Report - guillxr.github.io/instagram-page/

Report Overview

Visited public
2025-04-26 14:21:11
Tags
instagram meta social phishing
URL
guillxr.github.io/instagram-page/
Finishing URL
guillxr.github.io/instagram-page/
IP / ASN
185.199.108.153
#54113 FASTLY
Title
Instagram
Phishing - Instagram

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
guillxr.github.io	unknown	2013-03-08	2025-04-24	2025-04-24	2.8 kB	211 kB	185.199.108.153
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-04-23	1.6 kB	123 kB	142.250.74.35
cdnjs.cloudflare.com	235	2009-02-17	2012-05-23	2025-04-23	451 B	2.9 kB	104.17.25.14
static.cdninstagram.com	61231	2014-05-01	2017-02-22	2025-04-26	1.4 kB	352 kB	31.13.72.53
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-04-23	526 B	68 kB	142.250.178.42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-24	medium	guillxr.github.io/instagram-page/	Instagram

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (14)

URL IP Response Size

guillxr.github.io/instagram-page/assets/css/styles.css

185.199.108.153

200 OK

4.0 kB

URL GET
guillxr.github.io/instagram-page/assets/css/styles.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
ASCII text
Size
4.0 kB (4038 bytes)
Hash
7f2b21898bfeacae34a91e0d089b3214
a3f3478f82f596543b7692eb1229f2b79375c17f
421c06b285b4057e6d1ece3be1db26c4502724e9b1bf75efad332b84fff7aaac

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

GET /instagram-page/assets/css/styles.css HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/instagram-page/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sat, 20 Jul 2024 23:56:24 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"669c4ea8-fc6"
expires: Sat, 26 Apr 2025 14:30:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 676E:2926:22895EA:22DC0C6:680CEBC2
accept-ranges: bytes
date: Sat, 26 Apr 2025 14:20:50 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677251.837876,VS0,VE130
vary: Accept-Encoding
x-fastly-request-id: fa53f7416012521aeefcafbb3751c297b17becf0
content-length: 1126
X-Firefox-Spdy: h2

guillxr.github.io/instagram-page/assets/images/screenshot.png

185.199.108.153

200 OK

177 kB

URL GET
guillxr.github.io/instagram-page/assets/images/screenshot.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
PNG image data, 250 x 541, 8-bit/color RGBA, non-interlaced
Size
177 kB (176752 bytes)
Hash
7fde4dad3b60a5a6f89f81aad821e33a
586783872936a8de6fcb8bb99e28b9bf964e84c1
5845ba9b16bde454793e65d35fe16eedf485c7c6e485c22c518cb2db64208a2e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

GET /instagram-page/assets/images/screenshot.png HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/instagram-page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sat, 20 Jul 2024 23:56:24 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "669c4ea8-2b270"
expires: Sat, 26 Apr 2025 14:30:50 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: E56E:38E151:22000B4:2252889:680CEBC2
accept-ranges: bytes
age: 0
date: Sat, 26 Apr 2025 14:20:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677251.840222,VS0,VE144
vary: Accept-Encoding
x-fastly-request-id: e369d930ada3301a8597323244742788aa86bdd8
content-length: 176752
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2

142.250.74.35

200 OK

40 kB

URL GET
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint62:27:9C:C9:95:FF:8F:83:34:D0:B1:42:CB:B7:63:C0:8E:6F:3E:F1
ValidityMon, 31 Mar 2025 08:55:41 GMT - Mon, 23 Jun 2025 08:55:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Size
40 kB (40128 bytes)
Hash
9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2

HTTP Headers

GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://guillxr.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Apr 2025 10:03:46 GMT
expires: Fri, 24 Apr 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 188225
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/normalize/8.0.1/normalize.min.css

104.17.25.14

200 OK

1.9 kB

URL GET
cdnjs.cloudflare.com/ajax/libs/normalize/8.0.1/normalize.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerGoogle Trust Services
Subjectcdnjs.cloudflare.com
Fingerprint5D:9B:5B:BE:24:B7:4B:CA:F3:05:47:2F:AB:3F:3C:F7:4E:C3:4D:BC
ValidityMon, 24 Mar 2025 12:00:12 GMT - Sun, 22 Jun 2025 13:00:01 GMT

File type
ASCII text, with very long lines (1815)
Size
1.9 kB (1861 bytes)
Hash
36974225aa51d7b413c9a1cfb22e9c06
fe4f3f561d5bd50a21bdde90ec7d0e3efff061bf
97ce4e98f3a3be297f48ebd5b771e74928f31754d43324fd795d1cd81cc41b35

HTTP Headers

GET /ajax/libs/normalize/8.0.1/normalize.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://guillxr.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 26 Apr 2025 14:20:50 GMT
content-type: text/css; charset=utf-8
content-length: 633
server: cloudflare
strict-transport-security: max-age=15780000
cf-ray: 9366b921ec007129-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03f2b-745"
last-modified: Mon, 04 May 2020 16:13:31 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1246037
expires: Thu, 16 Apr 2026 14:20:50 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TS5%2B7%2BO8bDFKMKTQ5pi2N9XwftwFSCUUpK5VmYC050RxRe7jD0E1iEnfh6HXF7CiLEcft%2B3Jwu3QOwZqrXALjCFO1m9AfseJEKhoNezmEZtf4mf1O0OWuy4QTNe93h6UdZElEu8Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

guillxr.github.io/instagram-page/assets/css/global.css

185.199.108.153

200 OK

249 B

URL GET
guillxr.github.io/instagram-page/assets/css/global.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
ASCII text
Size
249 B (249 bytes)
Hash
755f441c027c0422fd2759229b7b0873
b425feaeeec3b22ec062f65227304b8d1f2c29da
9da3ade5f8cd892c884e3155600097f832a3a260ec163358df776aa7a0eef879

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

GET /instagram-page/assets/css/global.css HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/instagram-page/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sat, 20 Jul 2024 23:56:24 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "669c4ea8-f9"
expires: Sat, 26 Apr 2025 14:30:50 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3562:620F4:22BB836:230E1C5:680CEBC2
accept-ranges: bytes
age: 0
date: Sat, 26 Apr 2025 14:20:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677251.836265,VS0,VE132
vary: Accept-Encoding
x-fastly-request-id: 31a75ab806a8cd512361f58a92bcb253f75d428b
content-length: 249
X-Firefox-Spdy: h2

guillxr.github.io/instagram-page/assets/images/name.webp

185.199.108.153

200 OK

12 kB

URL GET
guillxr.github.io/instagram-page/assets/images/name.webp
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
RIFF (little-endian) data, Web/P image
Size
12 kB (12198 bytes)
Hash
43282540a30e361dce4fbe6f889e3d77
f8ba95e4a79a8af977cab81e0a93768b145a198b
8baf81d9c1b173862e37a2db86082df22eecea094e40a39411d0d65526443af9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

GET /instagram-page/assets/images/name.webp HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/instagram-page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: image/webp
permissions-policy: interest-cohort=()
last-modified: Sat, 20 Jul 2024 23:56:24 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "669c4ea8-2fa6"
expires: Sat, 26 Apr 2025 14:30:50 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 52AF:11AC:19C64E3:1A0698A:680CEBC2
accept-ranges: bytes
age: 0
date: Sat, 26 Apr 2025 14:20:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677251.841354,VS0,VE147
vary: Accept-Encoding
x-fastly-request-id: 0b6cf3e218092a41bcfe89c3bbbef620a6a82e13
content-length: 12198
X-Firefox-Spdy: h2

guillxr.github.io/favicon.ico

185.199.108.153

404 Not Found

9.1 kB

URL GET
guillxr.github.io/favicon.ico
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
9.1 kB (9115 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/instagram-page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"6801765c-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 23F6:38E151:2200188:225295F:680CEBC0
accept-ranges: bytes
age: 0
date: Sat, 26 Apr 2025 14:20:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677251.241327,VS0,VE118
vary: Accept-Encoding
x-fastly-request-id: f5d2345c8be2ac54fff2a4d2cfb313ba9fe70f1c
content-length: 5142
X-Firefox-Spdy: h2

static.cdninstagram.com/images/instagram/xig/homepage/phones/home-phones-2x.png?__makehaste_cache_breaker=73SVAexZgBW

31.13.72.53

200 OK

333 kB

URL GET
static.cdninstagram.com/images/instagram/xig/homepage/phones/home-phones-2x.png?__makehaste_cache_breaker=73SVAexZgBW
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
Fingerprint33:9B:24:51:EC:DC:FC:80:95:4A:23:4C:BF:48:A3:75:88:9A:42:32
ValidityThu, 20 Mar 2025 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT

File type
PNG image data, 929 x 1268, 8-bit/color RGBA, non-interlaced
Size
333 kB (332569 bytes)
Hash
32bdb9932c23b22380d51cf02641ec05
ef691e8f5c9053c9fc1d4e27dbdc38be79e8373c
7951a0e8a51d215a71da167c874b84365c4857dcd618d998d3f225c09a313e86

HTTP Headers

GET /images/instagram/xig/homepage/phones/home-phones-2x.png?__makehaste_cache_breaker=73SVAexZgBW HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: image/png
access-control-allow-origin: *
content-md5: Mr25kywjsiOA1RzwJkHsBQ==
expires: Sat, 26 Apr 2025 18:35:12 GMT
cache-control: public,max-age=86400
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
timing-allow-origin: *
x-frame-options: DENY
origin-agent-cluster: ?1
strict-transport-security: max-age=15552000; includeSubDomains
x-fb-debug: GLlnMasC7ivZ+n1DncL1ML97GL8qflyfth/kjz8ZF6mQ+ReANL9qFMzStyDY49DCFmG+8on3aANFuq1mwiHirg==
content-length: 332569
date: Sat, 26 Apr 2025 14:20:51 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=13, rtx=0, c=34, mss=1232, tbw=5127, tp=11, tpl=0, uplat=15, ullat=-1
alt-svc: h3=":443"; ma=86400
priority: u=4

guillxr.github.io/instagram-page/

185.199.108.153

200 OK

4.4 kB

URL User Request GET
guillxr.github.io/instagram-page/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerSectigo Limited
Subject*.github.io
Fingerprint8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
ValidityFri, 07 Mar 2025 00:00:00 GMT - Sat, 07 Mar 2026 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (605)
Size
4.4 kB (4352 bytes)
Hash
43e3c9d4141b182822bc0fc9844633f2
5a98b0994023fa380cf5f2ca240355d7a5910ede
cfc868c9799c7685f932500906085ede9d3a1994e70f0e17cc3e287880439224

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Instagram
OpenPhish	phishing	Instagram

HTTP Headers

GET /instagram-page/ HTTP/1.1
Host: guillxr.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sat, 20 Jul 2024 23:56:24 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"669c4ea8-1100"
expires: Sat, 26 Apr 2025 14:30:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 6DCF:57D89:221FE87:2272671:680CEBC2
accept-ranges: bytes
age: 0
date: Sat, 26 Apr 2025 14:20:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1745677250.211808,VS0,VE218
vary: Accept-Encoding
x-fastly-request-id: 6a16a3392690968e07876eb198a27cd142ae3b4a
content-length: 1492
X-Firefox-Spdy: h2

static.cdninstagram.com/rsrc.php/v3/y_/r/tUzYKZ-xrQK.png

31.13.72.53

200 OK

6.6 kB

URL GET
static.cdninstagram.com/rsrc.php/v3/y_/r/tUzYKZ-xrQK.png
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
Fingerprint33:9B:24:51:EC:DC:FC:80:95:4A:23:4C:BF:48:A3:75:88:9A:42:32
ValidityThu, 20 Mar 2025 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT

File type
PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Size
6.6 kB (6629 bytes)
Hash
6e959bca556ae4a436ca71a9f072f8e8
4bf5228d637fe83bdd256354f42aaf6b3c54b767
a90e2a41ef7fe7edeb235cdf84971c27eb21dc065aa20ece4de7684163c602da

HTTP Headers

GET /rsrc.php/v3/y_/r/tUzYKZ-xrQK.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: bpWbylVq5KQ2ynGp8HL46A==
expires: Fri, 24 Apr 2026 14:24:49 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
x-frame-options: DENY
origin-agent-cluster: ?1
x-fb-debug: FEXY+OXBxM+2bvQSjN/gVNOehbk9jd1TXBh83D68vioDxxLck/12ZlOb80eL0egqTHVNg/S/LYOV5q/qV6Y7Yg==
content-length: 6629
date: Sat, 26 Apr 2025 14:20:50 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=11609, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap

142.250.178.42

200 OK

67 kB

URL GET
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
142.250.178.42:443
ASN
#15169 GOOGLE

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint7E:14:87:08:DF:BA:04:65:17:BA:3B:4F:BA:EA:BC:8C:3F:0A:A4:00
ValidityMon, 31 Mar 2025 08:55:43 GMT - Mon, 23 Jun 2025 08:55:42 GMT

File type
ASCII text, with very long lines (1572)
Size
67 kB (67176 bytes)
Hash
034d5adc1cbedc8d7e0e7edd3b85b3bf
5296f6d4a3757879ff503163d2f08a293b15fe55
4e10df21374bf29431a4189a853d94cfa2ddaba4e89e8dff3b823f94b10e5d95

HTTP Headers

GET /css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 26 Apr 2025 14:20:51 GMT
date: Sat, 26 Apr 2025 14:20:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2

142.250.74.35

200 OK

40 kB

URL GET
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint62:27:9C:C9:95:FF:8F:83:34:D0:B1:42:CB:B7:63:C0:8E:6F:3E:F1
ValidityMon, 31 Mar 2025 08:55:41 GMT - Mon, 23 Jun 2025 08:55:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Size
40 kB (40128 bytes)
Hash
9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2

HTTP Headers

GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://guillxr.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Apr 2025 10:03:46 GMT
expires: Fri, 24 Apr 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 188225
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

static.cdninstagram.com/rsrc.php/v3/yE/r/QQnPXT5YsC4.png

31.13.72.53

200 OK

6.8 kB

URL GET
static.cdninstagram.com/rsrc.php/v3/yE/r/QQnPXT5YsC4.png
IP
31.13.72.53:443
ASN
#32934 FACEBOOK

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerDigiCert Inc
Subject*.instagram.com
Fingerprint33:9B:24:51:EC:DC:FC:80:95:4A:23:4C:BF:48:A3:75:88:9A:42:32
ValidityThu, 20 Mar 2025 00:00:00 GMT - Sat, 03 May 2025 23:59:59 GMT

File type
PNG image data, 864 x 312, 8-bit colormap, non-interlaced
Size
6.8 kB (6784 bytes)
Hash
17d2e6719e582a9f6eeb3d5eeaea0373
67644c51c1f625ff9e5529514fb3684dd23ca28c
db8f0868a856b32b20a311f588ea37a2a3c7ff64814f85787e79bc2628bc3d19

HTTP Headers

GET /rsrc.php/v3/yE/r/QQnPXT5YsC4.png HTTP/1.1
Host: static.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://guillxr.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: F9LmcZ5YKp9u6z1e6uoDcw==
expires: Fri, 24 Apr 2026 14:24:49 GMT
cache-control: public,max-age=31536000,immutable
report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
timing-allow-origin: *
document-policy: force-load-at-top
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
reporting-endpoints: permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
x-frame-options: DENY
origin-agent-cluster: ?1
x-fb-debug: /VTpt2wPiQcuYE+nO73R8emIeym8N6bFnrieuUJxN7fYQ+3R2yygGU9ydamSSEQ8L/+0y/2+xDbs/O/smDC6Ug==
content-length: 6784
date: Sat, 26 Apr 2025 14:20:50 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=7, rtx=0, c=13, mss=1380, tbw=3344, tp=-1, tpl=-1, uplat=1, ullat=-1
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2

142.250.74.35

200 OK

40 kB

URL GET
fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://guillxr.github.io/instagram-page/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint62:27:9C:C9:95:FF:8F:83:34:D0:B1:42:CB:B7:63:C0:8E:6F:3E:F1
ValidityMon, 31 Mar 2025 08:55:41 GMT - Mon, 23 Jun 2025 08:55:40 GMT

File type
Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Size
40 kB (40128 bytes)
Hash
9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2

HTTP Headers

GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://guillxr.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Apr 2025 10:03:46 GMT
expires: Fri, 24 Apr 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 188225
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (14)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections