Report - d2tha2b8l1annb.cloudfront.net/

Report Overview

Submitted URL
d2tha2b8l1annb.cloudfront.net/
IP
54.230.111.16
ASN
#16509 AMAZON-02
Submitted
2024-04-16 04:51:53
Access
public
Website Title
Instagram
Final URL
d2tha2b8l1annb.cloudfront.net/
Tags
instagram meta social phishing
urlquery detections
Phishing - Instagram

Detections

urlquery
29
Network Intrusion Detection
0
Threat Detection Systems
54

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-16	512 B	1.2 kB	35.244.181.201
gkfvgy4nqjpmmfaeirly7zwzsu0spdvb.lambda-url.eu-west-1.on.aws	unknown	unknown	No data	No data	556 B	428 B	54.72.244.91
d2tha2b8l1annb.cloudfront.net	unknown	unknown	No data	No data	14 kB	8.1 MB	54.230.111.77
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-04-15	338 B	942 B	54.230.218.11
static.cdninstagram.com	61231	2014-05-01	2017-02-22	2024-04-15	1.4 kB	17 kB	31.13.72.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram
2024-04-15	medium	d2tha2b8l1annb.cloudfront.net/	Instagram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (23)

	URL	Size	First Seen	Last Seen
	d2tha2b8l1annb.cloudfront.net/Instagram_files/cBNnczn8-8F.js	158 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/cBNnczn8-8F.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:01 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 07789c882b8a4dd0728d917cb325bea8 192f861527abc246da785a34389b1239922f2b1d 9866e634eb66ee0ab3ca21006dbe1f18fa8aed7008919dcdb16f347185ac8dd9 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/OS4XiGf8B3JRAtLTl45A93Szy3QSKi4t7OL-_9LKU49WUQkbzpsviI2DPMHRyQBeiW_YrvEw8S_cL6FX6W_V-V5GjguKC_Wj_S7.js	191 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/OS4XiGf8B3JRAtLTl45A93Szy3QSKi4t7OL-_9LKU49WUQkbzpsviI2DPMHRyQBeiW_YrvEw8S_cL6FX6W_V-V5GjguKC_Wj_S7.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:01 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 3a012644d74ec999debe47918a5bf37a cb15ae17db295c88ef9b9fb85bbc59aded7e452d 22127ede297876360ab1fa65d3c57338a99a10d7484f5a0f687339a9694ad6ce Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/28E4yD2rhFw.js	609 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/28E4yD2rhFw.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:01 Last Seen2024-04-16 06:52:03 Times Seen2 Hash e81ed4f2d91d54c1a6e28d5cea6f3f9d 6c2f67d131e64889f21f399ccd0dafd2421272a1 79ea553d8244420c9abb73ab23bd5be6c2cb9f5ea678aa2fdd86cb2c0f05705c Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/oKdcG6IZ3XvhOjgmxmSmbJcFQdG1GOTYNcZtDF6kpo1BqRl602k3b_gBYBHirbomYf1KCDYM51FtDc7cKIItSAeVHzzQyzZ3zNRu9xcXTmwcxeKOfiw_6dRL-6UZ9oGBHPV75Ppx2hs_Ch8mgHFcoJWfq1x9xpxp86d5GOnmSaduO8mPcRYoJlGbYMGS_38TchtxxXQ4qAPa9z16RymGTYN0C7-OTa-ZDR8RuD29tQNGwiH18CvsWqehdEtW.js	3.4 MB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/oKdcG6IZ3XvhOjgmxmSmbJcFQdG1GOTYNcZtDF6kpo1BqRl602k3b_gBYBHirbomYf1KCDYM51FtDc7cKIItSAeVHzzQyzZ3zNRu9xcXTmwcxeKOfiw_6dRL-6UZ9oGBHPV75Ppx2hs_Ch8mgHFcoJWfq1x9xpxp86d5GOnmSaduO8mPcRYoJlGbYMGS_38TchtxxXQ4qAPa9z16RymGTYN0C7-OTa-ZDR8RuD29tQNGwiH18CvsWqehdEtW.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:02 Last Seen2024-04-16 06:52:02 Times Seen1 Hash 386c77125515053aab49fcccb03298f0 303413b04525b858ba14db7e734bb81523b28d78 822952575ff2a17f6a9466e510106f41c12d15e23f8d3645b3f241184c1ff46c Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/R4Tyoeq-PQV.js	114 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/R4Tyoeq-PQV.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:02 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 1bec227a9d0ee5a6cec1461bc0dd4e1f 6f0fc3590f9173ffdfcccd07c1ce6f78ff10f990 f7a3f48de8e7763aaa46a3689c1085653992d9620a848cdbf4be6e013df88fdf Loading...

	static.cdninstagram.com/rsrc.php/v3/yg/r/ohxNLgn6sh5.js?_nc_x=Ij3Wp8lg5Kz	446 B	2023-05-21	2024-04-16
Pretty URL static.cdninstagram.com/rsrc.php/v3/yg/r/ohxNLgn6sh5.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-21 21:45:24 Last Seen2024-04-16 06:52:02 Times Seen6 Hash 303ff5641ba4f99ef634924f401c1521 ad1b4cbd936010dcc2863a3a814575a11845fcc2 8d135abfb13c49bf3660d8dcca7704f9575b46c671e067660a361b662f04b1f0 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/7KFSuqiN3rP.js	963 B	2023-04-26	2024-04-28
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/7KFSuqiN3rP.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-26 14:28:59 Last Seen2024-04-28 19:26:33 Times Seen1066 Hash ac442c71b8ad509620547f552be4c00a 7c83c6d95e16b435f331c77e7620f26b9aee4e9a 17be4317664330f160a5ef2f045d07ff8cde6bde12441aa47256a747e65374fe Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/Qvo3mvaifH4.js	314 kB	2024-04-12	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/Qvo3mvaifH4.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-12 06:05:24 Last Seen2024-04-16 06:52:03 Times Seen4 Hash c1298325e3170d7530ecd2b1fbb68326 3e388b021557d05e80f6d832fdd24adc9aab20b3 99b61e57507357c5610808582e7d1b77e434f4cca8fdb1c3d62577af275f1625 Loading...

	static.cdninstagram.com/rsrc.php/v3/yo/r/rMjUV3tlg5-.js?_nc_x=Ij3Wp8lg5Kz	961 B	2023-08-15	2024-04-29
Pretty URL static.cdninstagram.com/rsrc.php/v3/yo/r/rMjUV3tlg5-.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-15 00:40:05 Last Seen2024-04-29 12:58:54 Times Seen2808 Hash f7d45f6cdfe7b145035fefc5518577da 6666c260403bf3851849ca5955d57d85ddffed66 548ba844583be9db2a87dfdfa9a3cc30f52aff0eb6d164c2eb280b5470ed44ad Loading...

	static.cdninstagram.com/rsrc.php/v3/y2/r/cMd_SZov9Ei.js?_nc_x=Ij3Wp8lg5Kz	273 B	2024-03-28	2024-04-29
Pretty URL static.cdninstagram.com/rsrc.php/v3/y2/r/cMd_SZov9Ei.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-28 06:43:36 Last Seen2024-04-29 12:58:54 Times Seen81 Hash be263331f8a8b794378a183f0fe01a30 76d86eded17b3d5d7b53d72f72c5bd408f8d6d4d eb444f64f35ab77c79e9b6a663814ca0e24b169ba92a2a3228bf7ec8aa801e58 Loading...

	static.cdninstagram.com/rsrc.php/v3/yu/r/emmFfFsTUtD.js?_nc_x=Ij3Wp8lg5Kz	1.3 kB	2023-08-15	2024-04-29
Pretty URL static.cdninstagram.com/rsrc.php/v3/yu/r/emmFfFsTUtD.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-15 00:40:05 Last Seen2024-04-29 12:58:54 Times Seen2808 Hash 7bfa4562a0123d3bdf8c4f995c80feb9 d4419e28eebefbc17a0297939403ba15bdc8c07d a83a319c6e7bf8171265e277fe99f6be0443ce609df2d76316d1f2de1bcdfaa2 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/E2a9WfQDMxE.js	1.6 kB	2024-03-06	2024-04-28
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/E2a9WfQDMxE.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-06 19:04:08 Last Seen2024-04-28 19:26:33 Times Seen70 Hash 1ce5e2c18396dccf8a67a5474fe4ec55 21157dd120971f92359f6ff8dce92abb74bbcc8c eb34bf2a9c8e2bf6da1b90a368f597d905dbc525825358acafe5401bf31dce84 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/8yXQFgh-Mlh.js	156 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/8yXQFgh-Mlh.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:02 Last Seen2024-04-16 06:52:03 Times Seen2 Hash a929ed4ce2d792f0f51468db0fe51b52 0b903469a08e0f92ac00f796ac986b81231ca9ea 489ee13d8605131e9c400842003aa4c4fb92ffa02e0846e17befae687929c421 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/wMX1SRmuPgU.js	172 kB	2024-03-23	2024-04-24
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/wMX1SRmuPgU.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-23 19:12:23 Last Seen2024-04-24 08:09:13 Times Seen137 Hash 024b1e572c03685fe4ec7299943bfe03 8f014207819cda7433b85aab795eda9578467807 cb105f383f1c8c4e49513ece1bbf600aedd0b7c0c463d2e5e2a533cb7cd02c60 Loading...

	d2tha2b8l1annb.cloudfront.net/	2.7 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/ IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-16 06:52:02 Last Seen2024-04-16 06:52:02 Times Seen1 Hash 5714ddaa9a6ad1183c3f727b13f62501 21ce2f08fd396da635dd1c4741664d8e7ee9f3c4 129d5a2aedb2645f6075467638630254a9c29ce8057f3c97f4a968dcbee97992 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/5DLg5h3KVN4.js	672 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/5DLg5h3KVN4.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:02 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 7a27c66dff670f56ec591fc0af13f81d 992ef3306ce296cce95e70bb9697712d505b0a73 21a6bd41114b6a0312534c7dee299e127f941ee9646b6fb6bbfb9deac8ee044a Loading...

	static.cdninstagram.com/rsrc.php/v3/yL/r/dbgrMsnD18p.js?_nc_x=Ij3Wp8lg5Kz	422 B	2023-08-15	2024-04-29
Pretty URL static.cdninstagram.com/rsrc.php/v3/yL/r/dbgrMsnD18p.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-15 00:40:05 Last Seen2024-04-29 12:58:54 Times Seen2808 Hash bc4fd06cf16099df5c8d1087d164befe cc1f81e8715f49591cebf878d71f91e4224ce1d0 79690b8ff5d31df844787e36d4048705a13bfd07f307e42e5087e235e3b16504 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/45aM1KN9e6A.js	1.0 MB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/45aM1KN9e6A.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:03 Last Seen2024-04-16 06:52:03 Times Seen2 Hash c279b97871027e365ff1653fc6092a20 18f341e6250f0a5b21823dc7e50b8ba165c8360d 8f8c3faaadf01476ca91ea7c1c1a54d4134f779a953e1f2715e811b782cb28cb Loading...

	static.cdninstagram.com/rsrc.php/v3/yH/r/ZLcKObNuO1b.js?_nc_x=Ij3Wp8lg5Kz	126 B	2023-12-02	2024-04-29
Pretty URL static.cdninstagram.com/rsrc.php/v3/yH/r/ZLcKObNuO1b.js?_nc_x=Ij3Wp8lg5Kz IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-02 10:03:12 Last Seen2024-04-29 12:58:54 Times Seen2347 Hash b2f93e99eac952da42895306ecd7e9d0 589a43a48cd6da3d85858dde294e55f235a5e899 41bf28018cbba9df7f9cd3c09452d8b3fa2a8690a381f787113e23fe19c83d2e Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/YulU4y6XRqd.js	78 kB	2024-04-09	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/YulU4y6XRqd.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-09 08:19:17 Last Seen2024-04-16 06:52:03 Times Seen12 Hash 88e2fc81929838b735a343b8f134556d 60b1b2f9404c6282b847ef763f7d69471a94ecdc 96bac9eda603493eb863a474961f83a9bdfb91b5c8511505f0996a617f076ecc Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/jMuikimQKjI.js	277 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/jMuikimQKjI.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:03 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 2e7393682c006a662dde175213ebc1ec 8925031ab6ef80616546577e99df99ed8cbb265f fc26bc872c966aabfd645934f7a43a4fbf1a18c1d4f2dc4291ee79f3c41ad8f8 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/nzRrvRgzNjX.js	277 kB	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/nzRrvRgzNjX.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:03 Last Seen2024-04-16 06:52:03 Times Seen2 Hash b4e9318c06c9af078bc78e1c633f3f18 7eb05e5f9cef777f83c8454b3a2276c0eacce136 79d9ac506c16295458070637c5e0db89abe8b0d7f4888a6d069c43673cd698e1 Loading...

	d2tha2b8l1annb.cloudfront.net/Instagram_files/RnjadfR.js	641 B	2024-04-16	2024-04-16
Pretty URL d2tha2b8l1annb.cloudfront.net/Instagram_files/RnjadfR.js IP 54.230.111.77 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 06:52:03 Last Seen2024-04-16 06:52:03 Times Seen2 Hash 5d88872530c8fb666523d142bd2cb5ad 26ee3d4af945e92a205079ba235a137bc4ec1e4d 81ab0ae1a91719ff533cde317f21b53039d22324fb32a24e8215d5214c883258 Loading...

HTTP Transactions (34)

URL IP Response Size

d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot3-2x.png

54.230.111.77

200 OK

486 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot3-2x.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 500 x 1080, 8-bit/color RGBA, non-interlaced
Size
486 kB (486329 bytes)
Hash
249e9ef6b013c225b8c6b393fbd9cf4c
737462a92f2a5e222c8aadc997296d28151bd214
4cf38e46084bac1dd6c2a927a9a51d8407a90103772321e8006fc192c7b527ac

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/screenshot3-2x.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 486329
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:51 GMT
etag: "249e9ef6b013c225b8c6b393fbd9cf4c"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ytcg1UgzZ5LmBoVkjVK8x65RFeODaoeOYtrUW5T48RLDlP-2tR8pgg==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/E_2mQvC3HG-.png

54.230.111.77

200 OK

3.5 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/E_2mQvC3HG-.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 306 x 90, 8-bit colormap, non-interlaced
Size
3.5 kB (3547 bytes)
Hash
63a2c0b126ec895365682ef7177987ea
51b7f1b5d6252a636f38a53f86a5fdc25bc3a3d5
32953df0b8cf36634903003593f451fee0923180faf7a64285b8b0bca7223b17

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/E_2mQvC3HG-.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 3547
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:48 GMT
etag: "63a2c0b126ec895365682ef7177987ea"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6n2_McDI18Ox6PGbKpG954QG0O3jO8axocgUWcHgDEli7sR3NGjucQ==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/fDjwyLC88oO.png

54.230.111.77

200 OK

6.4 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/fDjwyLC88oO.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Size
6.4 kB (6357 bytes)
Hash
958ef0eea8ba87cb1066b39950b67cb4
9b7946fd2281a2a2176ecdd6e90b15aa7894733e
2b2208bc9046a5b7c16261bc83f8b8da79b865e568129036ac65b0979ee10ef9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/fDjwyLC88oO.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 6357
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:46 GMT
etag: "958ef0eea8ba87cb1066b39950b67cb4"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f-EZBL96UbHeMte-2jqReD-2MoF_Pv7CRWTz6FoSveKxNjz_-2XbPQ==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/7KFSuqiN3rP.js

54.230.111.77

200 OK

963 B

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/7KFSuqiN3rP.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (344)
Size
963 B (963 bytes)
Hash
ac442c71b8ad509620547f552be4c00a
7c83c6d95e16b435f331c77e7620f26b9aee4e9a
17be4317664330f160a5ef2f045d07ff8cde6bde12441aa47256a747e65374fe

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/7KFSuqiN3rP.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 963
last-modified: Thu, 11 Apr 2024 21:18:42 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 12:32:49 GMT
etag: "ac442c71b8ad509620547f552be4c00a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ib4J1uvzXw2kmIZpdLb0ttA2ZqiANs036cj3xo8Qy7ybF2L1CckXrg==
age: 58715
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/RnjadfR.js

54.230.111.77

200 OK

641 B

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/RnjadfR.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text
Size
641 B (641 bytes)
Hash
5d88872530c8fb666523d142bd2cb5ad
26ee3d4af945e92a205079ba235a137bc4ec1e4d
81ab0ae1a91719ff533cde317f21b53039d22324fb32a24e8215d5214c883258

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/RnjadfR.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
content-length: 641
last-modified: Sat, 13 Apr 2024 11:30:53 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Mon, 15 Apr 2024 12:32:48 GMT
etag: "5d88872530c8fb666523d142bd2cb5ad"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QVIk9PBx5nNpkjB7bbPwattvRk3cnfHo_MZ15eS1mXqg6QBvXsgtNw==
age: 58716
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot2-2x.png

54.230.111.77

200 OK

144 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot2-2x.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 500 x 1080, 8-bit/color RGBA, non-interlaced
Size
144 kB (144396 bytes)
Hash
dde2b1c31b284bf05a9031d2d6cb18ac
e26f637f1d59328d498efa8bf2800cd087ff5755
f1d82c8ac00d1dc8a48dd1ccf542d1328ccb22022fae0eb7795510514149c657

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/screenshot2-2x.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 144396
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:39 GMT
etag: "dde2b1c31b284bf05a9031d2d6cb18ac"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N9grP-cqFozqyIOAXB4NAS9u_rDh3NS-wWjYqfeNYTyubprmcoJMug==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot4-2x.png

54.230.111.77

200 OK

750 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot4-2x.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 500 x 1080, 8-bit/color RGBA, non-interlaced
Size
750 kB (750006 bytes)
Hash
f48ced889b89d6c38d302adadfff9d67
4b38eed71055a40c80a415dc054bb93e00f2b614
abaa7630ddb5b2ec5b9462be76d5a9afb08175e56a39520389e5c2b83fa41e11

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/screenshot4-2x.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 750006
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:37 GMT
etag: "f48ced889b89d6c38d302adadfff9d67"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JXjiswxonoipTClr6Rq-vlGv8sC6iwTp1Z7Nny5QYCGQIzKH7xaNQg==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot1-2x.png

54.230.111.77

200 OK

620 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/screenshot1-2x.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
PNG image data, 500 x 1080, 8-bit/color RGBA, non-interlaced
Size
620 kB (620436 bytes)
Hash
50c2b4c0d96eda826ff1a4b2d0ca5074
1c2589735385a33d9eee93555dbd067c497bcddd
9cfd2d1d6849315c6c8cc693f365c8a66080d9b98299f400388550b65432eefc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/screenshot1-2x.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: image/png
content-length: 620436
date: Mon, 15 Apr 2024 18:35:12 GMT
last-modified: Thu, 11 Apr 2024 21:18:52 GMT
etag: "50c2b4c0d96eda826ff1a4b2d0ca5074"
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TXIMH6T6Lv3WthK5RJ4E-AqPRx7ky3uUrIjIP3Hgi3nuSh1kQWS_bQ==
age: 36972
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/jMuikimQKjI.js

54.230.111.77

200 OK

58 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/jMuikimQKjI.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (46199)
Size
58 kB (57466 bytes)
Hash
2e7393682c006a662dde175213ebc1ec
8925031ab6ef80616546577e99df99ed8cbb265f
fc26bc872c966aabfd645934f7a43a4fbf1a18c1d4f2dc4291ee79f3c41ad8f8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/jMuikimQKjI.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:35 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"2e7393682c006a662dde175213ebc1ec"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6_9XCGd8hnz_LYWwZDCfIdVEn0HRrBaf6j0mnotnoNfRzUXwPnwxPA==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/nzRrvRgzNjX.js

54.230.111.77

200 OK

72 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/nzRrvRgzNjX.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19300)
Size
72 kB (71675 bytes)
Hash
b4e9318c06c9af078bc78e1c633f3f18
7eb05e5f9cef777f83c8454b3a2276c0eacce136
79d9ac506c16295458070637c5e0db89abe8b0d7f4888a6d069c43673cd698e1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/nzRrvRgzNjX.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:37 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"b4e9318c06c9af078bc78e1c633f3f18"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bFJRwls8qoHpIvIrFvASSUraCgidPNNbTGoFNy9XXyKzHbjXoPkwEw==
age: 66836
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/cBNnczn8-8F.js

54.230.111.77

200 OK

40 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/cBNnczn8-8F.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (10333)
Size
40 kB (39636 bytes)
Hash
07789c882b8a4dd0728d917cb325bea8
192f861527abc246da785a34389b1239922f2b1d
9866e634eb66ee0ab3ca21006dbe1f18fa8aed7008919dcdb16f347185ac8dd9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/cBNnczn8-8F.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:43 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"07789c882b8a4dd0728d917cb325bea8"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dfDgB21TKQx4d_NR4sqHqpEHg53SzIO6Jk2AkHinGPtMBLMjnZRJnQ==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/5DLg5h3KVN4.js

54.230.111.77

200 OK

161 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/5DLg5h3KVN4.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (46957)
Size
161 kB (160936 bytes)
Hash
7a27c66dff670f56ec591fc0af13f81d
992ef3306ce296cce95e70bb9697712d505b0a73
21a6bd41114b6a0312534c7dee299e127f941ee9646b6fb6bbfb9deac8ee044a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/5DLg5h3KVN4.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
date: Tue, 16 Apr 2024 04:51:24 GMT
last-modified: Thu, 11 Apr 2024 21:18:50 GMT
etag: W/"7a27c66dff670f56ec591fc0af13f81d"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LUSYStgw1yrF5yts3KmlpDnhFnNJ9og6RbY93JqHHuQ6573rV0byTw==
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/OS4XiGf8B3JRAtLTl45A93Szy3QSKi4t7OL-_9LKU49WUQkbzpsviI2DPMHRyQBeiW_YrvEw8S_cL6FX6W_V-V5GjguKC_Wj_S7.js

54.230.111.77

200 OK

55 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/OS4XiGf8B3JRAtLTl45A93Szy3QSKi4t7OL-_9LKU49WUQkbzpsviI2DPMHRyQBeiW_YrvEw8S_cL6FX6W_V-V5GjguKC_Wj_S7.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (31563)
Size
55 kB (55325 bytes)
Hash
3a012644d74ec999debe47918a5bf37a
cb15ae17db295c88ef9b9fb85bbc59aded7e452d
22127ede297876360ab1fa65d3c57338a99a10d7484f5a0f687339a9694ad6ce

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/OS4XiGf8B3JRAtLTl45A93Szy3QSKi4t7OL-_9LKU49WUQkbzpsviI2DPMHRyQBeiW_YrvEw8S_cL6FX6W_V-V5GjguKC_Wj_S7.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:50 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"3a012644d74ec999debe47918a5bf37a"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ir3nRpkYsPvbzCQ4-BbCaJd4nxlU5HlAQC9Z6LG-YBT1K8IB1xQ0SQ==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/R4Tyoeq-PQV.js

54.230.111.77

200 OK

27 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/R4Tyoeq-PQV.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (7990)
Size
27 kB (27028 bytes)
Hash
1bec227a9d0ee5a6cec1461bc0dd4e1f
6f0fc3590f9173ffdfcccd07c1ce6f78ff10f990
f7a3f48de8e7763aaa46a3689c1085653992d9620a848cdbf4be6e013df88fdf

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/R4Tyoeq-PQV.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:38 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"1bec227a9d0ee5a6cec1461bc0dd4e1f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _oMIJuFPHDMz1DRj8FVfZuzFRg0GIhzDKIhKCUjr9H4NL31ULCSPOQ==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/f9gIZ_x1JUR.css

54.230.111.77

200 OK

174 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/f9gIZ_x1JUR.css
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (59708)
Size
174 kB (174481 bytes)
Hash
7b54f4ce97be7aa0c90e9233978f4dfb
9cb1f590252d91d6b86e60a441fd6bcb2affe34a
a068eeaf5d7549b86ff6c263afbc3b73f2f14ac4a1a5fd0a7ab70adb1f96c930

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/f9gIZ_x1JUR.css HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 11 Apr 2024 21:18:44 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"7b54f4ce97be7aa0c90e9233978f4dfb"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BCUs5ukrLVxXu1rdazX52OT9e_SMMH2leztcgrrBLzJgeowjNq7TlA==
age: 66836
X-Firefox-Spdy: h2

ocsp.r2m03.amazontrust.com/

54.230.218.11

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
54.230.218.11:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
dcdec2380be4bdd7feab811a5f8d19c3
567561ea2652414de428961efb4c5c31cbae82b2
c5524bc11b51b7f1d3ef613d6d4add8df4aeee331609d740e664e52a047fc715

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Tue, 16 Apr 2024 04:51:24 GMT
Last-Modified: Tue, 16 Apr 2024 04:03:31 GMT
Server: ECAcc (ska/F73C)
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oGwvHeXQSvSZFhH5m2ysyS0oCJOyeVsbaEnPDQFFKVmUYP68K3uhoA==
Age: 2873

static.cdninstagram.com/rsrc.php/v3/yI/r/VsNE-OHk_8a.png

31.13.72.53

200 OK

1.8 kB

URL GET HTTP/3
static.cdninstagram.com/rsrc.php/v3/yI/r/VsNE-OHk_8a.png
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
FingerprintD8:BA:61:78:22:A8:CE:92:96:14:47:F7:91:2E:1F:2C:34:CE:9A:E7
ValidityWed, 24 Jan 2024 00:00:00 GMT - Tue, 23 Apr 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Size
1.8 kB (1772 bytes)
Hash
5fddd61c351f6618b787afaea041831b
388ddf3c6954dee2dd245aec7bccedf035918b69
fdc2ac0085453fedb24be138132b4858add40ec998259ae94fafb9decd459e69

HTTP Headers

GET /rsrc.php/v3/yI/r/VsNE-OHk_8a.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: X93WHDUfZhi3h6+uoEGDGw==
expires: Sun, 06 Apr 2025 02:17:15 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
x-fb-debug: oleAGI4wEr6cpVr64Dl9veZnPrUkdl3BNJL/vkJFPUHy4hKq0ALVW6nktQUU6XCjftydj4k4XS0I4iKmq+PkpA==
content-length: 1772
date: Tue, 16 Apr 2024 04:51:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=16, rtx=0, c=34, mss=1232, tbw=5099, tp=10, tpl=0, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
priority: u=6

static.cdninstagram.com/rsrc.php/y4/r/QaBlI0OZiks.ico

31.13.72.53

200 OK

2.2 kB

URL GET HTTP/3
static.cdninstagram.com/rsrc.php/y4/r/QaBlI0OZiks.ico
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
FingerprintD8:BA:61:78:22:A8:CE:92:96:14:47:F7:91:2E:1F:2C:34:CE:9A:E7
ValidityWed, 24 Jan 2024 00:00:00 GMT - Tue, 23 Apr 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
2.2 kB (2214 bytes)
Hash
c3431d927d91a0a9e9a538ce6c98c6b0
95e8c80ee4b90b8157b1350248f5e3ea26e9644e
d31ce478c9729130303a3537a43906bc8164debf5546f7ad4d1beed9d9b2c630

HTTP Headers

GET /rsrc.php/y4/r/QaBlI0OZiks.ico HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: image/x-icon
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: w0Mdkn2RoKnppTjObJjGsA==
expires: Sun, 06 Apr 2025 04:31:35 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
x-fb-debug: bI+6oBNY5x2rJDPaAmJQ8tspy4NPIJpkYeBQoTwNTLXoo2zon5RYreFsPIywJpwy+cN/Z9/LoYlb6y2Mja0k2A==
content-length: 2214
date: Tue, 16 Apr 2024 04:51:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=16, rtx=0, c=34, mss=1232, tbw=8171, tp=14, tpl=0, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
priority: u=6

d2tha2b8l1annb.cloudfront.net/Instagram_files/28E4yD2rhFw.js

54.230.111.77

200 OK

133 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/28E4yD2rhFw.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19833)
Size
133 kB (133301 bytes)
Hash
e81ed4f2d91d54c1a6e28d5cea6f3f9d
6c2f67d131e64889f21f399ccd0dafd2421272a1
79ea553d8244420c9abb73ab23bd5be6c2cb9f5ea678aa2fdd86cb2c0f05705c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/28E4yD2rhFw.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:41 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"e81ed4f2d91d54c1a6e28d5cea6f3f9d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _6kNnfrGqfBwjTIIi1a1fNZtHiSdAzPvv3xBieGEKm_2PXhK898sxA==
age: 66836
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/rsrc.php/v3/y5/r/TJztmXpWTmS.png

54.230.111.77

404 Not Found

7.5 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/rsrc.php/v3/y5/r/TJztmXpWTmS.png
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
XML 1.0 document, ASCII text, with very long lines (7478)
Size
7.5 kB (7517 bytes)
Hash
ef71f4cf271e4ebec2c10aa946827bd5
22f301926e8380fbf1de228ed13cc9a2ef69abad
8c23d67e6a58830b3386f8837670cc96f63f6efcf4c5db36b096456e6232c141

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /rsrc.php/v3/y5/r/TJztmXpWTmS.png HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/Instagram_files/f9gIZ_x1JUR.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
content-type: application/xml
date: Tue, 16 Apr 2024 04:51:23 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fd3mhJJk0ycAZjc2eq2Jpc0zWu9c6f8JvOymFj378ciLkRZEay_OuQ==
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/8yXQFgh-Mlh.js

54.230.111.77

200 OK

43 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/8yXQFgh-Mlh.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6543)
Size
43 kB (42667 bytes)
Hash
a929ed4ce2d792f0f51468db0fe51b52
0b903469a08e0f92ac00f796ac986b81231ca9ea
489ee13d8605131e9c400842003aa4c4fb92ffa02e0846e17befae687929c421

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/8yXQFgh-Mlh.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:40 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"a929ed4ce2d792f0f51468db0fe51b52"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fPg9g4P0u5NMBy0CH3agSpv5q8anZR51LcWiaIAjNS-oU-jKEH1nrQ==
age: 59535
X-Firefox-Spdy: h2

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-101-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-05-20-00-15-28.chain; p384ecdsa=0fHDqeK5FotewkqQZePtPkf8XNs2C3q3M2rHxMVdN_BHkFAEcKAi7eMBLbVVRBARL7yA6WXiOQ5nTb3t1LSGQNCdjhQ1Hg8r_xtmjXBUHCSMpQ3xeJ1lXWC0eK6IZ9OJ
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Tue, 16 Apr 2024 04:51:16 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 26
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/YulU4y6XRqd.js

54.230.111.77

200 OK

78 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/YulU4y6XRqd.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11317)
Size
78 kB (77789 bytes)
Hash
88e2fc81929838b735a343b8f134556d
60b1b2f9404c6282b847ef763f7d69471a94ecdc
96bac9eda603493eb863a474961f83a9bdfb91b5c8511505f0996a617f076ecc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/YulU4y6XRqd.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:48 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"88e2fc81929838b735a343b8f134556d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GdTu1-KWgzYD5rgFjRZMA52o_Hv661jOfFtZzxR6o0IQPYDyYfztAQ==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/wMX1SRmuPgU.js

54.230.111.77

200 OK

172 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/wMX1SRmuPgU.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (47309)
Size
172 kB (172361 bytes)
Hash
024b1e572c03685fe4ec7299943bfe03
8f014207819cda7433b85aab795eda9578467807
cb105f383f1c8c4e49513ece1bbf600aedd0b7c0c463d2e5e2a533cb7cd02c60

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/wMX1SRmuPgU.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:46 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"024b1e572c03685fe4ec7299943bfe03"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m5RdRNCHbpl2dk5kpJBhrzNrsLcvLMduN7mrWdhWvMVJgMn-jRf5Vg==
age: 59535
X-Firefox-Spdy: h2

static.cdninstagram.com/rsrc.php/v3/yM/r/8n91YnfPq0s.png

31.13.72.53

200 OK

7.8 kB

URL GET HTTP/2
static.cdninstagram.com/rsrc.php/v3/yM/r/8n91YnfPq0s.png
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
FingerprintD8:BA:61:78:22:A8:CE:92:96:14:47:F7:91:2E:1F:2C:34:CE:9A:E7
ValidityWed, 24 Jan 2024 00:00:00 GMT - Tue, 23 Apr 2024 23:59:59 GMT

File type
PNG image data, 176 x 258, 8-bit colormap, non-interlaced
Size
7.8 kB (7770 bytes)
Hash
ff150c88ad8f6ddf0de2c9bc71e825de
219d11823232f972015cbd0a4465c1163e77f6b8
3c872bf3a6e0470d517b154027b379cd5031f3d00abd3e4f96da8bff77e09ba3

HTTP Headers

GET /rsrc.php/v3/yM/r/8n91YnfPq0s.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: /xUMiK2Pbd8N4sm8cegl3g==
expires: Sat, 05 Apr 2025 02:25:03 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
origin-agent-cluster: ?0
x-fb-debug: ooU/KoodPbauKAxCCJi/ns7btChDpNI1Go2oviLmofVDrLgZdpOi5XCDT0gXTaoRt5lyWsk0yoNB/OMndJqDxA==
content-length: 7770
date: Tue, 16 Apr 2024 04:51:24 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1380, tbw=3414, tp=-1, tpl=-1, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/oKdcG6IZ3XvhOjgmxmSmbJcFQdG1GOTYNcZtDF6kpo1BqRl602k3b_gBYBHirbomYf1KCDYM51FtDc7cKIItSAeVHzzQyzZ3zNRu9xcXTmwcxeKOfiw_6dRL-6UZ9oGBHPV75Ppx2hs_Ch8mgHFcoJWfq1x9xpxp86d5GOnmSaduO8mPcRYoJlGbYMGS_38TchtxxXQ4qAPa9z16RymGTYN0C7-OTa-ZDR8RuD29tQNGwiH18CvsWqehdEtW.js

54.230.111.77

200 OK

3.4 MB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/oKdcG6IZ3XvhOjgmxmSmbJcFQdG1GOTYNcZtDF6kpo1BqRl602k3b_gBYBHirbomYf1KCDYM51FtDc7cKIItSAeVHzzQyzZ3zNRu9xcXTmwcxeKOfiw_6dRL-6UZ9oGBHPV75Ppx2hs_Ch8mgHFcoJWfq1x9xpxp86d5GOnmSaduO8mPcRYoJlGbYMGS_38TchtxxXQ4qAPa9z16RymGTYN0C7-OTa-ZDR8RuD29tQNGwiH18CvsWqehdEtW.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type

Size
3.4 MB (3386883 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/oKdcG6IZ3XvhOjgmxmSmbJcFQdG1GOTYNcZtDF6kpo1BqRl602k3b_gBYBHirbomYf1KCDYM51FtDc7cKIItSAeVHzzQyzZ3zNRu9xcXTmwcxeKOfiw_6dRL-6UZ9oGBHPV75Ppx2hs_Ch8mgHFcoJWfq1x9xpxp86d5GOnmSaduO8mPcRYoJlGbYMGS_38TchtxxXQ4qAPa9z16RymGTYN0C7-OTa-ZDR8RuD29tQNGwiH18CvsWqehdEtW.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:45 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"386c77125515053aab49fcccb03298f0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: fQUFYu1qvWpY4QHunZfTR5Vd4LJ40FS0Se7N0uEJyTnGpcM3zGZdPg==
age: 66836
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/WPrndevEYn8zyEpb6SJKFF.css

54.230.111.77

200 OK

6.9 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/WPrndevEYn8zyEpb6SJKFF.css
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
ASCII text, with very long lines (6901), with no line terminators
Size
6.9 kB (6898 bytes)
Hash
3059e29c51252f98157b5b94eca8e4a9
bd4a4c5e50fab4a3a14c5e2bd869621c243c2f7c
ae6499ec6786fc843295ac68d6af08595bf0400dec1a58814845c5303b09164b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/WPrndevEYn8zyEpb6SJKFF.css HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css
date: Tue, 16 Apr 2024 04:51:24 GMT
last-modified: Thu, 11 Apr 2024 21:18:47 GMT
etag: W/"7a64c7c2c16bc47817a7221421285282"
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LV-uxzrcoHvgAkhDB_3AddsXtkKzEg59NtB57K3S6mCWNx81cEQnfw==
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/images/instagram/xig/homepage/phones/home-phones.png?__makehaste_cache_breaker=HOgRclNOosk

54.230.111.77

404 Not Found

323 B

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/images/instagram/xig/homepage/phones/home-phones.png?__makehaste_cache_breaker=HOgRclNOosk
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
XML document, ASCII text, with very long lines (328), with no line terminators
Size
323 B (323 bytes)
Hash
b5e3f3169794df99904b2aa045da88ff
e29bbb30eb4b158be127733b5fb9bf1fccfec544
b7f67d52ed8ec056697781187556996191c7b417df32ee52171743ab243cd614

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /images/instagram/xig/homepage/phones/home-phones.png?__makehaste_cache_breaker=HOgRclNOosk HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/Instagram_files/f9gIZ_x1JUR.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
content-type: application/xml
date: Tue, 16 Apr 2024 04:51:24 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5L4MZ-rbP1nYPImLIuxp5FMvF_Y64lgieMgJ_cFLtphfe63WJmFCkQ==
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/Qvo3mvaifH4.js

54.230.111.77

200 OK

314 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/Qvo3mvaifH4.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (10650)
Size
314 kB (313759 bytes)
Hash
c1298325e3170d7530ecd2b1fbb68326
3e388b021557d05e80f6d832fdd24adc9aab20b3
99b61e57507357c5610808582e7d1b77e434f4cca8fdb1c3d62577af275f1625

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/Qvo3mvaifH4.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:53 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"c1298325e3170d7530ecd2b1fbb68326"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dotCX0ojgQ9j_vmH_oNJjuN7R-DlPEMrfgotQeDZHenBnzRSjpR6gw==
age: 66836
X-Firefox-Spdy: h2

gkfvgy4nqjpmmfaeirly7zwzsu0spdvb.lambda-url.eu-west-1.on.aws/

54.72.244.91

404 Not Found

0 B

URL POST HTTP/1.1
gkfvgy4nqjpmmfaeirly7zwzsu0spdvb.lambda-url.eu-west-1.on.aws/
IP
54.72.244.91:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.lambda-url.eu-west-1.on.aws
Fingerprint71:06:19:6E:C3:C7:B2:BE:00:86:80:59:74:03:94:24:60:F3:1A:A6
ValidityWed, 27 Dec 2023 00:00:00 GMT - Sat, 25 Jan 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST / HTTP/1.1
Host: gkfvgy4nqjpmmfaeirly7zwzsu0spdvb.lambda-url.eu-west-1.on.aws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://d2tha2b8l1annb.cloudfront.net/
Content-Type: text/plain;charset=UTF-8
Content-Length: 269
Origin: https://d2tha2b8l1annb.cloudfront.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Date: Tue, 16 Apr 2024 04:51:24 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
x-amzn-RequestId: 9ecb35bf-aab7-4695-a7cb-7365c5ec470e
Access-Control-Allow-Origin: https://d2tha2b8l1annb.cloudfront.net
Vary: Origin
X-Amzn-Trace-Id: root=1-661e03cc-52114bb63c68e1311ab3601f;parent=1098f3e62b9504f9;sampled=0;lineage=70b66c32:0
Access-Control-Allow-Credentials: true

d2tha2b8l1annb.cloudfront.net/

54.230.111.77

200 OK

329 kB

URL User Request GET HTTP/2
d2tha2b8l1annb.cloudfront.net/
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type

Size
329 kB (328923 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET / HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html
last-modified: Sun, 14 Apr 2024 10:13:00 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"36f9f8347974bde3dc87f8614adac55d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -PHdvmOH5y7xZbxcHy1PY40sAe363TdtETjj06G3fOQOqrnjAa6h3Q==
age: 66836
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/45aM1KN9e6A.js

54.230.111.77

200 OK

1.0 MB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/45aM1KN9e6A.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (8707)
Size
1.0 MB (1019620 bytes)
Hash
c279b97871027e365ff1653fc6092a20
18f341e6250f0a5b21823dc7e50b8ba165c8360d
8f8c3faaadf01476ca91ea7c1c1a54d4134f779a953e1f2715e811b782cb28cb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/45aM1KN9e6A.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:42 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 10:17:28 GMT
etag: W/"c279b97871027e365ff1653fc6092a20"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eUbBcrHW0GmPD1WUmlOcot3voxhKtwX49TEFNRt8Is9WH0u-QGtenA==
age: 66836
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/Instagram_files/E2a9WfQDMxE.js

54.230.111.77

200 OK

1.6 kB

URL GET HTTP/2
d2tha2b8l1annb.cloudfront.net/Instagram_files/E2a9WfQDMxE.js
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (1653), with no line terminators
Size
1.6 kB (1577 bytes)
Hash
9fddfed037fc1b6aaa62020be9396152
666f1193954c466c2fd2c52723d923fe798b1086
14aa6fe131d7347bd8f116381fde4d00ad9ffd65a35183bbc72bc8e73909df30

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /Instagram_files/E2a9WfQDMxE.js HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript
last-modified: Thu, 11 Apr 2024 21:18:36 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
content-encoding: br
date: Mon, 15 Apr 2024 12:19:09 GMT
etag: W/"1ce5e2c18396dccf8a67a5474fe4ec55"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yQn2U7PNycEWg1AruZd7PkPIGnyN7B1_KQ5qS29UQ9VKI14GNv2_cg==
age: 59535
X-Firefox-Spdy: h2

d2tha2b8l1annb.cloudfront.net/ajax/qm/?__a=1&__user=0&__comet_req=7&jazoest=2975

54.230.111.77

403 Forbidden

1.1 kB

URL POST HTTP/2
d2tha2b8l1annb.cloudfront.net/ajax/qm/?__a=1&__user=0&__comet_req=7&jazoest=2975
IP
54.230.111.77:443
ASN
#16509 AMAZON-02

Requested by
https://d2tha2b8l1annb.cloudfront.net/
Certificate
IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (1088), with no line terminators
Size
1.1 kB (1053 bytes)
Hash
cc65cf65189a896726275a550840daa4
84cff74af67f637fac2342299db7dd190b9a1021
e4e13833e17835ab57e8f2f31b779f354194f45993bb83ea0ae9cd7528060b5f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

POST /ajax/qm/?__a=1&__user=0&__comet_req=7&jazoest=2975 HTTP/1.1
Host: d2tha2b8l1annb.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 105
Origin: https://d2tha2b8l1annb.cloudfront.net
DNT: 1
Connection: keep-alive
Referer: https://d2tha2b8l1annb.cloudfront.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

HTTP/2 403 Forbidden
server: CloudFront
date: Tue, 16 Apr 2024 04:51:24 GMT
content-type: text/html
content-length: 1053
x-cache: Error from cloudfront
via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8i3qw234toUqAFWawQBQUNx-ny2Dw9qxHaAQuloqWLfpdGkkRHPlag==
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (23)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML