{"report_id":"ed1917f0-39b0-4ad6-8b34-6caf2a679f2a","version":0,"status":"done","tags":["instagram","meta","social","phishing"],"date":"2026-06-10T13:01:41Z","url":{"schema":"http","addr":"www.instagram-xi-opal.vercel.app/","fqdn":"www.instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/auth/sign-in","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"title":"Instagram","dom":{"size":13437,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13313), with no line terminators","md5":"b7ff808aef14b38866efe06c9093dc66","sha1":"464e2778370ed2a4231d9fc760d550de6033c8ca","sha256":"329d1929eba6b609c0ce7bad75b9670e8151cdb4b07053e95a758019c68ff203","sha512":"7b876aed2bfea22c28714984cfe763eea2f15af7b1a2e1f205eb5253eb7a44219f688cdfea483e07a6ca98183bffdf96c050cb97b7567449936facdcf0a7095d","ssdeep":"384:+TJe1uR7ulaWnF5ckzlCL4kcs2um/YUxQ3Ii+f:+TJe1uR7u8WnF5ckzlk4kcomR3f","tlshash":"4552752aec05de4bec72bd4d513e6e3a40cac83f8a74c87c92dcce1502519be4b5ac85","dom_hash":"domhash0958d43cea7e05531708f3d45046db3e","first_seen":"2026-06-10T13:01:51.767628Z","last_seen":"2026-06-10T13:01:51.767628Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.instagram-xi-opal.vercel.app/","fqdn":"www.instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-15T13:01:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"www.instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"summary":[{"fqdn":"instagram-xi-opal.vercel.app","ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T20:36:46.655114Z","last_seen":"2026-05-17T20:36:46.655114Z","alert_count":245,"request_count":49,"received_data":2285181,"sent_data":25251,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"www.instagram-xi-opal.vercel.app","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-18T02:20:10.913577Z","last_seen":"2026-05-18T02:20:10.913577Z","alert_count":4,"request_count":1,"received_data":0,"sent_data":501,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api-instagram.elcho.dev","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-17T20:36:46.640686Z","last_seen":"2026-05-17T20:36:46.640686Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":508,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/59453ef0-f4b604ac988377f7.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0540d5bb3e5f5ab4c0335ca20e6c08c1","sha1":"d44838c095af3e0e33f30f2d85e3580c1eaf156a","sha256":"12d2517242c4ba8f6ee98e8610b704dce398ed6f237c69cfdb9da39d6b87e4d4","sha512":"9d516ef2e75cd432fd1a3efc170a43bf8af87f73a7df18b1caa866a540f2aa3c25f5d1e20a932d1ee6993152abf3412983985e68c459f1fa2f8c39fe461e2dcc","ssdeep":"","tlshash":"ad218e897298392c7487453493b3b023f77d9dfb38cf94688b9a44a5a69250c91238cf","size":1321,"data":"","first_seen":"2026-05-18T02:20:16.419331Z","last_seen":"2026-06-10T13:01:51.793848Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4918df7f-b859e697d6c60e73.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"17fd67a25485431a624981d54f45c312","sha1":"45a33367d9386883deb798917dc642955f51a642","sha256":"92544543adebe4df251b0c1c947b311255028adf5f74d5b83409618be2e96106","sha512":"b1e5d5ca739af6395084682dc9ace49c73a03b1125688a495e277f0d1b03b3fb57b97b59915cc7a80df45d29448a0e3c7d848d88e8952f089a1801d684836c56","ssdeep":"","tlshash":"16f08b84b683362cbc4680946362b41391a717bb3c8bd09e9f368d545261c4c1232dcf","size":524,"data":"","first_seen":"2026-05-18T02:20:16.371462Z","last_seen":"2026-06-10T13:01:51.781172Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-12T07:55:37.327343Z","times_seen":101152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbad8e8a23f1a7dcc1d13906c36dd64","sha1":"af374c946b843a75d4f6e9e61e34ae70fd73fead","sha256":"ffee128d4c3c6a4bf883d36f099e3943a1b4d0a6dbbc1bba86092a6e8f15434e","sha512":"1f4b5a726cdfc233b6ff81e1d044283cc1dabd042a56c204dd2eaba01db15db94c34f6b3e381ba9092c3e38ec76f24a6fb38f6db4c2c9f08786f5e8e17a717b1","ssdeep":"","tlshash":"6ce06c44f405fce55861981d613e0e2581c8debd979294d8535dcac28551db8474eb8f","size":430,"data":"","first_seen":"2026-05-18T02:20:16.512574Z","last_seen":"2026-06-10T13:01:51.843726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebfc69fac2a8c05c8a322efdbe7939d4","sha1":"0b8e8b73d73efe1b1f7e815759d33ef557b1cae1","sha256":"ecdc6ea279dde71381e5ef7b74950bf17985d40622617907bd91a20a1e8291a3","sha512":"f7757983d29c3b4f282e512bc1e20846973d8f4c85d1f0a4ce1abdf95c459d42580c4dd2f9175ad4cb2e8766adc02aa1cb549d52a9243a9440ecc158d4062258","ssdeep":"","tlshash":"e641bb5eb101e804bcf3dd0b12772f2788dacd36027d9069e94de92a409153e9778c0a","size":2260,"data":"","first_seen":"2026-05-18T02:20:16.518154Z","last_seen":"2026-06-10T13:01:51.844303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d01b48888346806fac427170a9e3591","sha1":"8c9a76fde412084f1e242d8b411a1f95e35a6e7b","sha256":"f069a54afdf0c2b8027032eb65cf31ff15d0017aaff4edacaec70b4851b21fa0","sha512":"9fb5ef11cc131f0cf4bdc442c51161034b7eef2aaa8e7b44c66aefcddea9c6dc4a18c8b15732cadba50e935065f38e4058aaac6d23939a1875ea2b1a91537a5e","ssdeep":"96:LdrMAIYiF37cg1xqzcfxmzGck83/xqzsafEvs:ppgnqzcJmzvqzzJ","tlshash":"bc91bc3e2405dd8becae7d59027e9c3a64cd497b47a5dab886d9cf040a0247e279bdc0","size":4283,"data":"","first_seen":"2026-05-18T02:20:16.5233Z","last_seen":"2026-06-10T13:01:51.844881Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7622c558591d19f69673fac274a16fd1","sha1":"0e649bb2efe4ba9b17cda465c77b9f74356d55c4","sha256":"d87e4c8848aa220313470ae0d35a9bba1aed095471eb63bb7b265be36500fa26","sha512":"1df222b6f0adf538eede8bce1cc235637c2d31c96e7b9cd103193034656b7d7da5d277734d8fee9d0d725192a1f286987f79c59669f2660ed7ed0c9db394d016","ssdeep":"","tlshash":"64f09790ec02de0ecb5b5f39187e1c3860ccc3a947869893e0c8cd1849a7d3509e1fc5","size":505,"data":"","first_seen":"2026-05-18T02:20:16.52948Z","last_seen":"2026-06-10T13:01:51.845556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-12T07:55:37.327343Z","times_seen":101152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbad8e8a23f1a7dcc1d13906c36dd64","sha1":"af374c946b843a75d4f6e9e61e34ae70fd73fead","sha256":"ffee128d4c3c6a4bf883d36f099e3943a1b4d0a6dbbc1bba86092a6e8f15434e","sha512":"1f4b5a726cdfc233b6ff81e1d044283cc1dabd042a56c204dd2eaba01db15db94c34f6b3e381ba9092c3e38ec76f24a6fb38f6db4c2c9f08786f5e8e17a717b1","ssdeep":"","tlshash":"6ce06c44f405fce55861981d613e0e2581c8debd979294d8535dcac28551db8474eb8f","size":430,"data":"","first_seen":"2026-05-18T02:20:16.512574Z","last_seen":"2026-06-10T13:01:51.843726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebfc69fac2a8c05c8a322efdbe7939d4","sha1":"0b8e8b73d73efe1b1f7e815759d33ef557b1cae1","sha256":"ecdc6ea279dde71381e5ef7b74950bf17985d40622617907bd91a20a1e8291a3","sha512":"f7757983d29c3b4f282e512bc1e20846973d8f4c85d1f0a4ce1abdf95c459d42580c4dd2f9175ad4cb2e8766adc02aa1cb549d52a9243a9440ecc158d4062258","ssdeep":"","tlshash":"e641bb5eb101e804bcf3dd0b12772f2788dacd36027d9069e94de92a409153e9778c0a","size":2260,"data":"","first_seen":"2026-05-18T02:20:16.518154Z","last_seen":"2026-06-10T13:01:51.844303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d01b48888346806fac427170a9e3591","sha1":"8c9a76fde412084f1e242d8b411a1f95e35a6e7b","sha256":"f069a54afdf0c2b8027032eb65cf31ff15d0017aaff4edacaec70b4851b21fa0","sha512":"9fb5ef11cc131f0cf4bdc442c51161034b7eef2aaa8e7b44c66aefcddea9c6dc4a18c8b15732cadba50e935065f38e4058aaac6d23939a1875ea2b1a91537a5e","ssdeep":"96:LdrMAIYiF37cg1xqzcfxmzGck83/xqzsafEvs:ppgnqzcJmzvqzzJ","tlshash":"bc91bc3e2405dd8becae7d59027e9c3a64cd497b47a5dab886d9cf040a0247e279bdc0","size":4283,"data":"","first_seen":"2026-05-18T02:20:16.5233Z","last_seen":"2026-06-10T13:01:51.844881Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7622c558591d19f69673fac274a16fd1","sha1":"0e649bb2efe4ba9b17cda465c77b9f74356d55c4","sha256":"d87e4c8848aa220313470ae0d35a9bba1aed095471eb63bb7b265be36500fa26","sha512":"1df222b6f0adf538eede8bce1cc235637c2d31c96e7b9cd103193034656b7d7da5d277734d8fee9d0d725192a1f286987f79c59669f2660ed7ed0c9db394d016","ssdeep":"","tlshash":"64f09790ec02de0ecb5b5f39187e1c3860ccc3a947869893e0c8cd1849a7d3509e1fc5","size":505,"data":"","first_seen":"2026-05-18T02:20:16.52948Z","last_seen":"2026-06-10T13:01:51.845556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/35631907-23fd30f855619750.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"380751fb47d3889a57d514bf9e835df9","sha1":"db2063bb27b5267492dc88e5071b0930e21f2c3f","sha256":"e8709765630e800e2c741e8bd42ee65e08676ba3e80a2ebdedf0322cc8507c10","sha512":"d469de18497856f1eb6745e9a74c0d4062c6143d3d796c5533e0f1aad1bc9cbf784e48267331318862f49e8c0de7eb6b1b946881a6bed9425a70c4baac76c4b0","ssdeep":"","tlshash":"68f099ec7b99b1102f420a71be73040ba9ae44f925ca61e149e3c8c980a1f2c02e364d","size":633,"data":"","first_seen":"2026-05-18T02:20:16.426061Z","last_seen":"2026-06-10T13:01:51.780483Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4902-c01e6ed36904f587.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f8defcd3f50058e7432d8ea71c0e164","sha1":"e01acd95ca6d740c161899c754d19b75661b8933","sha256":"9b874e2355858c53ffb875727e22c1dba7c466c4fad56cdcc058c5468e497732","sha512":"811b042d4edaba2d58d95bc3a851ba42d8ba3328542bacd099e0186c79cf6c1e090804a9d6ebafdeeaedb503dc88d757af90eb221c94dca2b08fb57a450e52d4","ssdeep":"768:DHgQzS52HrENm+UmZ7kjfi06nhPaC5BXWGAKcx:zgcS52HwN5kjfi06nhPaC5BXWMcx","tlshash":"7bb21a923191b4a942f15699e42a5202f3386c2d005da25cf36bdeec7ea441f647bf3b","size":25524,"data":"","first_seen":"2026-05-18T02:20:16.469986Z","last_seen":"2026-06-10T13:01:51.794951Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/05b545e0-116b1ccc4ef1abe4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a09a8a2d3d649a71b609630e5e43a3a","sha1":"d521b62cd865f1447a5d83843b87ed3cc33f6196","sha256":"43dd460b552e8beb172e19c1d0afa7fae4a52945a15c8da57d2add34d56c1606","sha512":"f968b24b223de786fc953a074409dc5336b6e03afaf9e8fcb30d0c1aa60fa81175ca6cede087f210ed8171fbc54fc6108463bb6a504cb9570c4aad776e69d608","ssdeep":"1536:6VjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Izug758kkEiXjOAprX2wd5WjguGOo","tlshash":"f7f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172832,"data":"","first_seen":"2026-05-17T20:36:53.904554Z","last_seen":"2026-06-10T13:01:51.810303Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/auth/layout-12377fd5e379456d.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf68ff47a444bf8e3f29f14f55c5c5b","sha1":"c41de6cb67b5ef16a26847b1fd1e376228de5a34","sha256":"8524534614234508f6886bd960c21ddb3ba8737d4b8bfdcb37f75f5efee4abe6","sha512":"c1004459a99834da882f6d87ddd4c3417ae8ae95a027971f72637a7b432f043dcba4a113c7abb212f823ff76ad530234559e26f2380b0e3c272e3d733ba07cb5","ssdeep":"","tlshash":"2bf0e1483888b6c4176b28d4d27b442e365f2d1e205e14e1f0b58cc928b61bc4253fcc","size":569,"data":"","first_seen":"2026-05-17T20:36:53.919199Z","last_seen":"2026-06-10T13:01:51.797909Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/1b7bc3a5-4f6f3571d180bea4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea11663db85c31395ae3fbe538c07a14","sha1":"3a578df680e75dc3b8bac4535172b354a0566d5f","sha256":"385653104ce4e95745af1384442af9dad80c552bde9f4aba65cbcbb37cd1c400","sha512":"e8847c5ba33e866dee1246b75b0f94ee15944f414045721c41d33b19bf40b47cc5a384fa3c1006356e13f036b2502eb51cc2f14527a401362a360049f859dcba","ssdeep":"","tlshash":"b1218365f69c37dca6838134172b6026536e76fd34ef80b45d9ed5e4956304cc17388e","size":1275,"data":"","first_seen":"2026-05-18T02:20:16.355009Z","last_seen":"2026-06-10T13:01:51.792639Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-12T07:55:37.327343Z","times_seen":101152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbad8e8a23f1a7dcc1d13906c36dd64","sha1":"af374c946b843a75d4f6e9e61e34ae70fd73fead","sha256":"ffee128d4c3c6a4bf883d36f099e3943a1b4d0a6dbbc1bba86092a6e8f15434e","sha512":"1f4b5a726cdfc233b6ff81e1d044283cc1dabd042a56c204dd2eaba01db15db94c34f6b3e381ba9092c3e38ec76f24a6fb38f6db4c2c9f08786f5e8e17a717b1","ssdeep":"","tlshash":"6ce06c44f405fce55861981d613e0e2581c8debd979294d8535dcac28551db8474eb8f","size":430,"data":"","first_seen":"2026-05-18T02:20:16.512574Z","last_seen":"2026-06-10T13:01:51.843726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebfc69fac2a8c05c8a322efdbe7939d4","sha1":"0b8e8b73d73efe1b1f7e815759d33ef557b1cae1","sha256":"ecdc6ea279dde71381e5ef7b74950bf17985d40622617907bd91a20a1e8291a3","sha512":"f7757983d29c3b4f282e512bc1e20846973d8f4c85d1f0a4ce1abdf95c459d42580c4dd2f9175ad4cb2e8766adc02aa1cb549d52a9243a9440ecc158d4062258","ssdeep":"","tlshash":"e641bb5eb101e804bcf3dd0b12772f2788dacd36027d9069e94de92a409153e9778c0a","size":2260,"data":"","first_seen":"2026-05-18T02:20:16.518154Z","last_seen":"2026-06-10T13:01:51.844303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d01b48888346806fac427170a9e3591","sha1":"8c9a76fde412084f1e242d8b411a1f95e35a6e7b","sha256":"f069a54afdf0c2b8027032eb65cf31ff15d0017aaff4edacaec70b4851b21fa0","sha512":"9fb5ef11cc131f0cf4bdc442c51161034b7eef2aaa8e7b44c66aefcddea9c6dc4a18c8b15732cadba50e935065f38e4058aaac6d23939a1875ea2b1a91537a5e","ssdeep":"96:LdrMAIYiF37cg1xqzcfxmzGck83/xqzsafEvs:ppgnqzcJmzvqzzJ","tlshash":"bc91bc3e2405dd8becae7d59027e9c3a64cd497b47a5dab886d9cf040a0247e279bdc0","size":4283,"data":"","first_seen":"2026-05-18T02:20:16.5233Z","last_seen":"2026-06-10T13:01:51.844881Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7622c558591d19f69673fac274a16fd1","sha1":"0e649bb2efe4ba9b17cda465c77b9f74356d55c4","sha256":"d87e4c8848aa220313470ae0d35a9bba1aed095471eb63bb7b265be36500fa26","sha512":"1df222b6f0adf538eede8bce1cc235637c2d31c96e7b9cd103193034656b7d7da5d277734d8fee9d0d725192a1f286987f79c59669f2660ed7ed0c9db394d016","ssdeep":"","tlshash":"64f09790ec02de0ecb5b5f39187e1c3860ccc3a947869893e0c8cd1849a7d3509e1fc5","size":505,"data":"","first_seen":"2026-05-18T02:20:16.52948Z","last_seen":"2026-06-10T13:01:51.845556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-12T07:55:37.327343Z","times_seen":101152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbad8e8a23f1a7dcc1d13906c36dd64","sha1":"af374c946b843a75d4f6e9e61e34ae70fd73fead","sha256":"ffee128d4c3c6a4bf883d36f099e3943a1b4d0a6dbbc1bba86092a6e8f15434e","sha512":"1f4b5a726cdfc233b6ff81e1d044283cc1dabd042a56c204dd2eaba01db15db94c34f6b3e381ba9092c3e38ec76f24a6fb38f6db4c2c9f08786f5e8e17a717b1","ssdeep":"","tlshash":"6ce06c44f405fce55861981d613e0e2581c8debd979294d8535dcac28551db8474eb8f","size":430,"data":"","first_seen":"2026-05-18T02:20:16.512574Z","last_seen":"2026-06-10T13:01:51.843726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebfc69fac2a8c05c8a322efdbe7939d4","sha1":"0b8e8b73d73efe1b1f7e815759d33ef557b1cae1","sha256":"ecdc6ea279dde71381e5ef7b74950bf17985d40622617907bd91a20a1e8291a3","sha512":"f7757983d29c3b4f282e512bc1e20846973d8f4c85d1f0a4ce1abdf95c459d42580c4dd2f9175ad4cb2e8766adc02aa1cb549d52a9243a9440ecc158d4062258","ssdeep":"","tlshash":"e641bb5eb101e804bcf3dd0b12772f2788dacd36027d9069e94de92a409153e9778c0a","size":2260,"data":"","first_seen":"2026-05-18T02:20:16.518154Z","last_seen":"2026-06-10T13:01:51.844303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d01b48888346806fac427170a9e3591","sha1":"8c9a76fde412084f1e242d8b411a1f95e35a6e7b","sha256":"f069a54afdf0c2b8027032eb65cf31ff15d0017aaff4edacaec70b4851b21fa0","sha512":"9fb5ef11cc131f0cf4bdc442c51161034b7eef2aaa8e7b44c66aefcddea9c6dc4a18c8b15732cadba50e935065f38e4058aaac6d23939a1875ea2b1a91537a5e","ssdeep":"96:LdrMAIYiF37cg1xqzcfxmzGck83/xqzsafEvs:ppgnqzcJmzvqzzJ","tlshash":"bc91bc3e2405dd8becae7d59027e9c3a64cd497b47a5dab886d9cf040a0247e279bdc0","size":4283,"data":"","first_seen":"2026-05-18T02:20:16.5233Z","last_seen":"2026-06-10T13:01:51.844881Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7622c558591d19f69673fac274a16fd1","sha1":"0e649bb2efe4ba9b17cda465c77b9f74356d55c4","sha256":"d87e4c8848aa220313470ae0d35a9bba1aed095471eb63bb7b265be36500fa26","sha512":"1df222b6f0adf538eede8bce1cc235637c2d31c96e7b9cd103193034656b7d7da5d277734d8fee9d0d725192a1f286987f79c59669f2660ed7ed0c9db394d016","ssdeep":"","tlshash":"64f09790ec02de0ecb5b5f39187e1c3860ccc3a947869893e0c8cd1849a7d3509e1fc5","size":505,"data":"","first_seen":"2026-05-18T02:20:16.52948Z","last_seen":"2026-06-10T13:01:51.845556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/auth/sign-in/page-bd80816950ffec01.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe93e3e89661a21491e6e7bc66594b9","sha1":"471556485d864a9a1f6eaa0cfbc9e34108a39047","sha256":"c723b1e87115671e6a58e61e6706bf94a92b429634ebca62b406d26aff02258a","sha512":"c200daf0fc2be04368c6dad8a93f285f776a5832471fbf6c927928f1b3747a0058fdbf95268b4165030426eae4154928c28d554b65c807a8ceb5c18abd4c2945","ssdeep":"192:SJbXO33cHENLjZYZtLyWF7/rVsFIkQZ9X217uz5SI:MbXYckhZI57/rVnkQZ9Xs7uz5SI","tlshash":"8cf1fa75a057fcd4be3638c8b72f940d7d6b4e1ce9526454bab8d807787864836227c8","size":7919,"data":"","first_seen":"2026-05-17T20:36:53.926005Z","last_seen":"2026-06-10T13:01:51.818183Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-12T07:55:37.327343Z","times_seen":101152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dbad8e8a23f1a7dcc1d13906c36dd64","sha1":"af374c946b843a75d4f6e9e61e34ae70fd73fead","sha256":"ffee128d4c3c6a4bf883d36f099e3943a1b4d0a6dbbc1bba86092a6e8f15434e","sha512":"1f4b5a726cdfc233b6ff81e1d044283cc1dabd042a56c204dd2eaba01db15db94c34f6b3e381ba9092c3e38ec76f24a6fb38f6db4c2c9f08786f5e8e17a717b1","ssdeep":"","tlshash":"6ce06c44f405fce55861981d613e0e2581c8debd979294d8535dcac28551db8474eb8f","size":430,"data":"","first_seen":"2026-05-18T02:20:16.512574Z","last_seen":"2026-06-10T13:01:51.843726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebfc69fac2a8c05c8a322efdbe7939d4","sha1":"0b8e8b73d73efe1b1f7e815759d33ef557b1cae1","sha256":"ecdc6ea279dde71381e5ef7b74950bf17985d40622617907bd91a20a1e8291a3","sha512":"f7757983d29c3b4f282e512bc1e20846973d8f4c85d1f0a4ce1abdf95c459d42580c4dd2f9175ad4cb2e8766adc02aa1cb549d52a9243a9440ecc158d4062258","ssdeep":"","tlshash":"e641bb5eb101e804bcf3dd0b12772f2788dacd36027d9069e94de92a409153e9778c0a","size":2260,"data":"","first_seen":"2026-05-18T02:20:16.518154Z","last_seen":"2026-06-10T13:01:51.844303Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d01b48888346806fac427170a9e3591","sha1":"8c9a76fde412084f1e242d8b411a1f95e35a6e7b","sha256":"f069a54afdf0c2b8027032eb65cf31ff15d0017aaff4edacaec70b4851b21fa0","sha512":"9fb5ef11cc131f0cf4bdc442c51161034b7eef2aaa8e7b44c66aefcddea9c6dc4a18c8b15732cadba50e935065f38e4058aaac6d23939a1875ea2b1a91537a5e","ssdeep":"96:LdrMAIYiF37cg1xqzcfxmzGck83/xqzsafEvs:ppgnqzcJmzvqzzJ","tlshash":"bc91bc3e2405dd8becae7d59027e9c3a64cd497b47a5dab886d9cf040a0247e279bdc0","size":4283,"data":"","first_seen":"2026-05-18T02:20:16.5233Z","last_seen":"2026-06-10T13:01:51.844881Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7622c558591d19f69673fac274a16fd1","sha1":"0e649bb2efe4ba9b17cda465c77b9f74356d55c4","sha256":"d87e4c8848aa220313470ae0d35a9bba1aed095471eb63bb7b265be36500fa26","sha512":"1df222b6f0adf538eede8bce1cc235637c2d31c96e7b9cd103193034656b7d7da5d277734d8fee9d0d725192a1f286987f79c59669f2660ed7ed0c9db394d016","ssdeep":"","tlshash":"64f09790ec02de0ecb5b5f39187e1c3860ccc3a947869893e0c8cd1849a7d3509e1fc5","size":505,"data":"","first_seen":"2026-05-18T02:20:16.52948Z","last_seen":"2026-06-10T13:01:51.845556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/webpack-c7f6c929827b55f4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a68407ab01fe146ff6e3d085ca917b","sha1":"bf266ab4c32ec876e9de6e744100d2cb29cc89db","sha256":"4ade8c154c600f5ba1ec2624c3664e0cec656885494a0f1196f6367195873b6d","sha512":"5e6fccdcfe795a869285f34e7fe2041217a16e2d4a7570449ecb49626afddba2b135a019d4e28d0f02c20b34c734fa833201eda1d2295e47d0218f3e40da1fb9","ssdeep":"96:+4XCyoEcEpqwRRLSz0+1MMVyVVQFeVQh892rWgq1HlmeLBZoYP6pZA:+4XE8pDRpsyVNShKgqZViYyLA","tlshash":"0da1a5ae7169f5b42be350e0543f9055f13f2876245dd0a0e609d8f9bd34eac8232fa5","size":4929,"data":"","first_seen":"2026-05-17T20:36:53.911193Z","last_seen":"2026-06-10T13:01:51.805782Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/842892ce-5bb3659d6a26dc50.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdf6faf7eecfd887d504732bfead1526","sha1":"8e06c2d844056a05113f02d83970812d8487bdff","sha256":"13d8010c1fae22ea3c2ea1ea164ba08911fdb125e9f109a961a16dd93c9e3520","sha512":"24b4ec621ce58abac33ea415a83f92de42a1da9b361d1fc99e660257ebcf034ca7ffd7a9c8ded6c3470c93c16ca707771c20b22e5f72a0dceba6ea72947a2983","ssdeep":"","tlshash":"6a21c0e6282d334ca48576ae437edcc2039a85e230874cb08fff96a87047ad8f577558","size":1368,"data":"","first_seen":"2026-05-18T02:20:16.30588Z","last_seen":"2026-06-10T13:01:51.779103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/43abe07a-2537e4c1f89526e6.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecaf581b37fadee034fb06c21bc3c286","sha1":"ad5ea50a31bc95d32b99bddb5d2e6e46bb488bc4","sha256":"a95b6b28d2bd05b865dcaa74d2ada41fc9cb742261d87b31ff4733a85bcf74a1","sha512":"ad6767e16023de289af8bd35dc124e159f42d2f27e7308c4b855303e213a81690c1fbefba61068cf2d439ae47a3aae3a2a05e5127b88f1fb35e700db9c55d1b8","ssdeep":"","tlshash":"37715268a24867bc9d9542f0497298b43a4e1aee74d1e37dc7d1c2a0f1a25fcc176c8e","size":3723,"data":"","first_seen":"2026-05-18T02:20:16.396767Z","last_seen":"2026-06-10T13:01:51.782277Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/(site)/(home)/page-1981393765e43639.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcbd2a3cc8239393ac99fb928275e41","sha1":"3bf3619d5a906c5f11b4594b184499316a8b259a","sha256":"c35682143aa5b17d1135248110c32bb13dd81343f7ce3b38ab3481e9a5f5d140","sha512":"4499306dd75e10c29df4e5b574ecb30fa0889340490619afde32dab939aa189fc83e406af858cc0bf41ba8ffd270a838e3d86c4c62ad134759d4b4a5b6d17cbe","ssdeep":"192:t5NxiiEgTY8EgVS+O0ZmvyftJfgpomPWo+vXP5e7NjzWVW7jWsTVRgePqEqjz6:tzQbejf3G+vXP5EW4TVRmEqa","tlshash":"22426540e45bf6e4ad3958c9e43fd40d76af2648c60c4870bcb5286a29696f83607fde","size":13187,"data":"","first_seen":"2026-05-18T02:20:16.475768Z","last_seen":"2026-06-10T13:01:51.835796Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4976-e59e396816a5e13c.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cdeeba724d202db2edf28eaf4ec7a76","sha1":"6e63666c9abca54ca6f1a6468a83029207e1ce6e","sha256":"7b6b3d45295bd84eba106dc35b87aa2d3c6066b2c890476ee85b8d440064eb31","sha512":"ed4fff32832416064e626fd0b1d6ba88b44dca8d7e4510811f7f76d260cc7c934d49e926844963bab2c3386dcca943d1cdd32f01c346041efec53573401d260c","ssdeep":"384:QoHvb/AdGgn53oGjTlLwSdZ2EpB0nIU7ZHmKDwwcGWx:QQOv5B3lLL8U6I4ZHr1cL","tlshash":"f992e8ba71d2f8a243eb40a0443b1006f27a5c7e245e6248f7f4ddd6f57086d91a3f2a","size":20453,"data":"","first_seen":"2026-05-18T02:20:16.488156Z","last_seen":"2026-06-10T13:01:51.7711Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/b8bc3934-834285d279f4349b.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e21980c8854ce0dac4bca340f1fbf8c9","sha1":"956b62d03fcdad77fff7148c90f75df942ae58fd","sha256":"29320cecfdbeb749c54c09eab24d0165b1251608bfeb72ce407fa3f3f8c9b558","sha512":"6307abf9f49380a3f585faa3f4dec923b9798eebd85606ecc1b121c9ee4093db2ee7b54ab98abef952d19afbf0b9ac0268fab2aba8d3b63ad92fd9da656301f4","ssdeep":"","tlshash":"8401fd89f28437507cd511702963f453a2ba395f34cf84dcab6a0081e6a286c9923cdf","size":723,"data":"","first_seen":"2026-05-18T02:20:16.348462Z","last_seen":"2026-06-10T13:01:51.815926Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/2514-957b7bcd9613c718.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df0f6279a758fac103e7b80f691f3d16","sha1":"817ef0fc40eb674aecf8cceb479368ef96508e5d","sha256":"3df0b101a3f4b3ef803aad94b4e7173a1ac6d474c4101e87d89999a23f795038","sha512":"57516687cec2a844f373d2b52f3b30f15b3eaf256d451c871763f017f62386a21fe3ddb3541d73d246628a1d970adf9862b30172ca1a4ce45a7818292307a772","ssdeep":"1536:wEwRGqi0nUji/0dlxc97LgmmNFPq5Eaiv7:fta714FC5Mz","tlshash":"74c3d8ba71d0f8e2079744e5843b400af3791c3b146f74a0a7a5ccd9b5a44eea1a3f5e","size":123509,"data":"","first_seen":"2026-05-17T20:36:53.916855Z","last_seen":"2026-06-10T13:01:51.79063Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/2056-ea8be27dc8820951.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e52977881616ed1c84dc303aa4404aa1","sha1":"755248803520c44a05e5157e3878e1e99f7707a3","sha256":"37c69db864009e518f03c9594c055989460fcb0ce9f8ddbe173dd23b4eed96cf","sha512":"e77632f1b4ba268d29add1509747872e91f7b2b4cad1e2d9c8f0b7472b2e074d27061db85a039945af5a94a50e568379e238495305b726c29fa3b958d0ae120e","ssdeep":"384:nLkLp3JTiBpPQ3RDwKSZBbeMbPouMbUyvW8hCf3bHqkhRqSXOeR+UJKVbh/LvnjJ:CRYpUSKYEMbPPMb7OvT/mgn+VbpvnjUI","tlshash":"35b22ac277e1f0668f7d52da701d4006b39b2e1e383ad488f3606ca67119e46a5daf7c","size":23979,"data":"","first_seen":"2026-05-17T20:36:53.931595Z","last_seen":"2026-06-10T13:01:51.813254Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/19d076a6-ec0b59a4b08fd456.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78175d2050b241610568e5ddb1d6a504","sha1":"c731fafb35cd256b653bc5e0f4154b450c636be0","sha256":"00a5aaa6af9420f02d086fc3d578e8903e4a29944f6f487a37b46c2faea66b8a","sha512":"b6bdc685d24a6f6f0229bdf4d58de777b7bdf4a695f872066166271c31f13f166006ed561da0c17dcc6632274df95b6407e7f95d56ba23c580c2afac2962feb6","ssdeep":"","tlshash":"7f21be64639c293c748f0468d3b3b132e73e256a385e50694e7f896461261d8d33fdea","size":1391,"data":"","first_seen":"2026-05-18T02:20:16.447702Z","last_seen":"2026-06-10T13:01:51.842027Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/7893-07a0d1679c3c0138.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"665dcfffd69a1fef9070676ab7350779","sha1":"5ad9141d16f88ca7a2ba0168d6ac820fdab75750","sha256":"d31fe09538fbe1ffeb60beae2f5f39b4b40ec306833762a36aa0311cbd8a50b9","sha512":"5b950d953e386a771566d91a346923d816cb557810e2376e80879ce200b91430f3b3eda6cb1f73db084fc3eb71c2a175f69eab2e141b458bbf86e2531073e74c","ssdeep":"384:pGMtTuJCB3A39YK/9XCepR8+lkndvVlBsW9ODsTCFaFIFTXXzNqis2U59GFZIm:VTuJCBw3V/92+KBPCFaFIFTXXzS2UY","tlshash":"3ec2c6807befa2550a43f434f42a3d88b62f25beb847a501d5f28ed179b34a40239b75","size":26900,"data":"","first_seen":"2026-05-18T02:20:16.443737Z","last_seen":"2026-06-10T13:01:51.807264Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/86cb00e6-4103d32798d46492.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d47320a424337dbd48de19c4f133ecb","sha1":"5bb06c64feda4adc60b7d74ce403844f52450680","sha256":"4d066bca4043714cc805cf10944d9a82858499dc0c462f5c2373ed8af617a290","sha512":"392d26871acb3d5c3b17ccdb726c964691ec7c5652a22ca5fdf19fe8de7085928689f1a42d34b754f858169256f1c98ccf7fcdff797efd94ff4dd42ffd321261","ssdeep":"","tlshash":"9f11bd89336c223c7987906053a37437d76d15bb388ba0988f3904a8a67144ca2338ce","size":889,"data":"","first_seen":"2026-05-18T02:20:16.385646Z","last_seen":"2026-06-10T13:01:51.839601Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/9901-1889b6ba1f5c1d33.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"557cf6fa84346d197e12eab34fc6033a","sha1":"9be9fab5a06de99ba173e8275221c1d5615dc65a","sha256":"781387760d8a10d9412d31047f57223565943f958130ea5f588f7e0cced4c309","sha512":"860afa5a4e1f4f88080dd5150ffce4bf65a84c232a213fd0fa205e18839cd7b7bd884619d0fd4e5f4d00096ce050d754384321a5e8c409c7d7cb6ab7a10e8133","ssdeep":"768:5eAfHIj2n9ojJb/3/RlHWxsb1//TZW1TeTVcCGrmKAKRab/Gzt8QmV0T:nHIj2ejJbPJlx1/dogG5A2CQmV8","tlshash":"636308e67682f072dbbf5166c03f405af23559a5380e4014f3e5a8aa387058de5b3f7a","size":69578,"data":"","first_seen":"2026-05-17T20:36:53.896887Z","last_seen":"2026-06-10T13:01:51.834984Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/(site)/layout-36fc1165f390a92f.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"878dcec0e87f495b3326a4b867404eb5","sha1":"b1776920906cc21d9bdf4d289f450193f966edee","sha256":"53638ba866499debd658a1f56e6a00a85b41c192dbf71173c1fc08dcef785f52","sha512":"8e7d82d2a41429054ee5fc76d6b3a2e67dc5fe5bf411ba85c84705eb11c45869fe9c8912ee451750e0c1883214bad935c991c61255cc00e969dbadbe1666683a","ssdeep":"192:CVpEVjkrrm5B50WMu4o+47f19rjLNWo+vXP5H7vOwQYWsTV8WKsoljetkzIF7Uc6:CaO0B5WOf19r3+vXP5bbTV632x8","tlshash":"ef62415ca499fee8b93a28cdbb2fd80d755f2518cd0508747dbc685a28984d8370bfc9","size":15663,"data":"","first_seen":"2026-05-18T02:20:16.405304Z","last_seen":"2026-06-10T13:01:51.837543Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/9f8fe0c5-6b96a7cc1f220663.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7546391dcc3f20aa3cfa629f790520e","sha1":"7fdac435d5759014f94306628eb87a192039bc95","sha256":"2140a1964616d4aad588de2c81c1d21c0a692fa60215a951f62745ab4090df14","sha512":"e75f499b7fa41204544154a5fefc5f27c5a8418c3a5092ce3db01503da535d01045e4d6e853e867a95dfe11ed332cd6137c270f19b500e5a4d49bec670491e36","ssdeep":"","tlshash":"4b2120dae65073147d4465700d676a23920d3bbe30ded0e8ab6dc6889fe1d5c782384e","size":1220,"data":"","first_seen":"2026-05-18T02:20:16.362812Z","last_seen":"2026-06-10T13:01:51.797138Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/efedfc4a-8af1b05ac0738f08.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6227a10bfd354b6c0cefd4b013c7d54d","sha1":"2c40b932b92d3b43ba157ec3217d8f10daa79e78","sha256":"29cbf1f681215d98c68dfe467bd2fe5083db479ffd3137e16f74b8d202a94c18","sha512":"49e77b7de18d085afc3b7b6db23b092ea493bcf0f60de3aa011d8fdcd81d4c199e652b9fa2f7dc72fb4d78e3c2b68c69f5e54782a73d7485dd9d9fe75fc6e718","ssdeep":"","tlshash":"7a511124e1442bb09cc153f84b33b6b6755e099e74dae26dceb0c9e0b2412cc92e94df","size":2720,"data":"","first_seen":"2026-05-18T02:20:16.389461Z","last_seen":"2026-06-10T13:01:51.811416Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/7d1cab45-497263f720f93ade.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e178730a1d660da5ea8cd67e17901206","sha1":"23d2fbf02395a23337ae0abe2baa226320cebd29","sha256":"2b90ea101c9b87310fafa0e4b094614a80ecfc2215b576acaef77fde0c64302d","sha512":"b80d98ebcb92780d8fd89906ee3992de8240702a988c4407d65c36bb4ae357170e247e6b2485561bc2e48070494fcba601d7e400165f56949a326edd1ff50707","ssdeep":"","tlshash":"856189dbe760f3bcabc4d39fe73905157a9e45da3b608c30939956056ae2e1d8140c8f","size":3183,"data":"","first_seen":"2026-05-18T02:20:16.39299Z","last_seen":"2026-06-10T13:01:51.769109Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/3877-09e3e2e2223234c3.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cf0ccdd7c59826a215a44e2c83d2aaf","sha1":"a9527892ed3f1d2dee522285e75cf9c1caa8c4b8","sha256":"a7f4ca2ccb6fb2ff5f5deb4f6fc2071bb1d0dce6baec020b991dc745429e5b5a","sha512":"5ff393257b4832088aac086807b77168024a06be1434dc8f917ad6103313e1f0a1da153865ef311612dcc18a62491c86159f06156bd393aff6a6336c81244119","ssdeep":"192:USW9W25RKKpJGXbwczCO2Bjfw158JtY9FIaHDvy7u27fcJRFVYLVu4BdcrM/:UB8qRKK8CeZhqH7fKx4fd/","tlshash":"7e521ab331d0fcda138a84d5987f000df7755d75622ab08467b9c8c9eab0558a1a3fba","size":13966,"data":"","first_seen":"2026-05-17T20:36:53.934426Z","last_seen":"2026-06-10T13:01:51.808321Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/8f130de0-bcabadd0be597757.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f17e38ef702d52843fb08b2bf829a838","sha1":"4e988b9a40be2aa5f655cc49d8199ae284d11bb4","sha256":"4fd31c1142acc7bf20ecb9dc7a26c0b386d08560dffac4393f02971f33fc859f","sha512":"8741b04712ceba97e9aabe718abd1590ed9b45cd7df44f518bfc8cec11086f0d3c6400cddf796e9de96573deaf757d5a15cf2434db974dcb0f002b3f6dd9f61d","ssdeep":"96:diJzRRIcXDC0n68WiFv3JqNs/e0L22Nsi/xqjT:q9mcu0UQJQ0L2CW","tlshash":"0a9143aaf2c4a37c5a8513f08a765071b64e299f30c6826c9aa5c4f174a20dcd267ccf","size":4265,"data":"","first_seen":"2026-05-17T20:36:53.914202Z","last_seen":"2026-06-10T13:01:51.821253Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/eb396988-e59336b3624add94.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b39baf06836c1ec6ea452c4d10098963","sha1":"63a8f8e148f345175f260ea8955e887ce1e2cbdf","sha256":"100c62bc774c6f2daa98793dc8fe56e55852dbb9e45477fe14eff2a2323ddc90","sha512":"ded8aa819de910849698833fe0e67e761b6feb1828ba18d5dec02c5b53994fb0260be98d15d8c0c59dff3723b6575d1fa121f14ed8ce468133ca7f5df42b0c9d","ssdeep":"","tlshash":"61019cdc758977fc395b5d9886b7ec52674e20ba349b60994eabc36800260dcfb93808","size":691,"data":"","first_seen":"2026-05-18T02:20:16.357618Z","last_seen":"2026-06-10T13:01:51.812291Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/layout-a2686096f863cfa2.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e4e4fc28242b29c50f1df6cda40c8c5","sha1":"e8fd7d6380e1b4173b06baf44174677d2b52a99c","sha256":"41737fc91a9cae1ca9d13e97460acd594d225052567c3d1642ca6792be700a86","sha512":"4fefc039ae1c31e301f1ffd2b32ea1fa3d312380465343738e9dac17960700e6b9867bd1cc45a9ca18ea1e768737dbad69428b48599a8b4d090ed3ba4f324e2c","ssdeep":"96:PUKpd1zQakdWAboMf/ylHctcp5w5Wo+vXP5rckvPyfMz1dTrNT6:PUKpd1LkdWAboMM5w5Wo+vXP5rRnY0dI","tlshash":"0da1619c3686f4148eaa28daf83f052973ee4c64601d0c7576b018e77c69e8c6277e8d","size":4818,"data":"","first_seen":"2026-05-17T20:36:53.937834Z","last_seen":"2026-06-10T13:01:51.772681Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/main-app-90605d411721105f.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb4002c969a07c7a8e656526e4d6dcf3","sha1":"60ed5136f4aa0998b75b613308876d9059a0a189","sha256":"8981804d34ab006060833b88acb9b9bcc6a44ce89349254d082045caedb52377","sha512":"21d632b67079ce200bff1f391c007d601bd07e8e4a449db044b82c4b8454ca736418668bffb82d8df5e45b710cab1b53bff3e18adee22b03fe4f16f94b8b0d4f","ssdeep":"","tlshash":"87f0a799270db02f2813ae60fed79c2e285e81213c575d506614edb12c3376cc3f1c29","size":465,"data":"","first_seen":"2026-05-17T20:36:53.894477Z","last_seen":"2026-06-10T13:01:51.838879Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/7d1cab45-497263f720f93ade.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.953Z","timestamp":1781096478953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/7d1cab45-497263f720f93ade.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7d1cab45-497263f720f93ade.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"e178730a1d660da5ea8cd67e17901206\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/7d1cab45-497263f720f93ade.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478961-e56684ead142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3183,"size_decoded":2241,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3183), with no line terminators","md5":"e178730a1d660da5ea8cd67e17901206","sha1":"23d2fbf02395a23337ae0abe2baa226320cebd29","sha256":"2b90ea101c9b87310fafa0e4b094614a80ecfc2215b576acaef77fde0c64302d","sha512":"b80d98ebcb92780d8fd89906ee3992de8240702a988c4407d65c36bb4ae357170e247e6b2485561bc2e48070494fcba601d7e400165f56949a326edd1ff50707","ssdeep":"","tlshash":"856189dbe760f3bcabc4d39fe73905157a9e45da3b608c30939956056ae2e1d8140c8f","first_seen":"2026-05-18T02:20:16.39299Z","last_seen":"2026-06-10T13:01:51.769109Z","times_seen":4,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4976-e59e396816a5e13c.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.966Z","timestamp":1781096478966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/4976-e59e396816a5e13c.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4976-e59e396816a5e13c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"2cdeeba724d202db2edf28eaf4ec7a76\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/4976-e59e396816a5e13c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478970-ceaa84450b0f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20453,"size_decoded":7769,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20453), with no line terminators","md5":"2cdeeba724d202db2edf28eaf4ec7a76","sha1":"6e63666c9abca54ca6f1a6468a83029207e1ce6e","sha256":"7b6b3d45295bd84eba106dc35b87aa2d3c6066b2c890476ee85b8d440064eb31","sha512":"ed4fff32832416064e626fd0b1d6ba88b44dca8d7e4510811f7f76d260cc7c934d49e926844963bab2c3386dcca943d1cdd32f01c346041efec53573401d260c","ssdeep":"384:QoHvb/AdGgn53oGjTlLwSdZ2EpB0nIU7ZHmKDwwcGWx:QQOv5B3lLL8U6I4ZHr1cL","tlshash":"f992e8ba71d2f8a243eb40a0443b1006f27a5c7e245e6248f7f4ddd6f57086d91a3f2a","first_seen":"2026-05-18T02:20:16.488156Z","last_seen":"2026-06-10T13:01:51.7711Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/layout-a2686096f863cfa2.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.970Z","timestamp":1781096478970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-a2686096f863cfa2.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019298\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-a2686096f863cfa2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"1e4e4fc28242b29c50f1df6cda40c8c5\"\r\nlast-modified: Fri, 29 May 2026 17:53:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/layout-a2686096f863cfa2.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478974-c3f018532e03\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4818,"size_decoded":2597,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4776), with no line terminators","md5":"1e4e4fc28242b29c50f1df6cda40c8c5","sha1":"e8fd7d6380e1b4173b06baf44174677d2b52a99c","sha256":"41737fc91a9cae1ca9d13e97460acd594d225052567c3d1642ca6792be700a86","sha512":"4fefc039ae1c31e301f1ffd2b32ea1fa3d312380465343738e9dac17960700e6b9867bd1cc45a9ca18ea1e768737dbad69428b48599a8b4d090ed3ba4f324e2c","ssdeep":"96:PUKpd1zQakdWAboMf/ylHctcp5w5Wo+vXP5rckvPyfMz1dTrNT6:PUKpd1LkdWAboMM5w5Wo+vXP5rRnY0dI","tlshash":"0da1619c3686f4148eaa28daf83f052973ee4c64601d0c7576b018e77c69e8c6277e8d","first_seen":"2026-05-17T20:36:53.937834Z","last_seen":"2026-06-10T13:01:51.772681Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/auth/sign-in?_rsc=1ui7a","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.456Z","timestamp":1781096479456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /auth/sign-in?_rsc=1ui7a HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22(site)%22%2C%7B%22children%22%3A%5B%22(home)%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2C%22%2F%22%2C%22refresh%22%5D%7D%5D%7D%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1465736\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"ce83698094227a8c36829b9a58184aee\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /auth/sign-in.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4rwv2-1781096479460-fda3cbc4e3e0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3853,"size_decoded":1957,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (2935)","md5":"249e0a73f7387981641aa9e8fead8fd6","sha1":"6c8fa530d513196e1ee84775ec3ef467fa6877cc","sha256":"9b78d752206eb9eda619c214244fdbaf13b709496a8a4402ecae267f84003e32","sha512":"6afd50963d1404d4d715c2a21f3d9c3d674404fa1c669c483153f1790afd07b631b8ea1da6d52b35c7ffcaa6f9c5d47dd9e0c15e2796693790ccf5ef4e7f4d69","ssdeep":"","tlshash":"7e81ae364605a97ebfbb82d4412fc70aa19d497723200cf5c6ee5e2c036523a6bcf2d1","first_seen":"2026-05-18T02:20:16.360289Z","last_seen":"2026-06-10T13:01:51.774186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/css/6e796379520e4f50.css","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.686Z","timestamp":1781096479686,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/css/6e796379520e4f50.css HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015612\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"6e796379520e4f50.css\"\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"d5d0215c3dc27a3727628af2412028f5\"\r\nlast-modified: Fri, 29 May 2026 18:54:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/6e796379520e4f50.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096479690-3dab34d7aa66\r\ncontent-length: 112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":112,"size_decoded":731,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"d5d0215c3dc27a3727628af2412028f5","sha1":"afe16e1da0bf1e134b209e8c646e53cf3d8b4ee7","sha256":"6b694e7c66ee853a56a19727a9c6ca4ac5591001fe836112c3b9abc4561646f2","sha512":"b8bb05755e1837bea7af38d631585203c8352049a60f851eb88d90ba79c053b516e7ea48f7df9eeda47edfab1476b76c60e98ca0bcec3655f5305e1b5d501c87","ssdeep":"","tlshash":"24b092223626f329ee77d41258e5166241598284d15a59ae49a38f0e0ba94361fa388a","first_seen":"2026-05-17T20:36:53.929585Z","last_seen":"2026-06-10T13:01:51.775821Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.instagram-xi-opal.vercel.app/","fqdn":"www.instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T13:01:18.369Z","timestamp":1781096478369,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"www.instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"www.instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/css/839db34ac1517776.css","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.918Z","timestamp":1781096478918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/css/839db34ac1517776.css HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"839db34ac1517776.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"cce26d42215def530e95daf0e225dd25\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/839db34ac1517776.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glms8-1781096478934-345da17cf32b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1817,"size_decoded":1310,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1817), with no line terminators","md5":"cce26d42215def530e95daf0e225dd25","sha1":"f65b5d4fbe742c2bd01252cc24277436d9dfda71","sha256":"4b1afeeffa76ef814466ef8884d45468f8f39ed46bc4f623682093196d8fe06e","sha512":"267e02951855e49cb3cbbf9a5847736b75cffc72480423ccfa2ce06536f695cc2329990de1fb2577c142ab3567881bf5af3d00fcab1f124c0257559dda9b8b0a","ssdeep":"","tlshash":"3c311e20005d3334a46a8f2b3aaa6fa35356f610d972011cb970c72c8d87d9f52716fc","first_seen":"2026-05-17T20:36:53.891874Z","last_seen":"2026-06-10T13:01:51.778417Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/842892ce-5bb3659d6a26dc50.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.938Z","timestamp":1781096478938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/842892ce-5bb3659d6a26dc50.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1521118\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"842892ce-5bb3659d6a26dc50.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"cdf6faf7eecfd887d504732bfead1526\"\r\nlast-modified: Sat, 23 May 2026 22:29:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/842892ce-5bb3659d6a26dc50.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096478942-e22bd057b0ab\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1368,"size_decoded":1162,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1368), with no line terminators","md5":"cdf6faf7eecfd887d504732bfead1526","sha1":"8e06c2d844056a05113f02d83970812d8487bdff","sha256":"13d8010c1fae22ea3c2ea1ea164ba08911fdb125e9f109a961a16dd93c9e3520","sha512":"24b4ec621ce58abac33ea415a83f92de42a1da9b361d1fc99e660257ebcf034ca7ffd7a9c8ded6c3470c93c16ca707771c20b22e5f72a0dceba6ea72947a2983","ssdeep":"","tlshash":"6a21c0e6282d334ca48576ae437edcc2039a85e230874cb08fff96a87047ad8f577558","first_seen":"2026-05-18T02:20:16.30588Z","last_seen":"2026-06-10T13:01:51.779103Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/35631907-23fd30f855619750.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.956Z","timestamp":1781096478956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/35631907-23fd30f855619750.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"35631907-23fd30f855619750.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"380751fb47d3889a57d514bf9e835df9\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/35631907-23fd30f855619750.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p8ctn-1781096478960-677faebc26ee\r\ncontent-length: 633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":633,"size_decoded":1285,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (633), with no line terminators","md5":"380751fb47d3889a57d514bf9e835df9","sha1":"db2063bb27b5267492dc88e5071b0930e21f2c3f","sha256":"e8709765630e800e2c741e8bd42ee65e08676ba3e80a2ebdedf0322cc8507c10","sha512":"d469de18497856f1eb6745e9a74c0d4062c6143d3d796c5533e0f1aad1bc9cbf784e48267331318862f49e8c0de7eb6b1b946881a6bed9425a70c4baac76c4b0","ssdeep":"","tlshash":"68f099ec7b99b1102f420a71be73040ba9ae44f925ca61e149e3c8c980a1f2c02e364d","first_seen":"2026-05-18T02:20:16.426061Z","last_seen":"2026-06-10T13:01:51.780483Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4918df7f-b859e697d6c60e73.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.959Z","timestamp":1781096478959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/4918df7f-b859e697d6c60e73.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4918df7f-b859e697d6c60e73.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"17fd67a25485431a624981d54f45c312\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/4918df7f-b859e697d6c60e73.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478965-3265363b6c5f\r\ncontent-length: 524\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524,"size_decoded":1176,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (524), with no line terminators","md5":"17fd67a25485431a624981d54f45c312","sha1":"45a33367d9386883deb798917dc642955f51a642","sha256":"92544543adebe4df251b0c1c947b311255028adf5f74d5b83409618be2e96106","sha512":"b1e5d5ca739af6395084682dc9ace49c73a03b1125688a495e277f0d1b03b3fb57b97b59915cc7a80df45d29448a0e3c7d848d88e8952f089a1801d684836c56","ssdeep":"","tlshash":"16f08b84b683362cbc4680946362b41391a717bb3c8bd09e9f368d545261c4c1232dcf","first_seen":"2026-05-18T02:20:16.371462Z","last_seen":"2026-06-10T13:01:51.781172Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/43abe07a-2537e4c1f89526e6.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.961Z","timestamp":1781096478961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/43abe07a-2537e4c1f89526e6.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"43abe07a-2537e4c1f89526e6.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"ecaf581b37fadee034fb06c21bc3c286\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/43abe07a-2537e4c1f89526e6.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478965-926d351842d6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3723,"size_decoded":2375,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3723), with no line terminators","md5":"ecaf581b37fadee034fb06c21bc3c286","sha1":"ad5ea50a31bc95d32b99bddb5d2e6e46bb488bc4","sha256":"a95b6b28d2bd05b865dcaa74d2ada41fc9cb742261d87b31ff4733a85bcf74a1","sha512":"ad6767e16023de289af8bd35dc124e159f42d2f27e7308c4b855303e213a81690c1fbefba61068cf2d439ae47a3aae3a2a05e5127b88f1fb35e700db9c55d1b8","ssdeep":"","tlshash":"37715268a24867bc9d9542f0497298b43a4e1aee74d1e37dc7d1c2a0f1a25fcc176c8e","first_seen":"2026-05-18T02:20:16.396767Z","last_seen":"2026-06-10T13:01:51.782277Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/favicon.ico","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.080Z","timestamp":1781096479080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1556828\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"7f80840b15e7050d9cfc473abdfe06a8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqvjp-1781096479084-74000a215bb3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213356,"size_decoded":213914,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"9e74cdc0ea747f28554eac8825797029","sha1":"b070c16dc0c24dc9c0ea952a18ba4aceff23a981","sha256":"c8afeb3560346a87f147986a097f890b473b79f6e492fd4a21002bdd32449ff3","sha512":"658786b0991b40e4e0fa1b68f675ceddde3c5ff5511d8a66de056df67634050d5ee47a555525d7f9bd2f38417f2d3acf1d0833569864674c9423cda5463aec8d","ssdeep":"6144:JLZbLFmuKVzOLFCZn2wABukZPBY284dRepPh:tZ/F7OpB2wABuCXldRep5","tlshash":"4a2423c80ca838ff9ab2973e9cd11204f766af559812d4cbbb58f23c37a0a75455f50a","first_seen":"2026-05-17T20:36:53.922462Z","last_seen":"2026-06-10T13:01:51.784252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/screenshot.dc008fbf.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:22.759Z","timestamp":1781096482759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/screenshot.dc008fbf.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015611\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"screenshot.dc008fbf.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:22 GMT\r\netag: \"489d893405d48fa9b0547d2ffc80d8e3\"\r\nlast-modified: Fri, 29 May 2026 18:54:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/screenshot.dc008fbf.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096482764-154193bd4a83\r\ncontent-length: 52369\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":52369,"size_decoded":52984,"mime_type":"image/png","magic":"PNG image data, 250 x 541, 8-bit/color RGBA, non-interlaced","md5":"489d893405d48fa9b0547d2ffc80d8e3","sha1":"35999d0ae8964cc536fb0f1bcb8a00f49c201503","sha256":"89152c6b5d650050e542912484e0367ffbe7c6080e1b762fafb3c3aa93b91189","sha512":"b7ab1cf248c03149292f5bf5020bb2cc17c450927f242b1c86e7684b5802bab583683d13242957ff0e180ef7b81a4cf4ea1d1f2f24636a94ccd34c7ce8780948","ssdeep":"768:1/xbZvbE31vQeogn1oR/81l5yODTl+Nr94cjhByZLy+/dRZA9lJYT8+YdvgDw4O8:rFu1Pn1K/Evl+NCcjh8dRZa7VHX4qCeM","tlshash":"783301d2f3d05c6fba720a7edb0d51eb2071e37d87092924669cea010eb7924de5c61e","first_seen":"2023-05-02T15:58:04Z","last_seen":"2026-07-18T06:32:07.486569Z","times_seen":641,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/2514-957b7bcd9613c718.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.926Z","timestamp":1781096478926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/2514-957b7bcd9613c718.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2514-957b7bcd9613c718.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"df0f6279a758fac103e7b80f691f3d16\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/2514-957b7bcd9613c718.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096478930-169e5262770d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":123509,"size_decoded":33469,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"df0f6279a758fac103e7b80f691f3d16","sha1":"817ef0fc40eb674aecf8cceb479368ef96508e5d","sha256":"3df0b101a3f4b3ef803aad94b4e7173a1ac6d474c4101e87d89999a23f795038","sha512":"57516687cec2a844f373d2b52f3b30f15b3eaf256d451c871763f017f62386a21fe3ddb3541d73d246628a1d970adf9862b30172ca1a4ce45a7818292307a772","ssdeep":"1536:wEwRGqi0nUji/0dlxc97LgmmNFPq5Eaiv7:fta714FC5Mz","tlshash":"74c3d8ba71d0f8e2079744e5843b400af3791c3b146f74a0a7a5ccd9b5a44eea1a3f5e","first_seen":"2026-05-17T20:36:53.916855Z","last_seen":"2026-06-10T13:01:51.79063Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/1b7bc3a5-4f6f3571d180bea4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.934Z","timestamp":1781096478934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/1b7bc3a5-4f6f3571d180bea4.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1b7bc3a5-4f6f3571d180bea4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"ea11663db85c31395ae3fbe538c07a14\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/1b7bc3a5-4f6f3571d180bea4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478939-d2fcbc72f0bb\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1275,"size_decoded":1215,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1275), with no line terminators","md5":"ea11663db85c31395ae3fbe538c07a14","sha1":"3a578df680e75dc3b8bac4535172b354a0566d5f","sha256":"385653104ce4e95745af1384442af9dad80c552bde9f4aba65cbcbb37cd1c400","sha512":"e8847c5ba33e866dee1246b75b0f94ee15944f414045721c41d33b19bf40b47cc5a384fa3c1006356e13f036b2502eb51cc2f14527a401362a360049f859dcba","ssdeep":"","tlshash":"b1218365f69c37dca6838134172b6026536e76fd34ef80b45d9ed5e4956304cc17388e","first_seen":"2026-05-18T02:20:16.355009Z","last_seen":"2026-06-10T13:01:51.792639Z","times_seen":4,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/59453ef0-f4b604ac988377f7.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.936Z","timestamp":1781096478936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/59453ef0-f4b604ac988377f7.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"59453ef0-f4b604ac988377f7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"0540d5bb3e5f5ab4c0335ca20e6c08c1\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/59453ef0-f4b604ac988377f7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478940-347a4c0d94bc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1321,"size_decoded":1104,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1321), with no line terminators","md5":"0540d5bb3e5f5ab4c0335ca20e6c08c1","sha1":"d44838c095af3e0e33f30f2d85e3580c1eaf156a","sha256":"12d2517242c4ba8f6ee98e8610b704dce398ed6f237c69cfdb9da39d6b87e4d4","sha512":"9d516ef2e75cd432fd1a3efc170a43bf8af87f73a7df18b1caa866a540f2aa3c25f5d1e20a932d1ee6993152abf3412983985e68c459f1fa2f8c39fe461e2dcc","ssdeep":"","tlshash":"ad218e897298392c7487453493b3b023f77d9dfb38cf94688b9a44a5a69250c91238cf","first_seen":"2026-05-18T02:20:16.419331Z","last_seen":"2026-06-10T13:01:51.793848Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/4902-c01e6ed36904f587.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.941Z","timestamp":1781096478941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/4902-c01e6ed36904f587.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4902-c01e6ed36904f587.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"3f8defcd3f50058e7432d8ea71c0e164\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/4902-c01e6ed36904f587.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478946-19ab5378dd28\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25524,"size_decoded":9239,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25522), with no line terminators","md5":"3f8defcd3f50058e7432d8ea71c0e164","sha1":"e01acd95ca6d740c161899c754d19b75661b8933","sha256":"9b874e2355858c53ffb875727e22c1dba7c466c4fad56cdcc058c5468e497732","sha512":"811b042d4edaba2d58d95bc3a851ba42d8ba3328542bacd099e0186c79cf6c1e090804a9d6ebafdeeaedb503dc88d757af90eb221c94dca2b08fb57a450e52d4","ssdeep":"768:DHgQzS52HrENm+UmZ7kjfi06nhPaC5BXWGAKcx:zgcS52HwN5kjfi06nhPaC5BXWMcx","tlshash":"7bb21a923191b4a942f15699e42a5202f3386c2d005da25cf36bdeec7ea441f647bf3b","first_seen":"2026-05-18T02:20:16.469986Z","last_seen":"2026-06-10T13:01:51.794951Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/9f8fe0c5-6b96a7cc1f220663.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.947Z","timestamp":1781096478947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/9f8fe0c5-6b96a7cc1f220663.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9f8fe0c5-6b96a7cc1f220663.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"c7546391dcc3f20aa3cfa629f790520e\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/9f8fe0c5-6b96a7cc1f220663.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478951-3e3b0a879425\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1220,"size_decoded":1137,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1220), with no line terminators","md5":"c7546391dcc3f20aa3cfa629f790520e","sha1":"7fdac435d5759014f94306628eb87a192039bc95","sha256":"2140a1964616d4aad588de2c81c1d21c0a692fa60215a951f62745ab4090df14","sha512":"e75f499b7fa41204544154a5fefc5f27c5a8418c3a5092ce3db01503da535d01045e4d6e853e867a95dfe11ed332cd6137c270f19b500e5a4d49bec670491e36","ssdeep":"","tlshash":"4b2120dae65073147d4465700d676a23920d3bbe30ded0e8ab6dc6889fe1d5c782384e","first_seen":"2026-05-18T02:20:16.362812Z","last_seen":"2026-06-10T13:01:51.797138Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/auth/layout-12377fd5e379456d.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.678Z","timestamp":1781096479678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/app/auth/layout-12377fd5e379456d.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015612\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-12377fd5e379456d.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"6cf68ff47a444bf8e3f29f14f55c5c5b\"\r\nlast-modified: Fri, 29 May 2026 18:54:26 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/auth/layout-12377fd5e379456d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096479683-23505cb51346\r\ncontent-length: 569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":569,"size_decoded":1226,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (569), with no line terminators","md5":"6cf68ff47a444bf8e3f29f14f55c5c5b","sha1":"c41de6cb67b5ef16a26847b1fd1e376228de5a34","sha256":"8524534614234508f6886bd960c21ddb3ba8737d4b8bfdcb37f75f5efee4abe6","sha512":"c1004459a99834da882f6d87ddd4c3417ae8ae95a027971f72637a7b432f043dcba4a113c7abb212f823ff76ad530234559e26f2380b0e3c272e3d733ba07cb5","ssdeep":"","tlshash":"2bf0e1483888b6c4176b28d4d27b442e365f2d1e205e14e1f0b58cc928b61bc4253fcc","first_seen":"2026-05-17T20:36:53.919199Z","last_seen":"2026-06-10T13:01:51.797909Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/screenshot1.62bedc1e.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.706Z","timestamp":1781096479706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/screenshot1.62bedc1e.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015612\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"screenshot1.62bedc1e.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"7fde4dad3b60a5a6f89f81aad821e33a\"\r\nlast-modified: Fri, 29 May 2026 18:54:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/screenshot1.62bedc1e.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096479710-2c86979e2502\r\ncontent-length: 176752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176752,"size_decoded":177370,"mime_type":"image/png","magic":"PNG image data, 250 x 541, 8-bit/color RGBA, non-interlaced","md5":"7fde4dad3b60a5a6f89f81aad821e33a","sha1":"586783872936a8de6fcb8bb99e28b9bf964e84c1","sha256":"5845ba9b16bde454793e65d35fe16eedf485c7c6e485c22c518cb2db64208a2e","sha512":"e08d2416edb017dae28999ece162c339fac7f5d0ec0b20ddab9bd30197db995f874dcfb269d55ed168eee956d2bed05ddd40ecae8efcffe745c1637563d9a037","ssdeep":"3072:XwEvDE9O0tcWr7o8N4NXm8MLRim5s6lRMpWYvDBcosa+r+xy53uob:XwEviO0Wg7oc4ZWNimSI61rBidtxN","tlshash":"fa0413e0ad7bdea869670525dab90d144fd156a3ccecd482f5c939070b73e39b730890","first_seen":"2023-05-02T15:58:04Z","last_seen":"2026-07-18T06:32:07.551388Z","times_seen":648,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/btn2.1cf6c16e.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.785Z","timestamp":1781096479785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/btn2.1cf6c16e.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015611\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"btn2.1cf6c16e.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"413cf0140654cc8792dde297f4359021\"\r\nlast-modified: Fri, 29 May 2026 18:54:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/btn2.1cf6c16e.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmdhb-1781096479789-31cffbbca21e\r\ncontent-length: 9801\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9801,"size_decoded":10403,"mime_type":"image/png","magic":"PNG image data, 864 x 312, 8-bit colormap, non-interlaced","md5":"413cf0140654cc8792dde297f4359021","sha1":"77205c274ae200abe77f3c2e5c51986a0bf3f8eb","sha256":"149e05bd820a77c3346ed4bda7f6ef27e92a5703ef4115d1656cb8f2aee560bd","sha512":"7a3c269b533429ace97015b29d4467b3c132488eea481b263ad65755af7fa678702df87423802254557815226c39d6add879dbea0bd93aebe855211ab1155c0a","ssdeep":"192:V/bL40SoURa/dn9nDbv3NglI6WYkGYS7UZw+fIYYE:z/9n/v3Ngm6zkGYRe+fIYYE","tlshash":"5e12cfb2782ddf8200c715c5a6b1724a97acb8b905e7a02d1cc7b42473095c2da72ff5","first_seen":"2023-05-21T21:45:24Z","last_seen":"2026-06-10T13:01:51.804051Z","times_seen":31,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/463dafcda517f24f-s.p.woff","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.916Z","timestamp":1781096478916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/463dafcda517f24f-s.p.woff HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"463dafcda517f24f-s.p.woff\"\r\ncontent-type: font/woff\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"cbeb6d2d96eaa268b4b5beb0b46d9632\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/463dafcda517f24f-s.p.woff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478920-cdd5f0984b21\r\ncontent-length: 67864\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67864,"size_decoded":68483,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67864, version 0.0","md5":"cbeb6d2d96eaa268b4b5beb0b46d9632","sha1":"fd8c986a8767d59a36e2d194299466720c916ee2","sha256":"e8b65928f551b17e3d67c3f709721b952c39842d14b00701f9232057fde73608","sha512":"0828401dbc56e8a3343958d9b38d64115de040417f108a10d8ccdb0281ac2dd785eeb634c0affc2e255d291970b70c682a22384ae9a4c45208d560b0813b839a","ssdeep":"1536:J/BT12BbemOlLQucYMXTGJ2JwkhNa+62xmFXENn4qD:J/l1abevLlMqUxhNjSXENn7","tlshash":"2463f19f8d54c168dcc8763ee0a65b412f882f03c1dde8e5121d6284278a55b7acf37e","first_seen":"2024-10-03T01:19:04Z","last_seen":"2026-08-11T07:52:02.142181Z","times_seen":1902,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/webpack-c7f6c929827b55f4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.922Z","timestamp":1781096478922,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/webpack-c7f6c929827b55f4.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-c7f6c929827b55f4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"37a68407ab01fe146ff6e3d085ca917b\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-c7f6c929827b55f4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r7h2z-1781096478927-1837f7d8bea1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4929,"size_decoded":3089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4593)","md5":"37a68407ab01fe146ff6e3d085ca917b","sha1":"bf266ab4c32ec876e9de6e744100d2cb29cc89db","sha256":"4ade8c154c600f5ba1ec2624c3664e0cec656885494a0f1196f6367195873b6d","sha512":"5e6fccdcfe795a869285f34e7fe2041217a16e2d4a7570449ecb49626afddba2b135a019d4e28d0f02c20b34c734fa833201eda1d2295e47d0218f3e40da1fb9","ssdeep":"96:+4XCyoEcEpqwRRLSz0+1MMVyVVQFeVQh892rWgq1HlmeLBZoYP6pZA:+4XE8pDRpsyVNShKgqZViYyLA","tlshash":"0da1a5ae7169f5b42be350e0543f9055f13f2876245dd0a0e609d8f9bd34eac8232fa5","first_seen":"2026-05-17T20:36:53.911193Z","last_seen":"2026-06-10T13:01:51.805782Z","times_seen":5,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/7893-07a0d1679c3c0138.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.943Z","timestamp":1781096478943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/7893-07a0d1679c3c0138.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"7893-07a0d1679c3c0138.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"665dcfffd69a1fef9070676ab7350779\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/7893-07a0d1679c3c0138.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478947-96f122fd5465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":26900,"size_decoded":8351,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24548), with no line terminators","md5":"665dcfffd69a1fef9070676ab7350779","sha1":"5ad9141d16f88ca7a2ba0168d6ac820fdab75750","sha256":"d31fe09538fbe1ffeb60beae2f5f39b4b40ec306833762a36aa0311cbd8a50b9","sha512":"5b950d953e386a771566d91a346923d816cb557810e2376e80879ce200b91430f3b3eda6cb1f73db084fc3eb71c2a175f69eab2e141b458bbf86e2531073e74c","ssdeep":"384:pGMtTuJCB3A39YK/9XCepR8+lkndvVlBsW9ODsTCFaFIFTXXzNqis2U59GFZIm:VTuJCBw3V/92+KBPCFaFIFTXXzS2UY","tlshash":"3ec2c6807befa2550a43f434f42a3d88b62f25beb847a501d5f28ed179b34a40239b75","first_seen":"2026-05-18T02:20:16.443737Z","last_seen":"2026-06-10T13:01:51.807264Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/3877-09e3e2e2223234c3.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.965Z","timestamp":1781096478965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/3877-09e3e2e2223234c3.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3877-09e3e2e2223234c3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"4cf0ccdd7c59826a215a44e2c83d2aaf\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/3877-09e3e2e2223234c3.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d9rmz-1781096478969-8180ecb5c97d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13966,"size_decoded":6095,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13966), with no line terminators","md5":"4cf0ccdd7c59826a215a44e2c83d2aaf","sha1":"a9527892ed3f1d2dee522285e75cf9c1caa8c4b8","sha256":"a7f4ca2ccb6fb2ff5f5deb4f6fc2071bb1d0dce6baec020b991dc745429e5b5a","sha512":"5ff393257b4832088aac086807b77168024a06be1434dc8f917ad6103313e1f0a1da153865ef311612dcc18a62491c86159f06156bd393aff6a6336c81244119","ssdeep":"192:USW9W25RKKpJGXbwczCO2Bjfw158JtY9FIaHDvy7u27fcJRFVYLVu4BdcrM/:UB8qRKK8CeZhqH7fKx4fd/","tlshash":"7e521ab331d0fcda138a84d5987f000df7755d75622ab08467b9c8c9eab0558a1a3fba","first_seen":"2026-05-17T20:36:53.934426Z","last_seen":"2026-06-10T13:01:51.808321Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/css/c6d306a62b1dd826.css","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.709Z","timestamp":1781096479709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/css/c6d306a62b1dd826.css HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1015612\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"c6d306a62b1dd826.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"c28a692ee6aa8a64b7b60c28b9540805\"\r\nlast-modified: Fri, 29 May 2026 18:54:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/c6d306a62b1dd826.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p8ctn-1781096479713-cc5cd1022841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5336,"size_decoded":1548,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5336), with no line terminators","md5":"c28a692ee6aa8a64b7b60c28b9540805","sha1":"1a93b28e2741d51fed30af14b6b565cb9c3e1dba","sha256":"842cab27e5e0705ddac9aa7441c275f08a9a35bd9c1aff8f97ad0fd2dd0aed24","sha512":"197bbe7e4e549b84e3ec375c57ef946ec78ad6b61626d9b3aa859c4e47269731eecb6a9e1a7decb936d3b1a80a155e9096a3b7760d2c7c10476e1243d153d00b","ssdeep":"96:XtYhY2oY5Y8SoYmYdOuYd7jYd7eyYd7HYd7wYd7BCYd7/XYd7DYd7NLYd72yYd7d:Xt6DoITSo7WOuW/W9WTWcWlCWDWPW9Wo","tlshash":"9bb146335322b1e75076fd353a18a5377214c90ebee0f1acf9ee909bb5ca6a15478213","first_seen":"2026-05-17T20:36:53.908737Z","last_seen":"2026-06-10T13:01:51.808901Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/favicon.ico","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.859Z","timestamp":1781096479859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1556828\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"7f80840b15e7050d9cfc473abdfe06a8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jcscb-1781096479863-f279e1683291\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":213356,"size_decoded":213914,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"9e74cdc0ea747f28554eac8825797029","sha1":"b070c16dc0c24dc9c0ea952a18ba4aceff23a981","sha256":"c8afeb3560346a87f147986a097f890b473b79f6e492fd4a21002bdd32449ff3","sha512":"658786b0991b40e4e0fa1b68f675ceddde3c5ff5511d8a66de056df67634050d5ee47a555525d7f9bd2f38417f2d3acf1d0833569864674c9423cda5463aec8d","ssdeep":"6144:JLZbLFmuKVzOLFCZn2wABukZPBY284dRepPh:tZ/F7OpB2wABuCXldRep5","tlshash":"4a2423c80ca838ff9ab2973e9cd11204f766af559812d4cbbb58f23c37a0a75455f50a","first_seen":"2026-05-17T20:36:53.922462Z","last_seen":"2026-06-10T13:01:51.784252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/05b545e0-116b1ccc4ef1abe4.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.924Z","timestamp":1781096478924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/05b545e0-116b1ccc4ef1abe4.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"05b545e0-116b1ccc4ef1abe4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"6a09a8a2d3d649a71b609630e5e43a3a\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/05b545e0-116b1ccc4ef1abe4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478928-08eb31a08171\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":172832,"size_decoded":55762,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6a09a8a2d3d649a71b609630e5e43a3a","sha1":"d521b62cd865f1447a5d83843b87ed3cc33f6196","sha256":"43dd460b552e8beb172e19c1d0afa7fae4a52945a15c8da57d2add34d56c1606","sha512":"f968b24b223de786fc953a074409dc5336b6e03afaf9e8fcb30d0c1aa60fa81175ca6cede087f210ed8171fbc54fc6108463bb6a504cb9570c4aad776e69d608","ssdeep":"1536:6VjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Gguk:Izug758kkEiXjOAprX2wd5WjguGOo","tlshash":"f7f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2026-05-17T20:36:53.904554Z","last_seen":"2026-06-10T13:01:51.810303Z","times_seen":5,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/efedfc4a-8af1b05ac0738f08.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.950Z","timestamp":1781096478950,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/efedfc4a-8af1b05ac0738f08.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"efedfc4a-8af1b05ac0738f08.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"6227a10bfd354b6c0cefd4b013c7d54d\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/efedfc4a-8af1b05ac0738f08.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glms8-1781096478955-7cd1f53d3542\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2720,"size_decoded":1843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2720), with no line terminators","md5":"6227a10bfd354b6c0cefd4b013c7d54d","sha1":"2c40b932b92d3b43ba157ec3217d8f10daa79e78","sha256":"29cbf1f681215d98c68dfe467bd2fe5083db479ffd3137e16f74b8d202a94c18","sha512":"49e77b7de18d085afc3b7b6db23b092ea493bcf0f60de3aa011d8fdcd81d4c199e652b9fa2f7dc72fb4d78e3c2b68c69f5e54782a73d7485dd9d9fe75fc6e718","ssdeep":"","tlshash":"7a511124e1442bb09cc153f84b33b6b6755e099e74dae26dceb0c9e0b2412cc92e94df","first_seen":"2026-05-18T02:20:16.389461Z","last_seen":"2026-06-10T13:01:51.811416Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/eb396988-e59336b3624add94.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.958Z","timestamp":1781096478958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/eb396988-e59336b3624add94.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"eb396988-e59336b3624add94.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"b39baf06836c1ec6ea452c4d10098963\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/eb396988-e59336b3624add94.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glms8-1781096478962-5bb13d50a515\r\ncontent-length: 691\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":691,"size_decoded":1343,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (691), with no line terminators","md5":"b39baf06836c1ec6ea452c4d10098963","sha1":"63a8f8e148f345175f260ea8955e887ce1e2cbdf","sha256":"100c62bc774c6f2daa98793dc8fe56e55852dbb9e45477fe14eff2a2323ddc90","sha512":"ded8aa819de910849698833fe0e67e761b6feb1828ba18d5dec02c5b53994fb0260be98d15d8c0c59dff3723b6575d1fa121f14ed8ce468133ca7f5df42b0c9d","ssdeep":"","tlshash":"61019cdc758977fc395b5d9886b7ec52674e20ba349b60994eabc36800260dcfb93808","first_seen":"2026-05-18T02:20:16.357618Z","last_seen":"2026-06-10T13:01:51.812291Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/2056-ea8be27dc8820951.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.963Z","timestamp":1781096478963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/2056-ea8be27dc8820951.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"2056-ea8be27dc8820951.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"e52977881616ed1c84dc303aa4404aa1\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/2056-ea8be27dc8820951.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478967-00fddbe1a48d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23979,"size_decoded":10070,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23979), with no line terminators","md5":"e52977881616ed1c84dc303aa4404aa1","sha1":"755248803520c44a05e5157e3878e1e99f7707a3","sha256":"37c69db864009e518f03c9594c055989460fcb0ce9f8ddbe173dd23b4eed96cf","sha512":"e77632f1b4ba268d29add1509747872e91f7b2b4cad1e2d9c8f0b7472b2e074d27061db85a039945af5a94a50e568379e238495305b726c29fa3b958d0ae120e","ssdeep":"384:nLkLp3JTiBpPQ3RDwKSZBbeMbPouMbUyvW8hCf3bHqkhRqSXOeR+UJKVbh/LvnjJ:CRYpUSKYEMbPPMb7OvT/mgn+VbpvnjUI","tlshash":"35b22ac277e1f0668f7d52da701d4006b39b2e1e383ad488f3606ca67119e46a5daf7c","first_seen":"2026-05-17T20:36:53.931595Z","last_seen":"2026-06-10T13:01:51.813254Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/favicon.ico","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.081Z","timestamp":1781096479081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1556828\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"7f80840b15e7050d9cfc473abdfe06a8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4rwv2-1781096479085-cf79490c3b4b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":213356,"size_decoded":213914,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"9e74cdc0ea747f28554eac8825797029","sha1":"b070c16dc0c24dc9c0ea952a18ba4aceff23a981","sha256":"c8afeb3560346a87f147986a097f890b473b79f6e492fd4a21002bdd32449ff3","sha512":"658786b0991b40e4e0fa1b68f675ceddde3c5ff5511d8a66de056df67634050d5ee47a555525d7f9bd2f38417f2d3acf1d0833569864674c9423cda5463aec8d","ssdeep":"6144:JLZbLFmuKVzOLFCZn2wABukZPBY284dRepPh:tZ/F7OpB2wABuCXldRep5","tlshash":"4a2423c80ca838ff9ab2973e9cd11204f766af559812d4cbbb58f23c37a0a75455f50a","first_seen":"2026-05-17T20:36:53.922462Z","last_seen":"2026-06-10T13:01:51.784252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api-instagram.elcho.dev/api/v1/auth/user","fqdn":"api-instagram.elcho.dev","domain":"elcho.dev","tld":"dev"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.305Z","timestamp":1781096479305,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/v1/auth/user HTTP/1.1\r\nHost: api-instagram.elcho.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nOrigin: https://instagram-xi-opal.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/favicon.ico","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.860Z","timestamp":1781096479860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1556828\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"7f80840b15e7050d9cfc473abdfe06a8\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l2ttg-1781096479864-771bbe8ae496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":213356,"size_decoded":213914,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"9e74cdc0ea747f28554eac8825797029","sha1":"b070c16dc0c24dc9c0ea952a18ba4aceff23a981","sha256":"c8afeb3560346a87f147986a097f890b473b79f6e492fd4a21002bdd32449ff3","sha512":"658786b0991b40e4e0fa1b68f675ceddde3c5ff5511d8a66de056df67634050d5ee47a555525d7f9bd2f38417f2d3acf1d0833569864674c9423cda5463aec8d","ssdeep":"6144:JLZbLFmuKVzOLFCZn2wABukZPBY284dRepPh:tZ/F7OpB2wABuCXldRep5","tlshash":"4a2423c80ca838ff9ab2973e9cd11204f766af559812d4cbbb58f23c37a0a75455f50a","first_seen":"2026-05-17T20:36:53.922462Z","last_seen":"2026-06-10T13:01:51.784252Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/screenshot4.e2ba23c4.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:28.875Z","timestamp":1781096488875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/screenshot4.e2ba23c4.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 759193\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"screenshot4.e2ba23c4.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:28 GMT\r\netag: \"0e729fc097a960b8f6bf3135fe5d2374\"\r\nlast-modified: Mon, 01 Jun 2026 18:08:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/screenshot4.e2ba23c4.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::r7h2z-1781096488882-7bc07c45de84\r\ncontent-length: 224707\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224707,"size_decoded":225324,"mime_type":"image/png","magic":"PNG image data, 250 x 541, 8-bit/color RGBA, non-interlaced","md5":"0e729fc097a960b8f6bf3135fe5d2374","sha1":"107bf2dadb7af1d1bfd1f3804c8f567ac369f1be","sha256":"dcb2003d503eec26e3b6bf40bcb83c6d23f6dbc8f1321a23f0277176e4473dfe","sha512":"223ae71196d58cec24ce5ccd610a337b6faf1eab6bb031b2a235475e2576cc79ce00c60b30533dfb2820d717c260e93b81eb2212089e5fdce6759562244ea41d","ssdeep":"6144:Kru2551SzTt37w8LUrHHsfKmpjZWsccvBTrMETM2eLh0:KVEzTtrwuUrHs7ZD/JTgkMnq","tlshash":"8624124b18af69a2a500a91c170119d0df5e1e5939b8e17f03eab4ccbdc73b95373678","first_seen":"2023-05-02T15:58:04Z","last_seen":"2026-07-18T06:32:07.495522Z","times_seen":646,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-10T13:01:18.424Z","timestamp":1781096478424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1887160\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"1c4ee482b673f309c5377d6a9490bbcd\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gtrnx-1781096478459-0e78c8f5f18e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]}],"data":{"size":12256,"size_decoded":3996,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (12256), with no line terminators","md5":"c6c690994f12a672a3b6e6a0f3b2aa2e","sha1":"d67eac185fd8beecf10a23c343490f81549c05a6","sha256":"66b51d7fa26b6bf10a5dd572e057a6dd4d43d270fa520f5f9a5e010a513c3fa4","sha512":"a5ce7e783c4491a556288e6779d50cdf4eb2193491b20b68a13aca0ea90fc85e40f0d6a07e610882bf395fd9a5c257c292043b931850215e69960fae6ff06e56","ssdeep":"192:IOPeBtUOCXkbUmnv3kc70/xaUxQETapgnqzcJmzvqzzJ:IOP2uOWUUSv3kI0/YUxQ3Ii+J","tlshash":"8042562abc05de4aecb6bd5d013e6e3a54cac87bca74c87c97ccce0402515be5b96c85","first_seen":"2026-05-18T02:20:16.499295Z","last_seen":"2026-06-10T13:01:51.814733Z","times_seen":4,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/4473ecc91f70f139-s.p.woff","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.910Z","timestamp":1781096478910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/4473ecc91f70f139-s.p.woff HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4473ecc91f70f139-s.p.woff\"\r\ncontent-type: font/woff\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"78e6fc13ea317b55ab0bd6dc4849c110\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/4473ecc91f70f139-s.p.woff\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8gwg6-1781096478915-91dac29c4edc\r\ncontent-length: 66268\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":66268,"size_decoded":66887,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 66268, version 0.0","md5":"78e6fc13ea317b55ab0bd6dc4849c110","sha1":"d06c767b3837999a8b98426e4eb16ca0a8080880","sha256":"296fafafd41304f7c992079054b8af914dbbd865f32de97c66d0f613b55755d6","sha512":"1ac8ebcedb1139e433a203d15b95c6ad3039f9454e891b960c41a77a5340a7223a6a2222171f038b88f58a21e15a7a5738d62a7a2a6183a06d76f1db7271f60e","ssdeep":"1536:ZhNKBFjd7ZKQN1MqewTQiqquIusnCF/LThNIq8J5W2XgZZB4aKq5ntF:J2jd7hZL0iq7BsnCF/s/XgZZBTfH","tlshash":"1f5301d48e8a8d202093bd46a4aaeb86823cf4575b34f9726776eb4d67044f42cbcd31","first_seen":"2024-10-03T01:19:04Z","last_seen":"2026-08-11T07:52:02.131711Z","times_seen":1962,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/b8bc3934-834285d279f4349b.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.954Z","timestamp":1781096478954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/b8bc3934-834285d279f4349b.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b8bc3934-834285d279f4349b.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"e21980c8854ce0dac4bca340f1fbf8c9\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/b8bc3934-834285d279f4349b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478959-e430c5aa78ef\r\ncontent-length: 723\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":723,"size_decoded":1375,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (723), with no line terminators","md5":"e21980c8854ce0dac4bca340f1fbf8c9","sha1":"956b62d03fcdad77fff7148c90f75df942ae58fd","sha256":"29320cecfdbeb749c54c09eab24d0165b1251608bfeb72ce407fa3f3f8c9b558","sha512":"6307abf9f49380a3f585faa3f4dec923b9798eebd85606ecc1b121c9ee4093db2ee7b54ab98abef952d19afbf0b9ac0268fab2aba8d3b63ad92fd9da656301f4","ssdeep":"","tlshash":"8401fd89f28437507cd511702963f453a2ba395f34cf84dcab6a0081e6a286c9923cdf","first_seen":"2026-05-18T02:20:16.348462Z","last_seen":"2026-06-10T13:01:51.815926Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/instalogo.11664b74.webp","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.057Z","timestamp":1781096479057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/instalogo.11664b74.webp HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"instalogo.11664b74.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"bb9429bc2e7b1af6c6f7745ec2d0bc8f\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/instalogo.11664b74.webp\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqvjp-1781096479061-e5697305c94e\r\ncontent-length: 38616\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":38616,"size_decoded":39232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb9429bc2e7b1af6c6f7745ec2d0bc8f","sha1":"784ce0a3b9e9b779a5ed3d50d16b448f605374a2","sha256":"ff68c72c24979acb40b8c5b147186626edba6b1c4e2ae42572246792857c6dce","sha512":"bec96197a99f11d5af4a4fb48cc2e2216e8f116a57238bfd1dee1c8035c47b1bb6f7b76ee7c8c422fcb999562ac0eee54758af52b8dee81abcdcc34d736d68f9","ssdeep":"768:YQOIhrET23nX2JppkLtJu/u0TcvNQ6nzqm9VZmxQ+EVX4n0S/Ybht/IjS2:AKrET2XX2JpqLtJu/fONQ8MxfEq//mhE","tlshash":"a6030200c270a840c436d8aa9e6c93f1d1cfe7422d75974216a784fb96585a3cd4fef3","first_seen":"2024-08-19T13:16:56.004399Z","last_seen":"2026-06-10T13:01:51.816966Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/auth/sign-in/page-bd80816950ffec01.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.676Z","timestamp":1781096479676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/app/auth/sign-in/page-bd80816950ffec01.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1015612\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-bd80816950ffec01.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: W/\"efe93e3e89661a21491e6e7bc66594b9\"\r\nlast-modified: Fri, 29 May 2026 18:54:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/auth/sign-in/page-bd80816950ffec01.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096479681-9654db0cfaad\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7919,"size_decoded":4352,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7765), with no line terminators","md5":"efe93e3e89661a21491e6e7bc66594b9","sha1":"471556485d864a9a1f6eaa0cfbc9e34108a39047","sha256":"c723b1e87115671e6a58e61e6706bf94a92b429634ebca62b406d26aff02258a","sha512":"c200daf0fc2be04368c6dad8a93f285f776a5832471fbf6c927928f1b3747a0058fdbf95268b4165030426eae4154928c28d554b65c807a8ceb5c18abd4c2945","ssdeep":"192:SJbXO33cHENLjZYZtLyWF7/rVsFIkQZ9X217uz5SI:MbXYckhZI57/rVnkQZ9Xs7uz5SI","tlshash":"8cf1fa75a057fcd4be3638c8b72f940d7d6b4e1ce9526454bab8d807787864836227c8","first_seen":"2026-05-17T20:36:53.926005Z","last_seen":"2026-06-10T13:01:51.818183Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/btn1.aaaf23b2.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:19.783Z","timestamp":1781096479783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/btn1.aaaf23b2.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015611\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"btn1.aaaf23b2.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"958ef0eea8ba87cb1066b39950b67cb4\"\r\nlast-modified: Fri, 29 May 2026 18:54:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/btn1.aaaf23b2.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l2ttg-1781096479789-e270fff5eb41\r\ncontent-length: 6357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6357,"size_decoded":6959,"mime_type":"image/png","magic":"PNG image data, 564 x 168, 8-bit colormap, non-interlaced","md5":"958ef0eea8ba87cb1066b39950b67cb4","sha1":"9b7946fd2281a2a2176ecdd6e90b15aa7894733e","sha256":"2b2208bc9046a5b7c16261bc83f8b8da79b865e568129036ac65b0979ee10ef9","sha512":"c44c45a7362cd8875b9f3d9c8638083a19b885653fef97eee77ddde117b212f508b0135f9af08553344426e2553fd31bb14d8cbd6210f21cb6bc205248a4e288","ssdeep":"192:05svuVkns0hxiwQ72s1IdphRHawDH+CTe:4svuGs0I2s1I5RHXi","tlshash":"b3d19e0e9fb2bc0283f65588cc4585fa34232a1475e25b3bf523b52b966a1926250e72","first_seen":"2023-05-21T21:45:24Z","last_seen":"2026-06-10T13:01:51.819429Z","times_seen":32,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/css/3b0e54d34f344c5e.css","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.920Z","timestamp":1781096478920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/css/3b0e54d34f344c5e.css HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"3b0e54d34f344c5e.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"c106409dac8ca1d5ae2d165b035d3311\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/3b0e54d34f344c5e.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478925-670146cbbdbe\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23508,"size_decoded":3189,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23508), with no line terminators","md5":"c106409dac8ca1d5ae2d165b035d3311","sha1":"26334e94c34a01271ccd481994e769f374939f89","sha256":"edc004c054a7aba662102bcb2857944028a4e7b60bc3b6a4244bda7f1a219aaf","sha512":"5877cf084863685362a6e99d7205528515a31b62f7c19c5023965f793592d9335e3ab4bea80bbc2cd8ba8ad842298e20717e20e03e02e7cf10ebd853fa2ef91f","ssdeep":"384:KtcR+35ZOJqlRhdlI4dSMLYh5lVmyMLYd5+V6yk:zR+35ZOJqlRhdlI4dSMLYh5lVmyMLYd5","tlshash":"bcb2f0996abd3210416eb005c6cbfd8a9841f0358e51edb5bf20c49fbbf61b644ac2c7","first_seen":"2026-05-18T02:20:16.429766Z","last_seen":"2026-06-10T13:01:51.820364Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/8f130de0-bcabadd0be597757.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.930Z","timestamp":1781096478930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/8f130de0-bcabadd0be597757.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"8f130de0-bcabadd0be597757.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"f17e38ef702d52843fb08b2bf829a838\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/8f130de0-bcabadd0be597757.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478935-fba558308c92\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4265,"size_decoded":2296,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4265), with no line terminators","md5":"f17e38ef702d52843fb08b2bf829a838","sha1":"4e988b9a40be2aa5f655cc49d8199ae284d11bb4","sha256":"4fd31c1142acc7bf20ecb9dc7a26c0b386d08560dffac4393f02971f33fc859f","sha512":"8741b04712ceba97e9aabe718abd1590ed9b45cd7df44f518bfc8cec11086f0d3c6400cddf796e9de96573deaf757d5a15cf2434db974dcb0f002b3f6dd9f61d","ssdeep":"96:diJzRRIcXDC0n68WiFv3JqNs/e0L22Nsi/xqjT:q9mcu0UQJQ0L2CW","tlshash":"0a9143aaf2c4a37c5a8513f08a765071b64e299f30c6826c9aa5c4f174a20dcd267ccf","first_seen":"2026-05-17T20:36:53.914202Z","last_seen":"2026-06-10T13:01:51.821253Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/media/screenshot3.4a3b65f1.png","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:25.762Z","timestamp":1781096485762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/media/screenshot3.4a3b65f1.png HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/auth/sign-in\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 888378\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"screenshot3.4a3b65f1.png\"\r\ncontent-type: image/png\r\ndate: Wed, 10 Jun 2026 13:01:25 GMT\r\netag: \"556d6510a5a3a5f14dcaad9baaf32e13\"\r\nlast-modified: Sun, 31 May 2026 06:15:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/media/screenshot3.4a3b65f1.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p8ctn-1781096485767-45f9da20090b\r\ncontent-length: 144177\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":144177,"size_decoded":144794,"mime_type":"image/png","magic":"PNG image data, 250 x 541, 8-bit/color RGBA, non-interlaced","md5":"556d6510a5a3a5f14dcaad9baaf32e13","sha1":"196322012c89e5753148f29ca57f5b8ae540e61c","sha256":"848159d4a1ae1606b5a1df2e01254de80019a6342a31684c10597fef854c843a","sha512":"b49cdfe0fbd80e810d6cc0fa9dc1a00f327e23d69a935f4e2385f584d9cab1d09382b50db8ae28497c3d7b9dd32b95772033cfe98a05937d9fe8e5994481fbf1","ssdeep":"3072:RaLLZ16cujNuuRW7U1OtnUdC2XwcLrh7PLuSQjVdktYgiF2ULubFL:RSV13ON1Mtl2giPQpdeSzCp","tlshash":"6ae312b7388b1717bc3867d53fe9a1d24a774374e219f6ef1c4eb0aea214213c489664","first_seen":"2023-05-02T15:58:04Z","last_seen":"2026-07-18T06:32:07.4927Z","times_seen":662,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/9901-1889b6ba1f5c1d33.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.939Z","timestamp":1781096478939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/9901-1889b6ba1f5c1d33.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"9901-1889b6ba1f5c1d33.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"557cf6fa84346d197e12eab34fc6033a\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/9901-1889b6ba1f5c1d33.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478944-e6bcef04742e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":69578,"size_decoded":24590,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"557cf6fa84346d197e12eab34fc6033a","sha1":"9be9fab5a06de99ba173e8275221c1d5615dc65a","sha256":"781387760d8a10d9412d31047f57223565943f958130ea5f588f7e0cced4c309","sha512":"860afa5a4e1f4f88080dd5150ffce4bf65a84c232a213fd0fa205e18839cd7b7bd884619d0fd4e5f4d00096ce050d754384321a5e8c409c7d7cb6ab7a10e8133","ssdeep":"768:5eAfHIj2n9ojJb/3/RlHWxsb1//TZW1TeTVcCGrmKAKRab/Gzt8QmV0T:nHIj2ejJbPJlx1/dogG5A2CQmV8","tlshash":"636308e67682f072dbbf5166c03f405af23559a5380e4014f3e5a8aa387058de5b3f7a","first_seen":"2026-05-17T20:36:53.896887Z","last_seen":"2026-06-10T13:01:51.834984Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/(site)/(home)/page-1981393765e43639.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.945Z","timestamp":1781096478945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/app/(site)/(home)/page-1981393765e43639.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-1981393765e43639.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"6dcbd2a3cc8239393ac99fb928275e41\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/(site)/(home)/page-1981393765e43639.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ldzvr-1781096478951-9d14438f0814\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13187,"size_decoded":5198,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12753), with no line terminators","md5":"6dcbd2a3cc8239393ac99fb928275e41","sha1":"3bf3619d5a906c5f11b4594b184499316a8b259a","sha256":"c35682143aa5b17d1135248110c32bb13dd81343f7ce3b38ab3481e9a5f5d140","sha512":"4499306dd75e10c29df4e5b574ecb30fa0889340490619afde32dab939aa189fc83e406af858cc0bf41ba8ffd270a838e3d86c4c62ad134759d4b4a5b6d17cbe","ssdeep":"192:t5NxiiEgTY8EgVS+O0ZmvyftJfgpomPWo+vXP5e7NjzWVW7jWsTVRgePqEqjz6:tzQbejf3G+vXP5EW4TVRmEqa","tlshash":"22426540e45bf6e4ad3958c9e43fd40d76af2648c60c4870bcb5286a29696f83607fde","first_seen":"2026-05-18T02:20:16.475768Z","last_seen":"2026-06-10T13:01:51.835796Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/app/(site)/layout-36fc1165f390a92f.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.968Z","timestamp":1781096478968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/app/(site)/layout-36fc1165f390a92f.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019298\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"layout-36fc1165f390a92f.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"878dcec0e87f495b3326a4b867404eb5\"\r\nlast-modified: Fri, 29 May 2026 17:53:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/(site)/layout-36fc1165f390a92f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478973-6ff8268633d0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":15663,"size_decoded":5742,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15158), with no line terminators","md5":"878dcec0e87f495b3326a4b867404eb5","sha1":"b1776920906cc21d9bdf4d289f450193f966edee","sha256":"53638ba866499debd658a1f56e6a00a85b41c192dbf71173c1fc08dcef785f52","sha512":"8e7d82d2a41429054ee5fc76d6b3a2e67dc5fe5bf411ba85c84705eb11c45869fe9c8912ee451750e0c1883214bad935c991c61255cc00e969dbadbe1666683a","ssdeep":"192:CVpEVjkrrm5B50WMu4o+47f19rjLNWo+vXP5H7vOwQYWsTV8WKsoljetkzIF7Uc6:CaO0B5WOf19r3+vXP5bbTV632x8","tlshash":"ef62415ca499fee8b93a28cdbb2fd80d755f2518cd0508747dbc685a28984d8370bfc9","first_seen":"2026-05-18T02:20:16.405304Z","last_seen":"2026-06-10T13:01:51.837543Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/css/45493097fe786999.css","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.971Z","timestamp":1781096478971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/css/45493097fe786999.css HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"45493097fe786999.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"6f0cab408afbc2ac20e6acb45101c5c6\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/45493097fe786999.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::glms8-1781096478975-bfe918ef8236\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":19478,"size_decoded":3144,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (19478), with no line terminators","md5":"6f0cab408afbc2ac20e6acb45101c5c6","sha1":"4416f6f55bafd840f44ef5b788dbe2b98ef8ab18","sha256":"5da9df31f044f0e147ebf5c97c5fe4ff1ff7307a38d0a2e2e9e442f752da951c","sha512":"5b5c39a31ede7a93b5e87928bfd56f4fe83042f02f860aa935eb5e1a5b782ec976c22c4a89f00c10354002f32f4429f4ab8c82ca57cb2abec47bfb35c0cd2b0f","ssdeep":"192:UHuLy0gapKo2tHPUgYNA2rKIbm37rbMrzGrzcJerzcprzMr1iwrtrIbxrBmrSvit:quL7pKVPUgYK2rKwm3bCfqHwmU7/C","tlshash":"b792a833892ef21c71d2e8d6b80c639c3cd49181da996ffbbc0c5b180adba98055fb55","first_seen":"2026-05-18T02:20:16.37475Z","last_seen":"2026-06-10T13:01:51.838122Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/main-app-90605d411721105f.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.928Z","timestamp":1781096478928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/main-app-90605d411721105f.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-90605d411721105f.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: \"cb4002c969a07c7a8e656526e4d6dcf3\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-90605d411721105f.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8gwg6-1781096478932-da4c0fad1048\r\ncontent-length: 465\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":465,"size_decoded":1117,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (465), with no line terminators","md5":"cb4002c969a07c7a8e656526e4d6dcf3","sha1":"60ed5136f4aa0998b75b613308876d9059a0a189","sha256":"8981804d34ab006060833b88acb9b9bcc6a44ce89349254d082045caedb52377","sha512":"21d632b67079ce200bff1f391c007d601bd07e8e4a449db044b82c4b8454ca736418668bffb82d8df5e45b710cab1b53bff3e18adee22b03fe4f16f94b8b0d4f","ssdeep":"","tlshash":"87f0a799270db02f2813ae60fed79c2e285e81213c575d506614edb12c3376cc3f1c29","first_seen":"2026-05-17T20:36:53.894477Z","last_seen":"2026-06-10T13:01:51.838879Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/86cb00e6-4103d32798d46492.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.932Z","timestamp":1781096478932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/86cb00e6-4103d32798d46492.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019300\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"86cb00e6-4103d32798d46492.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:19 GMT\r\netag: \"5d47320a424337dbd48de19c4f133ecb\"\r\nlast-modified: Fri, 29 May 2026 17:52:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/86cb00e6-4103d32798d46492.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bqvjp-1781096478937-ac559a74ca02\r\ncontent-length: 889\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":889,"size_decoded":1541,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (889), with no line terminators","md5":"5d47320a424337dbd48de19c4f133ecb","sha1":"5bb06c64feda4adc60b7d74ce403844f52450680","sha256":"4d066bca4043714cc805cf10944d9a82858499dc0c462f5c2373ed8af617a290","sha512":"392d26871acb3d5c3b17ccdb726c964691ec7c5652a22ca5fdf19fe8de7085928689f1a42d34b754f858169256f1c98ccf7fcdff797efd94ff4dd42ffd321261","ssdeep":"","tlshash":"9f11bd89336c223c7987906053a37437d76d15bb388ba0988f3904a8a67144ca2338ce","first_seen":"2026-05-18T02:20:16.385646Z","last_seen":"2026-06-10T13:01:51.839601Z","times_seen":4,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"instagram-xi-opal.vercel.app/_next/static/chunks/19d076a6-ec0b59a4b08fd456.js","fqdn":"instagram-xi-opal.vercel.app","domain":"instagram-xi-opal.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagram-xi-opal.vercel.app/","date":"2026-06-10T13:01:18.949Z","timestamp":1781096478949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /_next/static/chunks/19d076a6-ec0b59a4b08fd456.js HTTP/1.1\r\nHost: instagram-xi-opal.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagram-xi-opal.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1019299\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"19d076a6-ec0b59a4b08fd456.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 10 Jun 2026 13:01:18 GMT\r\netag: W/\"78175d2050b241610568e5ddb1d6a504\"\r\nlast-modified: Fri, 29 May 2026 17:52:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/19d076a6-ec0b59a4b08fd456.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2mkgk-1781096478953-f3ed93a9141f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1391,"size_decoded":1178,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1391), with no line terminators","md5":"78175d2050b241610568e5ddb1d6a504","sha1":"c731fafb35cd256b653bc5e0f4154b450c636be0","sha256":"00a5aaa6af9420f02d086fc3d578e8903e4a29944f6f487a37b46c2faea66b8a","sha512":"b6bdc685d24a6f6f0229bdf4d58de777b7bdf4a695f872066166271c31f13f166006ed561da0c17dcc6632274df95b6407e7f95d56ba23c580c2afac2962feb6","ssdeep":"","tlshash":"7f21be64639c293c748f0468d3b3b132e73e256a385e50694e7f896461261d8d33fdea","first_seen":"2026-05-18T02:20:16.447702Z","last_seen":"2026-06-10T13:01:51.842027Z","times_seen":4,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-10","alert":"Phishing Block","trigger":"instagram-xi-opal.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-10","alert":"Sinkholed","trigger":"instagram-xi-opal.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Instagram","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Instagram phishing","tags":["instagram","meta","social","phishing"],"meta":null}]}}]}