0:03:21:32:68:A5:9D:85:03:26:F8:F7:AA:60:7B:51:AF:60:C0:7A:66:EB:24:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: share-instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::f6f7s-1774113713926-1feaae2c6afd\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c5b432bf5950c4e542a75ee60e2cfb08","sha1":"d99482093b224bf260ef39d086df218326e9a5f7","sha256":"4d8a0aae1c502a9a6dbf63146a1dcf4ccdf4e8fffc1c9f2a708537eecc2848ed","sha512":"6d519ac77681127d893ffd9217cc0baa411c36f0c304c95ffa55bafec0463ebbcc0dc61786f9126a1673999b917534524ce2436122a3ed657a7cea2467d91c56","ssdeep":"","tlshash":"63a0121e04950c89b2d4150021831139142010126d61e15040cc320510008cf93400c1","first_seen":"2026-03-21T17:22:19.029704Z","last_seen":"2026-03-21T17:22:19.029704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"share-instagram.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/13949/Billabong.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:54.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 10:53:05 GMT","end":"Wed, 03 Jun 2026 11:47:54 GMT"},"fingerprint":{"sha1":"D9:30:54:27:38:62:7E:5D:C3:29:C3:8B:4C:23:16:C6:51:BD:94:E5","sha256":"9C:10:6F:BE:83:DC:82:96:4F:1B:37:70:57:2D:20:C9:EA:DB:71:9C:9B:4A:D1:E4:93:0E:B4:CD:30:3E:E2:47"}}},"request":{"raw":"GET /s/13949/Billabong.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://share-instagram.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:21:54 GMT\r\ncontent-type: font/woff\r\ncontent-length: 69324\r\nlast-modified: Sat, 05 Feb 2022 02:00:37 GMT\r\netag: \"10ecc-5d73bbbc874ca\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18134\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F86u4Af9mtbHg%2BoBlVXuDznnGfvKoqsBnXQf2jo9oZp4uk7nJUmtpZsE7CbPnLDifAiOe5OshjJz3392GT%2BoiMflKi54dyio28jkLsTFDyisLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dfea2b8a9d297c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69324,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69324, version 0.0","md5":"c55d06a4a94199b7d8a5cee452780ba8","sha1":"c576fcab9880b29632ddb63f64beed538ed1e540","sha256":"b1d3e1c4bd7358ba96fd3bcd1cebe790c87987e8a703d59d3ce50e67f3bcaad3","sha512":"55282cb93bf8073aba456a5720a571cf0e33bce7caa9f9a57ee966eef31fb10619e4e6dbd82666bd95320a6c81ef58e95c8c86f297a759071081ef8aeb86afaa","ssdeep":"1536:X9tWX6EAgPTGbSdBUPaD3dmFsum7Gg3cLqfOWJ:X9tbEAgCbSdBh3SVIpcL8J","tlshash":"e363f13e0e768db214036e7461c7d39d1243c1d57e0a6f8c8256fd9ab2b410f7e16e6a","first_seen":"2024-10-20T16:39:34.116762Z","last_seen":"2026-05-09T18:24:33.132021Z","times_seen":40,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share-instagram.com/","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T17:21:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"share-instagram.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:50:37 GMT","end":"Thu, 18 Jun 2026 16:50:36 GMT"},"fingerprint":{"sha1":"0B:7C:2C:1E:C1:85:98:84:A8:0C:94:53:3C:54:FB:0F:FF:20:36:13","sha256":"85:47:F3:11:F8:61:AD:0E:C0:03:21:32:68:A5:9D:85:03:26:F8:F7:AA:60:7B:51:AF:60:C0:7A:66:EB:24:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: share-instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 38604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\netag: W/\"b4813e9a9d56698cfa74e0fc72a2b8e2\"\r\nlast-modified: Sat, 21 Mar 2026 06:38:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5xll7-1774113713328-5e98f3aafe24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10639,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"14c5637073f5631f524c9f54a01a9b8c","sha1":"81a1dad98e4bc028ae0dc2718ace8fe4d01386e1","sha256":"5f7ec394f19957518d48a78402ec33f669a96c2355ee705879a20bb50496981d","sha512":"7b046884ffdc3d19812015b4de7e86d92e4248d540d7afcc068f45577c96b4358c1a22ebfafb897e2e528c4a9fb955db176db958fd0013bf3d84afb7c2e1a788","ssdeep":"192:qtiruiSjJwj72njlwq8fVxsqxfVbe1gRBxqo+6:qtlV8fTsq/e1qP","tlshash":"5622722155f41137418ac6c5aaa55b2f3ed2ea8bda4b420073ec1fd55febce2ec03199","first_seen":"2026-03-21T17:22:19.031499Z","last_seen":"2026-04-17T08:27:26.300286Z","times_seen":4,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":64,"dns":34,"connect":1,"send":0,"wait":12,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"share-instagram.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/billabong","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 10:53:05 GMT","end":"Wed, 03 Jun 2026 11:47:54 GMT"},"fingerprint":{"sha1":"D9:30:54:27:38:62:7E:5D:C3:29:C3:8B:4C:23:16:C6:51:BD:94:E5","sha256":"9C:10:6F:BE:83:DC:82:96:4F:1B:37:70:57:2D:20:C9:EA:DB:71:9C:9B:4A:D1:E4:93:0E:B4:CD:30:3E:E2:47"}}},"request":{"raw":"GET /css/billabong HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 18134\r\nlast-modified: Sat, 21 Mar 2026 12:19:39 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVlsfr6EvCfWHoiC4GP%2F501wCY5SUFPL%2ByoifflkGkHiNPyf8eT3NPdMO%2BQ1l0zIPpOy5vGwXsRovlS00cTVdnK0MaHuqAG%2FdroW%2F5YBXa8h9g%3D%3D\"}]}\r\ncf-ray: 9dfea2b63e8f516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"7df0a9d3f3b6fd8b775826a148c08fc6","sha1":"6802e401a0b72ed6e553a294c7e73510ab452f88","sha256":"3173c612fc8469dccaa7e29337a94bc50c7426c62d7696bd8cc40126d24e029c","sha512":"a0997adca04c19843b81e2b74359b2acf44580006aa423a2ba09828fb0c1f9a854e234bd8e6250c0c0fd36421b4da905266df711987c3d1c781db958ff79a9c2","ssdeep":"","tlshash":"22d012924897659065240c8e735f71190f4f1547680ac52ebe7d3d19cea28a9028172d","first_seen":"2025-05-12T18:28:29.043704Z","last_seen":"2026-06-04T14:13:25.954198Z","times_seen":42,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":42,"dns":35,"connect":8,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cdninstagram.com/rsrc.php/v3/yb/r/GDotLhEyFKt.png","fqdn":"static.cdninstagram.com","domain":"cdninstagram.com","tld":"com"},"ip":{"addr":"31.13.72.53","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.instagram.com","organization":"Meta Platforms, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 29 Dec 2025 00:00:00 GMT","end":"Sun, 29 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:21:E5:03:1A:EA:55:28:0C:AB:EB:21:A8:54:94:18:61:38:B9:DA","sha256":"22:05:39:7B:F4:FD:9D:F3:5C:A3:48:1C:68:94:23:3E:18:D4:8E:98:25:51:FC:73:92:A1:4B:4F:4F:9E:23:2F"}}},"request":{"raw":"GET /rsrc.php/v3/yb/r/GDotLhEyFKt.png HTTP/1.1\r\nHost: static.cdninstagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-bad-checksum: r/GDotLhEyFKt.png\r\nreporting-endpoints: permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src 'self';script-src 'self';style-src 'self';connect-src 'self';font-src *.facebook.com data: *.instagram.com;img-src 'self' data: blob:;media-src 'self' data: blob:;child-src 'self' data: blob:;frame-src 'self' data:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;require-trusted-types-for 'script';\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: MuhIkX6fqeW1cEFILdKC041LhW4LAVOCtAn75fDVNZKkeNIeCCmHayDRrU4pcXJYzyEuXVkt1X8/lZP6RXy/LA==\r\ncontent-length: 0\r\nproxy-status: http_request_error; e_fb_vipaddr=\"AcMfPJvqrXobEFUKABftSvxbYqX4MseKMTFbdmlIXhoU3IHt0Yg_elqhdiNVmM6v1vrYXqmaLYKwpUks1nDpSRYYnWFJvMlMpeGGug\"; e_clientaddr=\"AcPE4ksRqM3Bp5VgzKyGgA2ogKFItLw2vh7Oz01AKCtYIY1Mi4IOu0cPka1EJ_oedKUR3xdX_V0iJ5k1hPD2P2aMLFhMvfElByCkGWzN0K7NUZfsDw\"; e_upip=\"AcNRdL-JPo2v2eXIEkIQvx3dYbwHDPMitWBgSg0m33-8LhuySXkbq9-v-JcMefb-my8cGJgzi5GKSP0Z0b2Jsu6u0JXbq7yiPW2uokHM2ts\"; e_fb_zone=\"AcMPxzsaW-ETpe0YKI8JSFKIdFVDI1y2GkSEzWvdZaabBghjSU4n-lM-RU-mWfm_\"; e_fb_twtaskhandle=\"AcOlE6sw0cYh7sUZu9VOxzD8_on3xvlA3gJLFeXG8f5-yqyp8bCppXN6ooszJwbWX-o9OwkTpB8QvdzodmbpzFjKRLlJ4z5K1URKACfuwGnTcA\"; e_proxy=\"AcNET8ekSpZ49fiqckWIeiDlFK6SE8pd9NBYLJZHUBhrpvlDfnpNyCPx1w9il4d4tmdfoaV1H4hie12C6ftL\", http_request_error; e_fb_vipaddr=\"AcOp9lOaI4ylyqi_TYe7jxvMF7XtPk5Vl_2_YA5pLQDVrmo2QfM6ACZSWSQYSolEUHSuoJU\"; e_clientaddr=\"AcOU5nVCyv1Ml7-r5-1W3dCCo31ifLKlB8lXv_wpcwBnfgictZ4sFUMz85x7cpNGMgAO_xcvvO1ye_q2\"; e_upip=\"AcOwSsDcEHWTJe9bQ46hzJZ4PKqOOdcZAkKSoSBB_OG2Fl5yGcn37uAjmA0qwTMlXU1_rmIaEnxnF2waMAng8Y6RUCEPRPHqkeMx8w\"; e_fb_zone=\"AcP9KYfDwgdUJc-YM0kTkna_5t0rRrmb4uEvwBSWRLE2KMfsx9MvVHY0Hk49TA\"; e_fb_twtaskhandle=\"AcM-3AGqayQm1vK7_CFzyQ9y68EKVil0uqSb3oc1L3spFPT9JT4IZIwwErIA-xn7ffbGO6gu9BF2_4IXY1yXYmRSFizlqLRAyW4\"; e_proxy=\"AcNypGDI2Ujon-AdsmP-oSw0EfofS-EkGQw7P_6NJG5XHggIRGWu9zu33i4Ce90RSRFdvQV5D0iVW2DN\"\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=16, mss=1380, tbw=3356, tp=-1, tpl=-1, uplat=64, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T00:50:52.477296Z","times_seen":17489349,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":254,"dns":121,"connect":22,"send":0,"wait":86,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/s/13949/Billabong.woff","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"104.21.72.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 10:53:05 GMT","end":"Wed, 03 Jun 2026 11:47:54 GMT"},"fingerprint":{"sha1":"D9:30:54:27:38:62:7E:5D:C3:29:C3:8B:4C:23:16:C6:51:BD:94:E5","sha256":"9C:10:6F:BE:83:DC:82:96:4F:1B:37:70:57:2D:20:C9:EA:DB:71:9C:9B:4A:D1:E4:93:0E:B4:CD:30:3E:E2:47"}}},"request":{"raw":"GET /s/13949/Billabong.woff HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://share-instagram.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.cdnfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\ncontent-type: font/woff\r\ncontent-length: 69324\r\nlast-modified: Sat, 05 Feb 2022 02:00:37 GMT\r\netag: \"10ecc-5d73bbbc874ca\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 18134\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db5zAvSimBJzRAv2tUQ5nb3CmkFBS28vAss%2F65mur%2BVpBxSxlJAormZXtVQ7uBGhdBh1uHOwE%2BiWMDGjVUnfGyaotqObe3Y%2BFl9uRWpuHyooDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dfea2b6e98697c6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69324,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 69324, version 0.0","md5":"c55d06a4a94199b7d8a5cee452780ba8","sha1":"c576fcab9880b29632ddb63f64beed538ed1e540","sha256":"b1d3e1c4bd7358ba96fd3bcd1cebe790c87987e8a703d59d3ce50e67f3bcaad3","sha512":"55282cb93bf8073aba456a5720a571cf0e33bce7caa9f9a57ee966eef31fb10619e4e6dbd82666bd95320a6c81ef58e95c8c86f297a759071081ef8aeb86afaa","ssdeep":"1536:X9tWX6EAgPTGbSdBUPaD3dmFsum7Gg3cLqfOWJ:X9tbEAgCbSdBh3SVIpcL8J","tlshash":"e363f13e0e768db214036e7461c7d39d1243c1d57e0a6f8c8256fd9ab2b410f7e16e6a","first_seen":"2024-10-20T16:39:34.116762Z","last_seen":"2026-05-09T18:24:33.132021Z","times_seen":40,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":18,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://share-instagram.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156532\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-26374\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 42982\r\nexpires: Thu, 11 Mar 2027 17:21:53 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAfFP%2B7bi5%2FwnmkJ8E5%2FyIAVy0uaekepR8g7U4TRDufFt5c8IByW16nPaJNer45NNkqVfpn9iYp%2Fu2SPOe%2BNYOrtVmd5hr95qpX599NqMjh1Zwg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9dfea2b6ebec783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156532,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156532, version 773.256","md5":"d465bccb9edf0873f021f66d4b09d89c","sha1":"214f3c71de28c682602aecd39e9ad2bba15f1b0c","sha256":"f4c5a5b297e623bc159679563a4d1eb16e409ca3b57698fbc00fd2c907dadae0","sha512":"35d7523f48386e89b1cad6a47df65d64415ab9c45e6425bb4ab25ac9510f6d2e9de3d7cad79c2491660e885d7a38d3ffa9e93eb50ae045fbd072deaf114e10b8","ssdeep":"1536:HrPC5zUBeCGcReONEpKZZbwEPvdThY0E2eXOtr9pVhw+J3E6gbzlPAzJ+Zn+PMY6:TC5oNnZbwC9Wie+B9pVSeE6dMZnaBi","tlshash":"00e313b58f11a1c781b12217db1a54f8da785eec5e3f968cc5a07786214dd4f93dcca0","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-23T23:05:55.665773Z","times_seen":8981,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/intl/fr_fr/badges/static/images/badges/fr_badge_web_generic.png","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"F8:90:A0:F9:74:3F:20:44:F3:3A:FB:A7:89:DC:37:89:3C:83:4D:03","sha256":"BE:A4:BF:EB:A3:08:0B:22:38:7C:32:95:9D:25:3C:CB:F8:42:AD:54:32:60:4C:1D:43:C5:81:2C:4E:AF:DE:AE"}}},"request":{"raw":"GET /intl/fr_fr/badges/static/images/badges/fr_badge_web_generic.png HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/play_google\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"uxe-owners-acl/play_google\"\r\nreport-to: {\"group\":\"uxe-owners-acl/play_google\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/play_google\"}]}\r\ncontent-length: 18061\r\ndate: Sat, 21 Mar 2026 17:21:54 GMT\r\nexpires: Sat, 21 Mar 2026 17:21:54 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Mon, 05 Sep 2022 07:48:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 646 x 250, 8-bit/color RGBA, non-interlaced","md5":"bbe57399ccb0ab8f7ea5c88eca24dd92","sha1":"db6305d94f1ddfdb38a5f784a1900e30f4000c30","sha256":"57d0e69e021d5d08f1fcacfc44e6dd3c79f5d74627bfbc0f696a88f03fb06c4a","sha512":"a685342660ca261ebd0ea6a28886950c8db8f8035c4a106aa5ded717f275c19f06462da8eea131c170284a6d469a435cef4fef4bdfd752ae27667db905d87970","ssdeep":"384:MxAy1J1FBlwygOY1TUK+QgxXrrIXfiDxNRM8KWzsTd:Mqy1DFMygOaTgHXrrVCd","tlshash":"f482d0df86daec4bdd689f0bb3fe5395be706aec2586181e542a77c1c64ca4c048dd04","first_seen":"2023-05-05T22:56:04Z","last_seen":"2026-07-12T11:35:54.065911Z","times_seen":43,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":107,"dns":23,"connect":7,"send":0,"wait":18,"receive":4,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://share-instagram.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:21:54 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 116672\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-1c7c0\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 731729\r\nexpires: Thu, 11 Mar 2027 17:21:53 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9dotGjGkIjz5AgZxPsQAiPIfaO1eT66gzAf23JCoOmczUy8vwPhekUnmBAU7JqH0FmdyDJ6vpQk%2Fkelq0IUejmXDFV23YwsBSF4WirXM4BSp6A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9dfea2b86d0e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116672,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 116672, version 773.256","md5":"0474ccd4d3ec29857f1e7f8b9c56df8b","sha1":"3e8f0f46b2949dcc309f65fff1372b9a05e8f480","sha256":"b66b3da5ff7b2db79b6cb5a22c3e762e2bf16958a11987e69eeb1980bbbcdfb0","sha512":"2ab61a54ee830519d0aacba1e12f1ad920aedddea8e682cebe51bec78ecd7bbc403343f8e00b45afe804a954a52eb5dcc70983bb01239c36422f8e6f18e0bb5e","ssdeep":"3072:y+cQdfEX4HdgCsxZhk8minCk+uU254aiRt3kLVzLm/j+G01Z:KQdfjIiib+uUe1EK66G4","tlshash":"0fb313cfd4276bdf0a65cf3fc2034e4f3b586c1254b9bcc540b3617826a6862274aa5c","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-23T16:49:22.336082Z","times_seen":3998,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share-instagram.com/style.css","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"share-instagram.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:50:37 GMT","end":"Thu, 18 Jun 2026 16:50:36 GMT"},"fingerprint":{"sha1":"0B:7C:2C:1E:C1:85:98:84:A8:0C:94:53:3C:54:FB:0F:FF:20:36:13","sha256":"85:47:F3:11:F8:61:AD:0E:C0:03:21:32:68:A5:9D:85:03:26:F8:F7:AA:60:7B:51:AF:60:C0:7A:66:EB:24:28"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: share-instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 38604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\netag: W/\"aaac70e3fc7573d7b2777ae2af5c2acb\"\r\nlast-modified: Sat, 21 Mar 2026 06:38:29 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6f7s-1774113713573-8c4bf5872d68\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13361,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"402c6a66e67ebfe3b7017a6df5942430","sha1":"ac752d353a409e32c887ea707e269f845d2e28a6","sha256":"d167d85d9f99df6b65977d6b381431dc120d88cb74323ffc1f71819508e5d375","sha512":"cb246679906c85bce6aa6a773318ac932f52181dc28a4ea0229d4389b8306a5da9ed5490a93c82f544bda3ce9e99c4124e79273f574b8118af97aaecbd12beaf","ssdeep":"384:jSZzPG5KYSnD+CnJz/rVZeuenbTQEb8L6baxWM18I:eZzG1SnD+CnJz/r3eXnbTQEb8L6bdM1t","tlshash":"f05241db67781504790bd8a47d92cb97a33d8443d10ec97c6be4209c8d492ea6a73fdc","first_seen":"2026-03-21T17:22:19.035271Z","last_seen":"2026-04-17T08:27:26.324893Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"share-instagram.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18859\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"656632a7-49ab\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 219990\r\nexpires: Thu, 11 Mar 2027 17:21:53 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kP%2BczB5AikxKvWS2xP%2BouQhtklv1rrM6tzT5ZRe36ijWPcowq2woRpG7eg0CrwokmTcYAFbkZl5Bybm0QzHInq0oMdQ8o8ijvPHluucbB1cGjxM%3D\"}]}\r\ncf-ray: 9dfea2b5e9f71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102526,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"c43cd173eeeba2f72aa6b431d06b8c07","sha1":"427a692f7f39eabb3d5b8510aee2743025daf813","sha256":"c880eb3d25c765d399840aa204fec22b3230310991089f14781f09a35ed80b8a","sha512":"02f6f6422b83104bc1e1b64961d7edda63635528417ed2dd3c6f0527457b8ab4cb43c528d2a70fc61e0f96aec6e6d1a6d2b53ed523e1568b6d78ba41111c1393","ssdeep":"1536:vwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgmLCq:P709gMGFiyPG9ZimLCq","tlshash":"4fa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-01-04T18:36:36Z","last_seen":"2026-07-23T22:57:25.031604Z","times_seen":13371,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share-instagram.com/script.js","fqdn":"share-instagram.com","domain":"share-instagram.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"share-instagram.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 16:50:37 GMT","end":"Thu, 18 Jun 2026 16:50:36 GMT"},"fingerprint":{"sha1":"0B:7C:2C:1E:C1:85:98:84:A8:0C:94:53:3C:54:FB:0F:FF:20:36:13","sha256":"85:47:F3:11:F8:61:AD:0E:C0:03:21:32:68:A5:9D:85:03:26:F8:F7:AA:60:7B:51:AF:60:C0:7A:66:EB:24:28"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: share-instagram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 33106\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\netag: W/\"d36032a0bddffaa0e906c4eca5f6589e\"\r\nlast-modified: Sat, 21 Mar 2026 08:10:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f6f7s-1774113713589-a83d85c177bf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2672,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"d36032a0bddffaa0e906c4eca5f6589e","sha1":"5db0285a525204b6abcd8398f6809411296a14d9","sha256":"7e3c515208f5bb4498da38ef41114dd608552fe6a3dab95207370724d4402f53","sha512":"71f5db75787ba1a677bdce94ddd47e99a1b8a1470e27d3a14d37906d49cdf76463841fa1bddbee273dc344b4d722967be923bd06a59bf859d0a399424cc3b635","ssdeep":"","tlshash":"985165a3317c1a314f8752fa24d647ae3136802b3a86d5543ebd864c2b5af121773af9","first_seen":"2026-03-21T17:22:19.036616Z","last_seen":"2026-04-17T08:27:26.322921Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"share-instagram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-21","alert":"Phishing Block","trigger":"share-instagram.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"developer.apple.com/assets/elements/badges/download-on-the-app-store.svg","fqdn":"developer.apple.com","domain":"apple.com","tld":"com"},"ip":{"addr":"17.253.39.131","port":443,"asn":6185,"as":"APPLE-AUSTIN","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"developer.apple.com","organization":"Apple Inc."},"issuer":{"commonName":"Apple Public EV Server ECC CA 1 - G1","organization":"Apple Inc."},"validity":{"start":"Mon, 02 Feb 2026 18:20:48 GMT","end":"Tue, 28 Apr 2026 19:10:08 GMT"},"fingerprint":{"sha1":"AA:4A:2E:67:E9:C8:B9:F4:C8:39:A3:26:03:5D:7B:1F:DA:15:BD:A3","sha256":"4D:9D:93:D5:A9:C2:0B:39:C0:ED:C4:05:97:AA:F0:23:1A:CE:8C:73:EB:9D:EE:2A:78:2E:ED:67:10:10:9D:19"}}},"request":{"raw":"GET /assets/elements/badges/download-on-the-app-store.svg HTTP/1.1\r\nHost: developer.apple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://share-instagram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apple\r\nDate: Sat, 21 Mar 2026 17:12:24 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 10804\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nLast-Modified: Fri, 30 Jan 2026 23:08:53 GMT\r\nAccept-Ranges: bytes\r\nX-XSS-Protection: 1; mode=block\r\nContent-Security-Policy: default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://*.apple.com http://*.apple.com https://*.mzstatic.com https://*.apple-mapkit.com https://p-events-delivery.akamaized.net http://p-events-delivery.akamaized.net https://apple-events.akamaized.net https://mediaservices.cdn-apple.com http://mediaservices.cdn-apple.com https://wwdr-aws-dev.apple.com https://bricks.cdn-apple.com https://sfss.cdn-apple.com https://sf-saas.cdn-apple.com https://df-webapp-blue-ausw2.apple.com https://df-webapp-green-ausw2.apple.com https://devintserv.us-west-1a.app.apple.com https://devintserv.us-west-1a.app.apple.com/v1/query https://cdn.captionhub.com https://cdnjs.cloudflare.com\r\nCache-Control: max-age=600, public\r\nHost: developer.apple.com\r\nX-Frame-Options: SAMEORIGIN, SAMEORIGIN\r\nrqId: 9d3ae5f51db7c308e2c20ccceecc4207\r\nVia: http/1.1 sesto4-edge-mx-012.ts.apple.com (acdn/293.16398), http/1.1 sesto4-edge-fx-002.ts.apple.com (acdn/293.16398)\r\nX-Cache: hit-fresh, hit-fresh\r\nCDNUUID: 0b0634db-e4bf-459c-a05a-2f72617ce273-4886961062\r\nAge: 570\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apple MapKit JS","description":"Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android.","website":"https://developer.apple.com/maps/web/","common_platform_enumeration":"","icon":"Apple.svg","categories":["Maps"]}],"data":{"size":10804,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2928664fe1fc6aca88583a6f606d60ba","sha1":"2f2fe1cbd0563b3ce3ea79fcdf1549ed244b3993","sha256":"a26fc5b38380272c92e9019a2eb8b45542a66814b3e2b203772db8904b9fb99f","sha512":"7d6f8b7e54a4da3cf81c767b4aa40c3b04bafe35f2dd77b85944de4442f0b1dd1a8eda0175deb4652cf055094acdc0d4b6e38abe51c52a3dfbf887481315b347","ssdeep":"192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U","tlshash":"7122a3b753748ad262d183c52d2e27a83b74a5feb22042c4778f155abf429b35439cd2","first_seen":"2023-05-03T18:10:19Z","last_seen":"2026-07-24T01:47:31.71853Z","times_seen":9186,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":179,"dns":143,"connect":7,"send":0,"wait":7,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://share-instagram.com/","date":"2026-03-21T17:21:53.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://share-instagram.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 17:21:53 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25480\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"656632a7-6388\"\r\nlast-modified: Tue, 28 Nov 2023 18:34:15 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 55995\r\nexpires: Thu, 11 Mar 2027 17:21:53 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sidxJvhUu41JZvGdXaIcQqELFPPTFxT9QkT3crJJvqzLtEgzBGFyrtw7i3CPQKINoNl5BxQvxCdkXG7nF1p2KYDxXC2SRPEDBlTkZyvDIGIGGPA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9dfea2b6ebf8783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25480,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25480, version 773.256","md5":"c002718472e4de08b9d135298ad67aad","sha1":"d3b1723cc7cf1855aacd2d6b8d17ddb2a0fac922","sha256":"3a74c08d486310c03731b458616f0172375fe3780e96165f8a1adc02d1355eaa","sha512":"2a86740aa47c564b19a37ad5b642e33128b12c45bf4bf81de8ce3e7f5524615fb3b017ac280c689311cd8ca3222afd50634ecca3db732083b696d65a34204544","ssdeep":"384:g9freFKNs96snevGfjMOQMjqYxNVjFr2x+gnq1wG6MWnPL2HPIPSg7OaX:g9je+snl7/xFrDgq/ppQPke","tlshash":"b5b2d0e16ec2243ec4c7e7bc95cf693e92c2f9c70b01aefe05ed8d2296932109274516","first_seen":"2024-07-17T22:32:06Z","last_seen":"2026-07-23T22:57:25.015227Z","times_seen":1397,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":27,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}