| GET instagram-nine-lyart.vercel.app/script.js | 64.29.17.1 | 200 OK | 612 B |
URL GET HTTP/2instagram-nine-lyart.vercel.app/script.js IP 64.29.17.1:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4 ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT
Hashfd75e1fab5597b8a7eeb431ee97e69a8 6d41e54ea0b3662148e31d1bc057e0786bae3f26 bbbaebe2380433624263065d8b8728e1519d747ae4d922e6a60ab5e8449a789d
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Instagram | urlquery | suspicious | Suspicious - Suspicious Javascript code | YARAhub by abuse.ch | malware | Detects file containing Telegram Bot API | OpenPhish | phishing | Instagram | Quad9 DNS | malicious | Sinkholed |
GET /script.js HTTP/1.1
Host: instagram-nine-lyart.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 130431
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="script.js"
content-type: application/javascript; charset=utf-8
date: Thu, 23 Jan 2025 11:51:26 GMT
etag: "fd75e1fab5597b8a7eeb431ee97e69a8"
last-modified: Tue, 21 Jan 2025 23:37:34 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::8t2p5-1737633086527-e1ada82723f6
content-length: 612
X-Firefox-Spdy: h2
|
|
| GET cdn.jsdelivr.net/npm/axios@1.1.2/dist/axios.min.js | 151.101.1.229 | 200 OK | 10 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/axios@1.1.2/dist/axios.min.js IP 151.101.1.229:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT
File typeJavaScript source, ASCII text, with very long lines (26541) Hash68b395fd3cd02432ec6ce3a4a34332c0 69edb681673e5ad794d33f9f05b8b08ea940c13b ffb6e270a7bbb1ea1b797965ae85e35760b38b98744478a4151ddee79a31d215
GET /npm/axios@1.1.2/dist/axios.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.1.2
x-jsd-version-type: version
etag: W/"67d4-ae22gWc+WteU0z+fBbiwjqlAwTs"
content-encoding: br
accept-ranges: bytes
date: Thu, 23 Jan 2025 11:51:26 GMT
age: 3207393
x-served-by: cache-fra-eddf8230112-FRA, cache-hel1410031-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10349
X-Firefox-Spdy: h2
|
|
| GET static.cdninstagram.com/rsrc.php/v3/yr/r/fDjwyLC88oO.png | 31.13.72.53 | 200 OK | 6.4 kB |
URL GET HTTP/2static.cdninstagram.com/rsrc.php/v3/yr/r/fDjwyLC88oO.png IP 31.13.72.53:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerDigiCert Inc Subject*.instagram.com Fingerprint1A:CA:71:D0:AB:AC:BE:62:2F:34:79:4F:42:48:D0:D5:F0:A7:49:A7 ValidityFri, 01 Nov 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT
File typePNG image data, 564 x 168, 8-bit colormap, non-interlaced Hash958ef0eea8ba87cb1066b39950b67cb4 9b7946fd2281a2a2176ecdd6e90b15aa7894733e 2b2208bc9046a5b7c16261bc83f8b8da79b865e568129036ac65b0979ee10ef9
GET /rsrc.php/v3/yr/r/fDjwyLC88oO.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: lY7w7qi6h8sQZrOZULZ8tA==
expires: Thu, 22 Jan 2026 21:46:29 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
origin-agent-cluster: ?1
x-fb-debug: aIjlqDMa1S/IjwRAGWDHQVGvYk3xueWffZCVphMG9Lf1HXgv76BeXWCf2OuKorGaa8YaX4CUX+/hVsvT/9aYQw==
content-length: 6357
date: Thu, 23 Jan 2025 11:51:26 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=13, mss=1380, tbw=3335, tp=-1, tpl=-1, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET static.cdninstagram.com/rsrc.php/v3/yv/r/_UbeIRgTpG-.png | 31.13.72.53 | 200 OK | 9.8 kB |
URL GET HTTP/2static.cdninstagram.com/rsrc.php/v3/yv/r/_UbeIRgTpG-.png IP 31.13.72.53:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerDigiCert Inc Subject*.instagram.com Fingerprint1A:CA:71:D0:AB:AC:BE:62:2F:34:79:4F:42:48:D0:D5:F0:A7:49:A7 ValidityFri, 01 Nov 2024 00:00:00 GMT - Thu, 30 Jan 2025 23:59:59 GMT
File typePNG image data, 864 x 312, 8-bit colormap, non-interlaced Hash413cf0140654cc8792dde297f4359021 77205c274ae200abe77f3c2e5c51986a0bf3f8eb 149e05bd820a77c3346ed4bda7f6ef27e92a5703ef4115d1656cb8f2aee560bd
GET /rsrc.php/v3/yv/r/_UbeIRgTpG-.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: QTzwFAZUzIeS3eKX9DWQIQ==
expires: Thu, 22 Jan 2026 15:53:10 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
origin-agent-cluster: ?1
x-fb-debug: 2Q+DfyOTTgVXmOdEbUSYc4j84UiSuc03nXVpTyZSk6yBxHIw3yj7oE2uXgjdhNanP4K+AvPyt5ZpzN/lUvPtCw==
content-length: 9801
date: Thu, 23 Jan 2025 11:51:26 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=20, rtx=0, c=13, mss=1380, tbw=11192, tp=-1, tpl=-1, uplat=0, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET instagram-nine-lyart.vercel.app/style.css | 64.29.17.1 | 200 OK | 1.1 kB |
URL GET HTTP/2instagram-nine-lyart.vercel.app/style.css IP 64.29.17.1:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerLet's Encrypt Subject*.vercel.app Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4 ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT
File typeASCII text, with CRLF line terminators Hash7fd1aa4363956b894574de7c1f76a448 b191cd1874962e718bf3145d1b3210b9af90a3b7 9ad27560e6b8078ac579fd01b62d13a498b26fe8cec763de94f6786a6f438329
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Instagram | OpenPhish | phishing | Instagram | Quad9 DNS | malicious | Sinkholed |
GET /style.css HTTP/1.1
Host: instagram-nine-lyart.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
age: 130431
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="style.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Thu, 23 Jan 2025 11:51:26 GMT
etag: W/"7fd1aa4363956b894574de7c1f76a448"
last-modified: Tue, 21 Jan 2025 23:37:34 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::r9p4f-1737633086523-4eda7e5f2a57
X-Firefox-Spdy: h2
|
|
| GET encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQN0E-Vjx6bN6USkW3i6UrZnEdvfHOZApBKaw&usqp=CAU | 142.250.74.174 | 200 OK | 1.3 kB |
URL GET HTTP/2encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQN0E-Vjx6bN6USkW3i6UrZnEdvfHOZApBKaw&usqp=CAU IP 142.250.74.174:443
Requested byhttps://instagram-nine-lyart.vercel.app/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2 ValidityMon, 09 Dec 2024 08:37:20 GMT - Mon, 03 Mar 2025 08:37:19 GMT
File typePNG image data, 225 x 225, 8-bit colormap, non-interlaced Hashd849ea28c1c6358d59818d4842701cd6 4e5dd0c689c78fd419606f76524e28162176d662 e3caf7d745057a179881a70cf5525aaf937268ce5570e609741314b33077808f
GET /images?q=tbn:ANd9GcQN0E-Vjx6bN6USkW3i6UrZnEdvfHOZApBKaw&usqp=CAU HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://instagram-nine-lyart.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 1326
date: Thu, 23 Jan 2025 11:51:27 GMT
expires: Fri, 23 Jan 2026 11:51:27 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Jul 2019 01:03:48 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET instagram-nine-lyart.vercel.app/ | 64.29.17.1 | 200 OK | 17 kB |
URL User Request GET HTTP/2instagram-nine-lyart.vercel.app/ IP 64.29.17.1:443
CertificateIssuerLet's Encrypt Subject*.vercel.app Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4 ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Instagram | OpenPhish | phishing | Instagram | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: instagram-nine-lyart.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
age: 130431
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Thu, 23 Jan 2025 11:51:26 GMT
etag: W/"f8da0344f44204831c4917075c20b6ac"
last-modified: Tue, 21 Jan 2025 23:37:34 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::dlhlw-1737633086070-cd444bef6a0b
X-Firefox-Spdy: h2
|
|