{"report_id":"37feba94-8c4f-4c21-bdc2-606dc991c022","version":0,"status":"done","tags":[],"date":"2026-08-01T14:28:28Z","url":{"schema":"http","addr":"instagramhelp.whf.bz","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"title":"lnstagram","dom":{"size":41350,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2066)","md5":"09678508cde6b5738d3dac4ac76ff5f7","sha1":"8f2903d017834ecbf7244bd791f6e14326006bcd","sha256":"371d7644f70f3b36974c2599041a5f7c2b700409a7d4d41ba9d20a759f1ee001","sha512":"d2d1b695c987ada3c8121faf009519eab3bd68a64b1b0656188aa92cd8e1b4a81f527512da82e62a0c9ac9db7532e940670d5914e2042c911b18b1f7a3f4c2a5","ssdeep":"768:209brJzBQZy6i1wfE6ke1lqJF5s/Q5/uTMTlTCTNTHTy09wR0LKAH:20clke1lqJASdElzy09JKAH","tlshash":"8803e9195de30c00960794e4e7ebbb543366c20bc60addec7d9d6688cfd9ac949ba34c","dom_hash":"domhash3ed028643f6b3cccc8eae497e709a1c2","first_seen":"2026-08-01T14:28:32.958066Z","last_seen":"2026-08-01T14:28:32.958066Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"instagramhelp.whf.bz","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T14:28:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"instagramhelp.whf.bz","ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-12-20","domain_rank":0,"first_seen":"2026-08-01T14:28:30.370192Z","last_seen":"2026-08-01T14:28:30.370192Z","alert_count":88,"request_count":22,"received_data":1236558,"sent_data":11135,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"analytics.yolacdn.net","ip":{"addr":"104.16.87.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-03-30","domain_rank":2157078,"first_seen":"2013-12-07T13:03:48Z","last_seen":"2026-08-01T10:47:57.489077Z","alert_count":0,"request_count":1,"received_data":13760,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":13565,"sent_data":586,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pixel.yola.com","ip":{"addr":"104.16.125.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-06-11","domain_rank":2090888,"first_seen":"2014-05-06T03:20:04Z","last_seen":"2026-07-31T14:58:42.375576Z","alert_count":0,"request_count":1,"received_data":616,"sent_data":800,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"analytics.sitewit.com","ip":{"addr":"54.196.171.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2008-12-04","domain_rank":446817,"first_seen":"2014-02-06T07:48:53Z","last_seen":"2026-07-27T00:41:21.774988Z","alert_count":0,"request_count":3,"received_data":22736,"sent_data":2620,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-26T23:06:30.068608Z","alert_count":0,"request_count":1,"received_data":359,"sent_data":511,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":4,"received_data":196308,"sent_data":2236,"comment":"","tags":null,"fingerprints":null},{"fqdn":"connect.sitewit.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2008-12-04","domain_rank":0,"first_seen":"2014-03-03T23:20:20Z","last_seen":"2026-07-17T06:33:16.784079Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":525,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/jquery.min.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-10T17:41:02.333079Z","times_seen":55965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b74ed23463bf2caf110cbfbe4e6d329d","sha1":"b1842d3da9ec9ab2524f8d5ff46814e073f7537e","sha256":"1e4c624313112cf8d8cfc37f4a6f5e5cebdd9497e9c7d32f4ce30abf8e183dbc","sha512":"f72fc468a3ba947c5828df89ced9d29ad95270fab6d58f94e97453052d84eccce74ada508dee108a7106e92bbbcfe9ef06f44217ec780d1f3364df18ec17bc88","ssdeep":"","tlshash":"2fb0122d8d245a0e02f40558a730f7bf38f4b84cfce3d208916b497823963dd0942cc0","size":110,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.517914Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2b3fcd8b205d1a074829ea3c44217f6","sha1":"d15bb64d5bdd64390b1761a293d8635066b062a4","sha256":"f13cf99b72140bb542742d2bbd9fef1828bead88c547b17ff345b8bc6bde6d3e","sha512":"06688c1840aa9e12a3a2a5532d810d8c1d2b8a948644589a41bdc76e6d5b966ec60be427a2da80d5bdb728bae7397d8010a07acc97b19efb9ca6222809b83cba","ssdeep":"","tlshash":"cee08c4ac69e18538cd3312e1d2fa0242d230c076c4b5900f94d82d51f3f86dcb7daa7","size":325,"data":"","first_seen":"2026-06-08T16:34:54.137411Z","last_seen":"2026-08-08T17:01:35.518674Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"929a864fca92925831db172e5f9f2bc4","sha1":"be7975d4908964f985d670333e7122fc6eba665c","sha256":"7f7d21806d73206aba8cac463510510b4e66875fd2eb81fbad5d0d4477d0a964","sha512":"5dbb48134f38bb08bd6ee0177d53575bb353bbd1eedbe116d1c4ede8eeb2e0524b36c33ba0db519eafb25754496836e69eeba549dd6125fd8a28fddc880c508a","ssdeep":"","tlshash":"1ee02b3991704fad44651fc4a426f10d937b930728df7c34305c99420b09aa44803087","size":378,"data":"","first_seen":"2026-08-01T14:28:33.002779Z","last_seen":"2026-08-01T14:32:36.866487Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"521309d35a60754daff29ff76cb84376","sha1":"6212a2a53e970b8b3224b33ae5a5e6e680da8211","sha256":"650abd93cb2e18cf5ad27bd5765a5ac38b48ec3e5b49b5be8da8a27ecb70e011","sha512":"6994f8805666a786212278436f7b88f3a41b0434c5accd7c72aeb6344f76134475efa1984f2b5701c82e07adfdc2a905cbf8c8c28bb0539da973e01557280306","ssdeep":"","tlshash":"74c002710d2f40a55d195486256f2bdab5490164f15240544974511466384e7de61f42","size":161,"data":"","first_seen":"2026-08-01T14:28:33.004542Z","last_seen":"2026-08-01T14:32:36.867006Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16fa4f92d0d0f6f162f2c055de2566c1","sha1":"8c82ac4fb5726f7c86fd6eda7788d28dc5ca42a4","sha256":"b0592494bcea292ec5d4414706eed6fda6385b2590082746e0b7c2b3e663ce55","sha512":"c68ddefdb34b1467e6d7b7506002962fe1519de410460ddac9402421cb3941abef802d1a24e0dc47e65efdbaa846864f49b66b135f66a7eae7b385cc5337de1c","ssdeep":"","tlshash":"69017d3f34d1723c8d3716aea5a7c08a39b4213b240adc1ea986c5794f31f899c35994","size":658,"data":"","first_seen":"2026-06-08T16:34:54.146099Z","last_seen":"2026-08-08T17:01:35.522342Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/recaptcha__en.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f595454a297d402e603d832f5e7bcc0a","sha1":"c011450fa81d8cfa529405df5164d4853bd06e9a","sha256":"5330600f68293b69db933eba611413ffaa46ad7c992116b06933c620d7a3c43c","sha512":"ee0cf30d83d3ae47bc314045a3a7b7331e1e15fee67e3795c7c5e1b2d4e42928f09cbd7483a41c5c7ae3fc249eac4619eff2196fcdc81a800135d2b8827d8c45","ssdeep":"3072:gyISMSgpzubPk1vGCwnMPCfJreblkzYA15V43wD7N0bLsRz6obtAuWGk:JFgpzuAtGpMPCfxeblMbt7N0y6obtDk","tlshash":"aa642ae9b12274764963f1f2116b545ef23b23a9d844086cb158c8f22fb09ad7137f7a","size":306554,"data":"","first_seen":"2026-07-17T06:33:18.911681Z","last_seen":"2026-08-01T14:32:36.848478Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/bframe.html","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9b901c2efdf825332443f6125ac235a","sha1":"50b0a91ce79f263c8a802096158cdbacd2660474","sha256":"be65c20e36b71b50d335c36ef1cddb3c181f666c3e8daf543d0bddf27b207519","sha512":"4665775a4249dd75c30020832b0bd11954371a65e00b2a44ba5a7f60825cea81479a413b985d737e3030c99300b5bea5b712f0b2d83c81182a04a361723560cb","ssdeep":"","tlshash":"09a002f3197580115e92c5a0e553bb88d552111dfe5981c664254a5da3e99d3c400990","size":68,"data":"","first_seen":"2023-03-07T01:10:24Z","last_seen":"2026-08-01T14:32:36.868764Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/bframe.html","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6989511ea50803c42ff3daf29515eea8","sha1":"7dd3cdde8b2f83e9bed446aeafedbcd5ee19aeb8","sha256":"91a72a1f6c33b285937055c97db28683c5645860a03842549d5969ffa6500268","sha512":"521c05838d85f12d53b09209180b84e48f202f56695295437bc86671362eeeefd70ec2cfec7854ae0c8a5a1f695ebf3f30fd057007c28ec59cb0ed73f55bac18","ssdeep":"","tlshash":"acc08c6131662fe70e04bc10081598b89ccc4dabe023e7f205c39e40aca0c1662209ac","size":164,"data":"","first_seen":"2026-07-17T06:33:18.938611Z","last_seen":"2026-08-01T14:32:36.86935Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/webfont.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9aaab63f1c763eb8299c7b4575cf66b1","sha1":"152f7eab136e79ac80b96107a5d5a5e82e261946","sha256":"52ed15904751d037ad3a0835c1df150485c6d1b815355bbad1ccad6fda5f4e9b","sha512":"3577b31101fb75330287be024394e2f421d35114a685061f9e34469ae35cb14c0dd62c722163e97de30b7f8986ebb977a7c42bd93e3d7941a8b934e3ec6c69ac","ssdeep":"384:r1MUTmQcIBEaCfAT/zndWebO5b126xR4JZyijbx54ZFIRR2IdH///cDDkVvWybZO:ruUTmihxORX4JZ3jbx54ZgHY8ZO","tlshash":"6282c8497a51723a835280f3112f024e973be56eb40488acf599daf59cb4975037ff78","size":18365,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.494403Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/sw.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e78793ccd2e67f10979b42ea36f363","sha1":"6236d1a1d0d04660147a95f67d425a2f6bddf861","sha256":"665ad6099c61f7bfa8dff0d43901cd62040b1951ec9f5a17ceaee016ece842ca","sha512":"ef7b5388f410df71362b91912507403c54414d4b509b68beaf9dd9d5009a707433cc18d9fc5a554e0a1631d767677b0da362f58a94c8d38c339da8057a686bf0","ssdeep":"384:0VlFFwLtOBZRMzThlJMH9llVQoRwyalAsA4PZdhYT1egXblEBj:yzFwhJ09llVMyalAsVRHuBq","tlshash":"9892099f70e9782702b13566362f2240517ba7896e0551acff25e4c6b878f8f011bfb9","size":19397,"data":"","first_seen":"2026-07-17T06:33:18.934049Z","last_seen":"2026-08-01T14:32:36.860235Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/recaptcha.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0973cb3bce7c134b9568a1a5618161e0","sha1":"f4429294daf03f14b0c446b25ef1a7821a07aa46","sha256":"b792d591094e6e05f3aec7d0af84483fe6e5ca316532f33e61ed05f351f03d6a","sha512":"b3b9f4830b537bb95b0b4ea99c3d1a0cebb8c21ef248130472e8aa90ed026ebca902fbf4427b17864343bb7e7b1713bf3f16ed50f9222767ba3b2fd2ec81d938","ssdeep":"","tlshash":"ef119eb5acb610a06c27147593df1bc5b01b819ff10f9e403948921d1ff88e7c559f99","size":975,"data":"","first_seen":"2023-03-07T13:11:19Z","last_seen":"2026-08-01T14:32:36.855914Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/api.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f7c86e38e7bc26d7d37aad16999af12","sha1":"e490c9282485ae2a310ad2ff70b77fa150731fca","sha256":"44a3eb2096c23ee431e8ea1d5e7e51c67ca897570e31656fa765356c51055f70","sha512":"a6e3ab7a158b3f1152a1ff989765b9cb62df1dd9be1ae0caecdb7fce2f6d1cfc89eee512709df2f688eb962a079643640cb9c61c2610fac1a9aabe84623a38e1","ssdeep":"","tlshash":"630197b61914b0395eb219f2d0fecbb0e4105028e01889e89616ea885e3ddcbce15986","size":730,"data":"","first_seen":"2026-07-17T06:33:18.930629Z","last_seen":"2026-08-01T14:32:36.864757Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.yolacdn.net/tracking.js","fqdn":"analytics.yolacdn.net","domain":"yolacdn.net","tld":"net"},"ip":{"addr":"104.16.87.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52f47045ab1757a84c07482102386f58","sha1":"a4041724b78436e7c3eb8f9879968d730c0114df","sha256":"ad73224fdf874d7efd6062771ea23267c29b7521fe62db2d15bea7b1d0a9978d","sha512":"79178789981d0cfec60dd8d36aa3427ca8c1eede248af5771fb2b8a28a179bb8bbf786ebea328e3a53b910bc93989a8ae5aa3cf664c157fb65a4a5d2d30ec636","ssdeep":"384:jLIxIem5a9cynf9VLBFONrC8Ky04yxfhN+7yZbq/6z96/sYkBGSrosiC9m:PID9TnfHXO5C8t4x5Zm/O6/s7Pm","tlshash":"6952e7a6311a7536a69a20b500ff150b7074f171a88cc854d252f8f46d6ceee127ffae","size":13358,"data":"","first_seen":"2026-02-07T23:55:04.720898Z","last_seen":"2026-08-01T14:32:36.857947Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/flyoutmenu.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d8976f0d819a70d2e1e3adc3c1ecb57","sha1":"d9348033373d02b006ee3e73a8a53be9bb0e79f4","sha256":"4b7dd2923843fa2780f4a26f9230c200538a6d6204093fe1a0d692eea3f777e8","sha512":"4001f81785ac5e353e41a1937d11cf2a3af802f535892437f0a8ce016f30aad8b98de81c70adf25a07d1b179254cc9f7d816c449694ac5070729cbcc0d80dc4f","ssdeep":"","tlshash":"7451d256b5b220a1e8e77164879f7c1497734913010dce00783e7d4c1fa19b925ecbfa","size":3032,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.485172Z","times_seen":475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/LoggingAgent","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bbb017084ca9f0ca681dcef4426db24","sha1":"ad73c0a99c11e7914e23bf96c2948d622680b744","sha256":"9cca325e1db08583f7d7c9ff4012d2fd9ee24a62ac3a54dccc71673f137a6244","sha512":"483dff10a607c809e95a7244611543082f79a0ee84c1c74fad7734eaf06e0dc151027e6d7cf9d8020ccff9c7ba53e74ed78b0c607ee8c788b03cc433d3212a54","ssdeep":"","tlshash":"ae6000300330300f00c3c0c3cc00000000000030000030000c0030003c0000cc00c000","size":12,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.508238Z","times_seen":816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.sitewit.com/partner/yola/42d4f868883b401682bd9ae7f3e28925/sw.js","fqdn":"analytics.sitewit.com","domain":"sitewit.com","tld":"com"},"ip":{"addr":"54.196.171.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"700c4e6b620f8757c9125d296c4bf177","sha1":"745be9e7009bb73be71e81170c980771f4c8332c","sha256":"2ceec5011677e6d92c5291c4e122aeb896f4deb8c7d4d95f3ca18d116af8903e","sha512":"445a77165301e5257186aeeac67802274d66a0edd1febd2d2ad32ecf8a987622b34c44f1da0bfa53a52d5905769b5a4ad7e1d002ca7489490846b5f4c3602235","ssdeep":"384:0zp5FwimoOBRdmFJIZfHLJlBJ+k9dW35xqZc4Ph5Y5FRYKRYi:kjFwJ7LJlBJ+k9da4XZm5F4i","tlshash":"c192c55f30e9742301773065362b2544917fa785ae4a48acbf68e5c6b878b4f016bfb8","size":20299,"data":"","first_seen":"2026-08-01T14:28:32.990176Z","last_seen":"2026-08-01T14:28:32.990176Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.yola.com/LoggingAgent/LoggingAgent?url=//instagramhelp.whf.bz/\u0026pagename=index\u0026siteid=42d4f868883b401682bd9ae7f3e28925\u0026resolution=1280x1024\u0026colorDepth=24\u0026flash=0\u0026java=0\u0026sitereferer=\u0026visitorId=CBC24AFB-23F0-0001-F581-13F03D902A80\u0026visitId=CBC24AFB-23F0-0001-255F-8A101C401165\u0026user_id=f351cec026454acaa70169dc8ace927a\u0026partner_id=YOLA\u0026LoggingAgentReturnType=script","fqdn":"pixel.yola.com","domain":"yola.com","tld":"com"},"ip":{"addr":"104.16.125.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bbb017084ca9f0ca681dcef4426db24","sha1":"ad73c0a99c11e7914e23bf96c2948d622680b744","sha256":"9cca325e1db08583f7d7c9ff4012d2fd9ee24a62ac3a54dccc71673f137a6244","sha512":"483dff10a607c809e95a7244611543082f79a0ee84c1c74fad7734eaf06e0dc151027e6d7cf9d8020ccff9c7ba53e74ed78b0c607ee8c788b03cc433d3212a54","ssdeep":"","tlshash":"ae6000300330300f00c3c0c3cc00000000000030000030000c0030003c0000cc00c000","size":12,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.508238Z","times_seen":816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/sw_connect.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0280d23b467b91f9ecd3bfc2aaab89e4","sha1":"502abf953757ecee3d35b22125f9fee528979b1e","sha256":"7ba60db4e4c1bf698247d9873e3bf61ebe517f299773270d4d40789be29d0d4e","sha512":"af6eeadff59270028808c0281ff71dac8af6cfa486896f643f556871fa024b21ff95406e2d563a3a4fd6f17d121b0cb1753a7c187059c70f8d2ace00f95e7f0e","ssdeep":"","tlshash":"a680000c2088a0222fc30e803b832e882030388022002288f0c280288aaa2c0c8b28e3","size":32,"data":"","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-01T14:32:36.857374Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/browserify.build.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea21bd2a94ca8efb28dae95b3c80ec6f","sha1":"d1ee00c12efcb447d1689f61ca268df5ede70ea3","sha256":"4f7c1add88a38d5e79892eab7ce5ffbae3b4e622c820ac6852caffa44859ddb0","sha512":"02739305d911edcebe4050aa18286f239466e77af6cb325209733ea7b9c2c556fc8838377e384328b33bb2406bca9adfe368a31c4d3b81ce087ad2dc7d5ab417","ssdeep":"6144:Rour0Nr55ZpmV6CsBVhTvF9QNuCIoOy2zoqlz1hMJQcc0F:zANr55ZpU6CsBVhTvF9QNuCIoOySoqlY","tlshash":"9b74d48d3af22261462361ba4baf5444b678c427155da849b88cd7e41fd4d3c83fbeec","size":339154,"data":"","first_seen":"2023-03-08T00:55:41Z","last_seen":"2026-08-01T14:32:36.868212Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/tracking.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1daf129b129c71770adb5741edc00dab","sha1":"32b1e9dcf4f31daac7cc6220238381d718b953b3","sha256":"d909182be268527d91ea41874500388c00c6714df3c5669e7c5a59e3a52f94de","sha512":"98613ccd41b4eb1743eb5ca08a329ac45678e097a696c23a599cb933b456f569130b44c49ccd5277037ecba2448b91ab70a08d51a8701951d9f1a108606430e3","ssdeep":"384:jLIxIem5a9cynf9VLBFONrC8Ky04yxfhN+7yZbq/6z96/sYkBGSrosiC9m:PID9TnfHXO5C8t4x5Zm/O6/s7Pm","tlshash":"5e52e7a6311a7536a69a20b100ff150b7074f171a88cc850d252f8f46d6ceee127ffae","size":13358,"data":"","first_seen":"2026-07-17T06:33:18.920923Z","last_seen":"2026-08-01T14:32:36.864141Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/less.build.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.386Z","timestamp":1785594478386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/less.build.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:50 GMT\r\netag: \"27aa-5f72317a-71f7f22ca96443a8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1670\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10154,"size_decoded":2033,"mime_type":"text/css","magic":"ASCII text","md5":"87e91ba1eb16a2b47223f9ecf3e0aeea","sha1":"bb3886820598395959578da51ca7bb25d77b68eb","sha256":"84425fabd49b409cd16c1101c1f7f8a75fcd53b7bcb6cfea561be8498032d44c","sha512":"4473cc87983c4a66c6901ae8580b176c0e9d96a8938c7291a0b0281a9a99ebccca745f455c5d85e205eff1d8939e65f50dfe3e61e38741131fbe114f39788d97","ssdeep":"192:AW3Rx19G28HaMpb3UlPotogArxiQt/FzW:nRxpFMW5MX","tlshash":"d722d06c6bd00140721f86e577dfab2d261c88e7059efcbf7bd518488fc62aa528171b","first_seen":"2023-04-06T16:22:46Z","last_seen":"2026-08-08T17:01:35.51526Z","times_seen":444,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/global.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.618Z","timestamp":1785594478618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/global.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:48 GMT\r\netag: \"3c9-5f723178-7665eb69844c2da3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 384\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":969,"size_decoded":745,"mime_type":"text/css","magic":"ASCII text","md5":"2aa6793895ef563ef0c4c58faa91544e","sha1":"afed62e8f81a8957303d8456c1a17c593647eca5","sha256":"23750febfc516242a42c64e41801ad5692a672bbdcd3fd1ccbf3a5c027b60bf9","sha512":"2b929c5942a5df3c448e29c73351646c4216c5167102c777d34e12206a745fbc655fad9548ad0c209e6f5edaccc8d3efe1c2f16699dfb03daa58cc0ae1f5fc27","ssdeep":"","tlshash":"9611e1925f78190d6a6bc0787c61935c731d8002678eccb8f7b5309869cabcd50637d1","first_seen":"2023-04-06T16:22:46Z","last_seen":"2026-08-08T17:01:35.491822Z","times_seen":424,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/sw_connect.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.625Z","timestamp":1785594478625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/sw_connect.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:53 GMT\r\netag: \"20-5f72317d-ccd04ea9667f097c;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 32\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32,"size_decoded":290,"mime_type":"application/octet-stream","magic":"ASCII text, with no line terminators","md5":"0280d23b467b91f9ecd3bfc2aaab89e4","sha1":"502abf953757ecee3d35b22125f9fee528979b1e","sha256":"7ba60db4e4c1bf698247d9873e3bf61ebe517f299773270d4d40789be29d0d4e","sha512":"af6eeadff59270028808c0281ff71dac8af6cfa486896f643f556871fa024b21ff95406e2d563a3a4fd6f17d121b0cb1753a7c187059c70f8d2ace00f95e7f0e","ssdeep":"","tlshash":"a680000c2088a0222fc30e803b832e882030388022002288f0c280288aaa2c0c8b28e3","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-01T14:32:36.857374Z","times_seen":138,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/ezgif.com-resize%20(2).png","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.643Z","timestamp":1785594478643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/ezgif.com-resize%20(2).png HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 28 Sep 2020 18:54:47 GMT\r\netag: \"1356-5f723177-4f2dd8e663538a66;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 4950\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4950,"size_decoded":5276,"mime_type":"image/png","magic":"PNG image data, 206 x 50, 8-bit gray+alpha, non-interlaced","md5":"a42e48f15f359eaafbb73f3e1eda9af5","sha1":"091c7ee627551cb661d6e52065b308cba5cdf03b","sha256":"4fcb1bee330fc786066ff7fdcda19f29d8a93a53faaf4fc99646c35024c8091b","sha512":"d8d5ff0c06b635e5b8b6614ace1583b87093471a9e0a6b139b004bcd45f6bdeb6348769c72517865fec0786124360040b6a622938087451dbd3495506b619738","ssdeep":"96:AGfdpA8GCGOeBVOuScoJUyWJcltwGQXkOdbxM+IAfJ/uAS2aZc:FfjuScJF4RyxMefJ/8c","tlshash":"a6a16dd6af700ae6c4d80f259e91f6994d71e04b4649155fff72d4cb0b3cb1d6aa0c80","first_seen":"2026-07-17T06:33:18.913778Z","last_seen":"2026-08-01T14:32:36.86086Z","times_seen":4,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.yolacdn.net/tracking.js","fqdn":"analytics.yolacdn.net","domain":"yolacdn.net","tld":"net"},"ip":{"addr":"104.16.87.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.016Z","timestamp":1785594479016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yolacdn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Jul 2026 07:52:51 GMT","end":"Wed, 07 Oct 2026 08:52:38 GMT"},"fingerprint":{"sha1":"17:C9:F9:CE:2B:92:25:90:89:6E:0C:80:C2:DD:5D:2C:4A:F0:4F:A2","sha256":"D4:0E:F5:61:FA:18:B2:7E:74:B9:EA:3B:AD:DB:C2:10:3F:C7:D4:C4:BA:27:A5:FA:3B:CE:A6:A0:24:92:9B:BD"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: analytics.yolacdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 15:18:26 GMT\r\netag: W/\"69836342-342e\"\r\nserver: cloudflare\r\ncache-control: max-age=7200, public\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 946\r\ncf-cache-status: HIT\r\ncf-ray: a24586d60af6b512-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13358,"size_decoded":5973,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13330)","md5":"52f47045ab1757a84c07482102386f58","sha1":"a4041724b78436e7c3eb8f9879968d730c0114df","sha256":"ad73224fdf874d7efd6062771ea23267c29b7521fe62db2d15bea7b1d0a9978d","sha512":"79178789981d0cfec60dd8d36aa3427ca8c1eede248af5771fb2b8a28a179bb8bbf786ebea328e3a53b910bc93989a8ae5aa3cf664c157fb65a4a5d2d30ec636","ssdeep":"384:jLIxIem5a9cynf9VLBFONrC8Ky04yxfhN+7yZbq/6z96/sYkBGSrosiC9m:PID9TnfHXO5C8t4x5Zm/O6/s7Pm","tlshash":"6952e7a6311a7536a69a20b500ff150b7074f171a88cc854d252f8f46d6ceee127ffae","first_seen":"2026-02-07T23:55:04.720898Z","last_seen":"2026-08-01T14:32:36.857947Z","times_seen":116,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":5,"connect":18,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/recaptcha__en.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/index_files/bframe.html","date":"2026-08-01T14:27:59.302Z","timestamp":1785594479302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/recaptcha__en.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/index_files/bframe.html\r\nCookie: _swa_u=ccf4b38a-6b28-44bf-a030-2d6b2d33a288; synthasiteVisitorId=CBC24AFB-23F0-0001-F581-13F03D902A80; synthasiteVisitId=CBC24AFB-23F0-0001-255F-8A101C401165\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:51 GMT\r\netag: \"4ad7a-5f72317b-71e4501a758071f6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 306554\r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":306554,"size_decoded":306819,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (729)","md5":"f595454a297d402e603d832f5e7bcc0a","sha1":"c011450fa81d8cfa529405df5164d4853bd06e9a","sha256":"5330600f68293b69db933eba611413ffaa46ad7c992116b06933c620d7a3c43c","sha512":"ee0cf30d83d3ae47bc314045a3a7b7331e1e15fee67e3795c7c5e1b2d4e42928f09cbd7483a41c5c7ae3fc249eac4619eff2196fcdc81a800135d2b8827d8c45","ssdeep":"3072:gyISMSgpzubPk1vGCwnMPCfJreblkzYA15V43wD7N0bLsRz6obtAuWGk:JFgpzuAtGpMPCfxeblMbt7N0y6obtDk","tlshash":"aa642ae9b12274764963f1f2116b545ef23b23a9d844086cb158c8f22fb09ad7137f7a","first_seen":"2026-07-17T06:33:18.911681Z","last_seen":"2026-08-01T14:32:36.848478Z","times_seen":4,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/sw.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.623Z","timestamp":1785594478623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/sw.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:53 GMT\r\netag: \"4bc5-5f72317d-78dc6c65778e6403;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 19397\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19397,"size_decoded":19660,"mime_type":"application/octet-stream","magic":"C source, ASCII text, with very long lines (19397), with no line terminators","md5":"31e78793ccd2e67f10979b42ea36f363","sha1":"6236d1a1d0d04660147a95f67d425a2f6bddf861","sha256":"665ad6099c61f7bfa8dff0d43901cd62040b1951ec9f5a17ceaee016ece842ca","sha512":"ef7b5388f410df71362b91912507403c54414d4b509b68beaf9dd9d5009a707433cc18d9fc5a554e0a1631d767677b0da362f58a94c8d38c339da8057a686bf0","ssdeep":"384:0VlFFwLtOBZRMzThlJMH9llVQoRwyalAsA4PZdhYT1egXblEBj:yzFwhJ09llVMyalAsVRHuBq","tlshash":"9892099f70e9782702b13566362f2240517ba7896e0551acff25e4c6b878f8f011bfb9","first_seen":"2026-07-17T06:33:18.934049Z","last_seen":"2026-08-01T14:32:36.860235Z","times_seen":4,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/recaptcha__en.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.387Z","timestamp":1785594478387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/recaptcha__en.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:51 GMT\r\netag: \"4ad7a-5f72317b-71e4501a758071f6;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 306554\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":306554,"size_decoded":306819,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (729)","md5":"f595454a297d402e603d832f5e7bcc0a","sha1":"c011450fa81d8cfa529405df5164d4853bd06e9a","sha256":"5330600f68293b69db933eba611413ffaa46ad7c992116b06933c620d7a3c43c","sha512":"ee0cf30d83d3ae47bc314045a3a7b7331e1e15fee67e3795c7c5e1b2d4e42928f09cbd7483a41c5c7ae3fc249eac4619eff2196fcdc81a800135d2b8827d8c45","ssdeep":"3072:gyISMSgpzubPk1vGCwnMPCfJreblkzYA15V43wD7N0bLsRz6obtAuWGk:JFgpzuAtGpMPCfxeblMbt7N0y6obtDk","tlshash":"aa642ae9b12274764963f1f2116b545ef23b23a9d844086cb158c8f22fb09ad7137f7a","first_seen":"2026-07-17T06:33:18.911681Z","last_seen":"2026-08-01T14:32:36.848478Z","times_seen":4,"resource_available":true,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Raleway%3Aregular%2C500%2C800%2C600%2C400|Open+Sans%3Aregular%2C400\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.611Z","timestamp":1785594478611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Raleway%3Aregular%2C500%2C800%2C600%2C400|Open+Sans%3Aregular%2C400\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 01 Aug 2026 14:27:58 GMT\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12881,"size_decoded":2440,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ca6404a8e00b4b3a95b28bacad6d8ebd","sha1":"a26ec4c7b1e9525e106ba9f93cdfb46acf082dd5","sha256":"de976d0d415e51736d49ab6aff8aaf2aa3e1a14670b90866a001b4e83e4a0c7d","sha512":"89a67dfe516eecb3641dc9a52529ea82e2d4cade295c823e0b1957812f19d5963696f315bf87c6030011d898c7587bbe7e5adf0544c12de8dfd0f6a42f1f6cd1","ssdeep":"192:w9AWjBF1INqbCbqGIwV4Rzlq8iaTzH0Dkfi9ToHfDPGi4TtHGD2YimTvHYDIp:4VJqqY42Yr2tWXCRJsP9","tlshash":"b54240a008179000ab476cd623cf7e31ee4f62143046943a9bfd5aadedebd7623a431d","first_seen":"2025-10-05T16:36:40.152929Z","last_seen":"2026-08-01T14:32:36.862012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pixel.yola.com/LoggingAgent/LoggingAgent?url=//instagramhelp.whf.bz/\u0026pagename=index\u0026siteid=42d4f868883b401682bd9ae7f3e28925\u0026resolution=1280x1024\u0026colorDepth=24\u0026flash=0\u0026java=0\u0026sitereferer=\u0026visitorId=CBC24AFB-23F0-0001-F581-13F03D902A80\u0026visitId=CBC24AFB-23F0-0001-255F-8A101C401165\u0026user_id=f351cec026454acaa70169dc8ace927a\u0026partner_id=YOLA\u0026LoggingAgentReturnType=script","fqdn":"pixel.yola.com","domain":"yola.com","tld":"com"},"ip":{"addr":"104.16.125.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.173Z","timestamp":1785594479173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yola.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Jul 2026 19:21:53 GMT","end":"Tue, 06 Oct 2026 20:21:51 GMT"},"fingerprint":{"sha1":"CF:9F:26:70:87:7B:62:BE:D6:68:8F:95:99:62:66:94:0F:24:52:AD","sha256":"D9:3A:03:43:45:7D:0D:F8:32:EE:DF:46:43:AC:1A:C3:C1:20:66:B8:93:C8:BF:44:E8:0C:4B:72:7F:0A:DD:20"}}},"request":{"raw":"GET /LoggingAgent/LoggingAgent?url=//instagramhelp.whf.bz/\u0026pagename=index\u0026siteid=42d4f868883b401682bd9ae7f3e28925\u0026resolution=1280x1024\u0026colorDepth=24\u0026flash=0\u0026java=0\u0026sitereferer=\u0026visitorId=CBC24AFB-23F0-0001-F581-13F03D902A80\u0026visitId=CBC24AFB-23F0-0001-255F-8A101C401165\u0026user_id=f351cec026454acaa70169dc8ace927a\u0026partner_id=YOLA\u0026LoggingAgentReturnType=script HTTP/1.1\r\nHost: pixel.yola.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 14:28:02 GMT\r\ncontent-type: application/x-javascript\r\npragma: no-cache\r\nexpires: -1\r\nserver: cloudflare\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=qTaqLiVFb_13p67_DFAGadUD5Bw1Hsz.bBQNMBK5VcU-1785594482.32174-1.0.1.1-tmeuhv10itaqvcs90QkDnnUHzHwVYnupT384U112L24ZYtCIPcpVASbV7fNMZbMqwVlORSwYYJo1YrO54wNDVx_3fSSfKQCVdXoZlUrXMZsbecHZgPBr50DweSi6dQXwND8bBDDE64FH_jgKUvaCIg; HttpOnly; SameSite=None; Secure; Path=/; Domain=yola.com; Expires=Sat, 01 Aug 2026 14:58:02 GMT\r\ncf-ray: a24586ea88540b02-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":12,"size_decoded":636,"mime_type":"application/x-javascript","magic":"ASCII text, with no line terminators","md5":"6bbb017084ca9f0ca681dcef4426db24","sha1":"ad73c0a99c11e7914e23bf96c2948d622680b744","sha256":"9cca325e1db08583f7d7c9ff4012d2fd9ee24a62ac3a54dccc71673f137a6244","sha512":"483dff10a607c809e95a7244611543082f79a0ee84c1c74fad7734eaf06e0dc151027e6d7cf9d8020ccff9c7ba53e74ed78b0c607ee8c788b03cc433d3212a54","ssdeep":"","tlshash":"ae6000300330300f00c3c0c3cc00000000000030000030000c0030003c0000cc00c000","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.508238Z","times_seen":816,"resource_available":true,"data":null}},"time_used":3641,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":494,"receive":0,"ssl":3139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.036Z","timestamp":1785594479036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagramhelp.whf.bz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:20 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263859\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-10T18:08:52.444968Z","times_seen":63474,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":32,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.sitewit.com/images/cq_blank.gif?_sw_yolaid=42D4F868883B401682BD9AE7F3E28925\u0026_sw_uid=ccf4b38a-6b28-44bf-a030-2d6b2d33a288\u0026_sw_fp=0f375cdb4bf3f78dc75a9b21fec0cb0ea6e4ba17\u0026_sw_pl=660\u0026_sw_pc=5\u0026_sw_dat=MXxpbnN0YWdyYW1oZWxwLndoZi5ienxodHRwczovL2luc3RhZ3JhbWhlbHAud2hmLmJ6L3xlbi1VU3wxMjgwfDEwMjR8MjR8RmlyZWZveC8xMzQuMHx4NjR8MXwwfDF8MHwtfHwtfC18LXw3OC4xOTAuNzEuOTB8MA==\u0026to=744","fqdn":"analytics.sitewit.com","domain":"sitewit.com","tld":"com"},"ip":{"addr":"54.196.171.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.746Z","timestamp":1785594479746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sitewit.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:CA:C6:A0:78:81:24:63:A1:A3:0B:69:41:3C:41:DD:5B:B2:2A:0E","sha256":"86:B6:90:FC:2A:A8:5E:46:B5:E1:50:7D:26:AE:CB:1B:B5:22:C0:D9:4B:59:29:C0:66:C2:B3:D7:BF:A1:C9:48"}}},"request":{"raw":"GET /images/cq_blank.gif?_sw_yolaid=42D4F868883B401682BD9AE7F3E28925\u0026_sw_uid=ccf4b38a-6b28-44bf-a030-2d6b2d33a288\u0026_sw_fp=0f375cdb4bf3f78dc75a9b21fec0cb0ea6e4ba17\u0026_sw_pl=660\u0026_sw_pc=5\u0026_sw_dat=MXxpbnN0YWdyYW1oZWxwLndoZi5ienxodHRwczovL2luc3RhZ3JhbWhlbHAud2hmLmJ6L3xlbi1VU3wxMjgwfDEwMjR8MjR8RmlyZWZveC8xMzQuMHx4NjR8MXwwfDF8MHwtfHwtfC18LXw3OC4xOTAuNzEuOTB8MA==\u0026to=744 HTTP/1.1\r\nHost: analytics.sitewit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nCookie: AWSALB=fxnYX82QKMhouquahzLM6xZGqDxPsStEzlcacYjSgxWoGRcSfMVuAnjghb68hJQ8ooThiOSoFimqAttGU7LMyxhrgrgqD2QUfIeKhLeI8TRswSD9RQrJoK6Lzn7E; AWSALBCORS=fxnYX82QKMhouquahzLM6xZGqDxPsStEzlcacYjSgxWoGRcSfMVuAnjghb68hJQ8ooThiOSoFimqAttGU7LMyxhrgrgqD2QUfIeKhLeI8TRswSD9RQrJoK6Lzn7E; ASP.NET_SessionId=aziqlk15ig5o2l1ljhrhbldf\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\nset-cookie: AWSALB=CNG3ftAGs5hErBnH7NBXr5PAeKWVYPEhu/iUu2dGOtbFn/RvozmzBBR1OIUZrdttvABhtw/OSd2bJ6Rkt6vZYuTzyGLClAnk8vcK/d+5IO7a2IxH+DdfR41/npIn; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/\nAWSALBCORS=CNG3ftAGs5hErBnH7NBXr5PAeKWVYPEhu/iUu2dGOtbFn/RvozmzBBR1OIUZrdttvABhtw/OSd2bJ6Rkt6vZYuTzyGLClAnk8vcK/d+5IO7a2IxH+DdfR41/npIn; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/; SameSite=None; Secure\r\ncache-control: no-cache\r\nlast-modified: Thu, 24 Jun 2010 20:21:15 GMT\r\naccept-ranges: bytes\r\netag: \"9f8deacbda13cb1:0\"\r\nserver: Microsoft-IIS/10.0\r\np3p: CP=\"DSP CAO CUR DEVo PSAo PSDo ADMo OUR STP NAV COM INT STA UNI PHY DEM\", policyref=\"/w3c/p3p.xml\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":35,"size_decoded":803,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-10T19:39:01.721205Z","times_seen":54799,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/JPZ52lNx97aD96bjM7KaA0bo/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.170Z","timestamp":1785594479170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/JPZ52lNx97aD96bjM7KaA0bo/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1621\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T19:57:25.563791Z","times_seen":17823511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/LoggingAgent","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.622Z","timestamp":1785594478622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/LoggingAgent HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Mon, 28 Sep 2020 18:54:44 GMT\r\netag: \"c-5f723174-40a997b4cfcca55;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 12\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12,"size_decoded":228,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"6bbb017084ca9f0ca681dcef4426db24","sha1":"ad73c0a99c11e7914e23bf96c2948d622680b744","sha256":"9cca325e1db08583f7d7c9ff4012d2fd9ee24a62ac3a54dccc71673f137a6244","sha512":"483dff10a607c809e95a7244611543082f79a0ee84c1c74fad7734eaf06e0dc151027e6d7cf9d8020ccff9c7ba53e74ed78b0c607ee8c788b03cc433d3212a54","ssdeep":"","tlshash":"ae6000300330300f00c3c0c3cc00000000000030000030000c0030003c0000cc00c000","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.508238Z","times_seen":816,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/reset.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.384Z","timestamp":1785594478384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/reset.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:50 GMT\r\netag: \"1058-5f72317a-470e0428c29aacbd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1467\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4184,"size_decoded":2008,"mime_type":"text/css","magic":"ASCII text, with very long lines (4183)","md5":"9d96bb9eafbae8a99c6cc61280fd1a56","sha1":"f9c49eb74780f666d0ef145ba795af273c7c1632","sha256":"f3116f804fa4354cc33259bc437632b085db890519faa6a42fe7601be7d9327a","sha512":"2437a343a36f9b03ebdba692fb7e3ccc6f14028ed73018cd054c851fe251ab9e9760fb93036a532e9dd7865a9a72146f49c77be7cef82d8a84da3463aed5199f","ssdeep":"48:o00NEm629lM/kyt0aujtMOT9Ctmx76JhoiZeYC23JtSZncAo1GM9FT1vj0cP:o00NEm79VHb4mx76heYz0nctkML1Yq","tlshash":"e3819573b3803128f63bca723ad2f79d3a114531c512525bf941db38cac557b4676a0d","first_seen":"2023-04-06T16:22:46Z","last_seen":"2026-08-08T17:01:35.511306Z","times_seen":387,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/webfont.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.609Z","timestamp":1785594478609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/webfont.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:55 GMT\r\netag: \"47bd-5f72317f-9adb46e99511bd48;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 18365\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18365,"size_decoded":18628,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (1462)","md5":"9aaab63f1c763eb8299c7b4575cf66b1","sha1":"152f7eab136e79ac80b96107a5d5a5e82e261946","sha256":"52ed15904751d037ad3a0835c1df150485c6d1b815355bbad1ccad6fda5f4e9b","sha512":"3577b31101fb75330287be024394e2f421d35114a685061f9e34469ae35cb14c0dd62c722163e97de30b7f8986ebb977a7c42bd93e3d7941a8b934e3ec6c69ac","ssdeep":"384:r1MUTmQcIBEaCfAT/zndWebO5b126xR4JZyijbx54ZFIRR2IdH///cDDkVvWybZO:ruUTmihxORX4JZ3jbx54ZgHY8ZO","tlshash":"6282c8497a51723a835280f3112f024e973be56eb40488acf599daf59cb4975037ff78","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.494403Z","times_seen":599,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/jquery.min.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.613Z","timestamp":1785594478613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/jquery.min.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:50 GMT\r\netag: \"1762a-5f72317a-cb9e51023302d92a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 95786\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95786,"size_decoded":96050,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-10T17:41:02.333079Z","times_seen":55965,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/tracking.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.621Z","timestamp":1785594478621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/tracking.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:55 GMT\r\netag: \"342e-5f72317f-ee412b113c78851b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 13358\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13358,"size_decoded":13621,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (13330)","md5":"1daf129b129c71770adb5741edc00dab","sha1":"32b1e9dcf4f31daac7cc6220238381d718b953b3","sha256":"d909182be268527d91ea41874500388c00c6714df3c5669e7c5a59e3a52f94de","sha512":"98613ccd41b4eb1743eb5ca08a329ac45678e097a696c23a599cb933b456f569130b44c49ccd5277037ecba2448b91ab70a08d51a8701951d9f1a108606430e3","ssdeep":"384:jLIxIem5a9cynf9VLBFONrC8Ky04yxfhN+7yZbq/6z96/sYkBGSrosiC9m:PID9TnfHXO5C8t4x5Zm/O6/s7Pm","tlshash":"5e52e7a6311a7536a69a20b100ff150b7074f171a88cc850d252f8f46d6ceee127ffae","first_seen":"2026-07-17T06:33:18.920923Z","last_seen":"2026-08-01T14:32:36.864141Z","times_seen":4,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.031Z","timestamp":1785594479031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagramhelp.whf.bz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:20 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263859\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-10T18:08:52.444968Z","times_seen":63474,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":21,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.sitewit.com/partner/yola/42d4f868883b401682bd9ae7f3e28925/sw.js","fqdn":"analytics.sitewit.com","domain":"sitewit.com","tld":"com"},"ip":{"addr":"54.196.171.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.174Z","timestamp":1785594479174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sitewit.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:CA:C6:A0:78:81:24:63:A1:A3:0B:69:41:3C:41:DD:5B:B2:2A:0E","sha256":"86:B6:90:FC:2A:A8:5E:46:B5:E1:50:7D:26:AE:CB:1B:B5:22:C0:D9:4B:59:29:C0:66:C2:B3:D7:BF:A1:C9:48"}}},"request":{"raw":"GET /partner/yola/42d4f868883b401682bd9ae7f3e28925/sw.js HTTP/1.1\r\nHost: analytics.sitewit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 20299\r\nset-cookie: AWSALB=fxnYX82QKMhouquahzLM6xZGqDxPsStEzlcacYjSgxWoGRcSfMVuAnjghb68hJQ8ooThiOSoFimqAttGU7LMyxhrgrgqD2QUfIeKhLeI8TRswSD9RQrJoK6Lzn7E; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/\nAWSALBCORS=fxnYX82QKMhouquahzLM6xZGqDxPsStEzlcacYjSgxWoGRcSfMVuAnjghb68hJQ8ooThiOSoFimqAttGU7LMyxhrgrgqD2QUfIeKhLeI8TRswSD9RQrJoK6Lzn7E; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/; SameSite=None; Secure\nASP.NET_SessionId=aziqlk15ig5o2l1ljhrhbldf; path=/; Partitioned; secure; HttpOnly; SameSite=None\r\ncache-control: private,no-cache\r\nserver: Microsoft-IIS/10.0\r\nx-aspnet-version: 4.0.30319\r\np3p: CP=\"DSP CAO CUR DEVo PSAo PSDo ADMo OUR STP NAV COM INT STA UNI PHY DEM\", policyref=\"/w3c/p3p.xml\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Microsoft ASP.NET:4.0.30319","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20299,"size_decoded":21130,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20299), with no line terminators","md5":"700c4e6b620f8757c9125d296c4bf177","sha1":"745be9e7009bb73be71e81170c980771f4c8332c","sha256":"2ceec5011677e6d92c5291c4e122aeb896f4deb8c7d4d95f3ca18d116af8903e","sha512":"445a77165301e5257186aeeac67802274d66a0edd1febd2d2ad32ecf8a987622b34c44f1da0bfa53a52d5905769b5a4ad7e1d002ca7489490846b5f4c3602235","ssdeep":"384:0zp5FwimoOBRdmFJIZfHLJlBJ+k9dW35xqZc4Ph5Y5FRYKRYi:kjFwJ7LJlBJ+k9da4XZm5F4i","tlshash":"c192c55f30e9742301773065362b2544917fa785ae4a48acbf68e5c6b878b4f016bfb8","first_seen":"2026-08-01T14:28:32.990176Z","last_seen":"2026-08-01T14:28:32.990176Z","times_seen":1,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":0,"connect":93,"send":0,"wait":209,"receive":71,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T14:27:57.333Z","timestamp":1785594477333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40497,"size_decoded":8355,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2066)","md5":"e1a3c9de4b922b61410a3255a178de09","sha1":"78d5b1cc81030949adeb857c17f21f95605b1881","sha256":"d7b8a9993d34e69bec01a456a4a913e4edad089f490f3ac1bf8e1beeb6b8b16e","sha512":"0d69b07352e2f47e8771e695044459abcb2c6d73a8f94493c28272283892242332466c9cef5f1f70700eb3c3707fcb762ef9d01b67e0cfec160f49e56f8da6c4","ssdeep":"768:S09brJzBQZy6i1wfE6kc1ldJF5s/Q5/uTMTlTCTNTHTy096R0LKAH:S0clkc1ldJASdElzy09TKAH","tlshash":"8f03d8295de30c00960794e5e7ebb7543366c20bc60addec7d9d6588cfd9ac849ba34c","first_seen":"2026-08-01T14:28:32.99199Z","last_seen":"2026-08-01T14:32:36.855255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":327,"connect":123,"send":0,"wait":132,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/flyoutmenu.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.615Z","timestamp":1785594478615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/flyoutmenu.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:48 GMT\r\netag: \"478-5f723178-8505776f3e5a637b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 357\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1144,"size_decoded":718,"mime_type":"text/css","magic":"ASCII text","md5":"38a05d0162e261c1447cbda9f6458b4b","sha1":"a0aa852db63871e14928c08fed2681cbc8d8f3d5","sha256":"2ed1493cf17b6473e225f0272f54aa47a16870422d0a17e73e869e4498f6ce9a","sha512":"b2c66252f287fbcbd9e4883f95d4eccbd5d6c4050275d667ea1871997a7e98b1c37ee23639c192a69eaf9bcc542c4fb15c022239799dd3e7d2e136995ffade9c","ssdeep":"","tlshash":"212149826b598780f15fc0b1e051eb71f7694243d697ccf992f031bcee463ec0aa2624","first_seen":"2023-04-06T16:22:46Z","last_seen":"2026-08-08T17:01:35.502022Z","times_seen":400,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.034Z","timestamp":1785594479034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagramhelp.whf.bz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:20 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263859\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-10T18:08:52.444968Z","times_seen":63474,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":26,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/styles__ltr.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/index_files/bframe.html","date":"2026-08-01T14:27:59.300Z","timestamp":1785594479300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/styles__ltr.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/index_files/bframe.html\r\nCookie: _swa_u=ccf4b38a-6b28-44bf-a030-2d6b2d33a288; synthasiteVisitorId=CBC24AFB-23F0-0001-F581-13F03D902A80; synthasiteVisitId=CBC24AFB-23F0-0001-255F-8A101C401165\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:53 GMT\r\netag: \"c527-5f72317d-a00eced5aadad768;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 25064\r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50471,"size_decoded":25428,"mime_type":"text/css","magic":"ASCII text, with very long lines (50471), with no line terminators","md5":"f6f7b57c125740683825d9fb749f0ce5","sha1":"318c4afcc7cfc0c3aff22fe17843820c116af14b","sha256":"34df2a11919eb5a458d1b19c5a635134f6042794831eec2a58669b1a9d687874","sha512":"3c5f493402cee4854dbdfe87023cd32d120078728194395490320faa2c3ddae97b0411ba628fa0336a6f3492a2c86a82063a45a2773d4bc7920f663b86d8a35d","ssdeep":"768:+LUmmAWTe2uXYp8Mi+yKSqKebyBwEvDl+xedtY5PoiDH1fkQJVEwY:4UcW6v+2qKwgDliP7dnY","tlshash":"d0336d7374503a2bbc3793a170527ddcf02cd822fb525b76e795ba3085ca0b79262b46","first_seen":"2026-07-17T06:33:18.927545Z","last_seen":"2026-08-01T14:32:36.847777Z","times_seen":4,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/favicon.ico","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.705Z","timestamp":1785594479705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nCookie: _swa_u=ccf4b38a-6b28-44bf-a030-2d6b2d33a288; synthasiteVisitorId=CBC24AFB-23F0-0001-F581-13F03D902A80; synthasiteVisitId=CBC24AFB-23F0-0001-255F-8A101C401165\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1477,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-10T19:55:59.460607Z","times_seen":148726,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/Default.css","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.619Z","timestamp":1785594478619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/Default.css HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 08 Aug 2026 14:27:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 28 Sep 2020 18:54:43 GMT\r\netag: \"115a-5f723173-4279bc921223403;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1069\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4442,"size_decoded":1431,"mime_type":"text/css","magic":"ASCII text","md5":"adde0476a3c7d8ea49c743aa2973791b","sha1":"6847484db8967259f90cf9aa3748ab82d115cbca","sha256":"f47ad5f78903e7bf01377d12a3a6ec66183858c7f76bb28258e9218fa455396b","sha512":"b957126fea9f6586517e28feb34100c503548fdca3cf14054ef25292ea938076324cb040197a3c87017f37ff881078bf902b034fd059ecfd1c1015d1b9bd010e","ssdeep":"96:sQkqCGbLCAr4t1GtncEctc8o9oz3VLTExxBhoGrdQF1yuFe5bkH4ZqyGoLPMcjRU:sQTC4+Ar4t1OcdWtOz3Vu6KdQXyuFe50","tlshash":"c4919c551e510a04b95bc2a039fa8b83e3361117cde7ed7ebdea2458cf4d09478beb48","first_seen":"2023-05-02T15:43:32Z","last_seen":"2026-08-01T14:32:36.849262Z","times_seen":54,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.sitewit.com/images/cq_blank.gif?_sw_yolaid=42D4F868883B401682BD9AE7F3E28925\u0026_sw_uid=ccf4b38a-6b28-44bf-a030-2d6b2d33a288\u0026_sw_fp=0f375cdb4bf3f78dc75a9b21fec0cb0ea6e4ba17\u0026_sw_pl=660\u0026_sw_pc=5\u0026_sw_dat=MXxpbnN0YWdyYW1oZWxwLndoZi5ienxodHRwczovL2luc3RhZ3JhbWhlbHAud2hmLmJ6L3xlbi1VU3wxMjgwfDEwMjR8MjR8RmlyZWZveC8xMzQuMHx4NjR8MXwwfDF8MHwtfHwtfC18LXw3OC4xOTAuNzEuOTB8MA==\u0026to=3","fqdn":"analytics.sitewit.com","domain":"sitewit.com","tld":"com"},"ip":{"addr":"54.196.171.96","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.007Z","timestamp":1785594479007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.sitewit.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 05 Aug 2025 00:00:00 GMT","end":"Sat, 05 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"41:CA:C6:A0:78:81:24:63:A1:A3:0B:69:41:3C:41:DD:5B:B2:2A:0E","sha256":"86:B6:90:FC:2A:A8:5E:46:B5:E1:50:7D:26:AE:CB:1B:B5:22:C0:D9:4B:59:29:C0:66:C2:B3:D7:BF:A1:C9:48"}}},"request":{"raw":"GET /images/cq_blank.gif?_sw_yolaid=42D4F868883B401682BD9AE7F3E28925\u0026_sw_uid=ccf4b38a-6b28-44bf-a030-2d6b2d33a288\u0026_sw_fp=0f375cdb4bf3f78dc75a9b21fec0cb0ea6e4ba17\u0026_sw_pl=660\u0026_sw_pc=5\u0026_sw_dat=MXxpbnN0YWdyYW1oZWxwLndoZi5ienxodHRwczovL2luc3RhZ3JhbWhlbHAud2hmLmJ6L3xlbi1VU3wxMjgwfDEwMjR8MjR8RmlyZWZveC8xMzQuMHx4NjR8MXwwfDF8MHwtfHwtfC18LXw3OC4xOTAuNzEuOTB8MA==\u0026to=3 HTTP/1.1\r\nHost: analytics.sitewit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35\r\nset-cookie: AWSALB=Hv/fMdW8BUY8JA7hEzDG0QoOZFiCsfNcI+8bhTnGQm6ef1tGZKpfjoRM9xE9CJyCfIiAcpoSSLX+0nn/EfDaFuL0WbAeCmvFnn9j9kfRSxnMCQBX9Q67gIY+zu2/; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/\nAWSALBCORS=Hv/fMdW8BUY8JA7hEzDG0QoOZFiCsfNcI+8bhTnGQm6ef1tGZKpfjoRM9xE9CJyCfIiAcpoSSLX+0nn/EfDaFuL0WbAeCmvFnn9j9kfRSxnMCQBX9Q67gIY+zu2/; Expires=Sat, 08 Aug 2026 14:27:59 GMT; Path=/; SameSite=None; Secure\r\ncache-control: no-cache\r\nlast-modified: Thu, 24 Jun 2010 20:21:15 GMT\r\naccept-ranges: bytes\r\netag: \"9f8deacbda13cb1:0\"\r\nserver: Microsoft-IIS/10.0\r\np3p: CP=\"DSP CAO CUR DEVo PSAo PSDo ADMo OUR STP NAV COM INT STA UNI PHY DEM\", policyref=\"/w3c/p3p.xml\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]}],"data":{"size":35,"size_decoded":803,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28d6814f309ea289f847c69cf91194c6","sha1":"0f4e929dd5bb2564f7ab9c76338e04e292a42ace","sha256":"8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015","sha512":"1d68b92e8d822fe82dc7563edd7b37f3418a02a89f1a9f0454cca664c2fc2565235e0d85540ff9be0b20175be3f5b7b4eae1175067465d5cca13486aab4c582c","ssdeep":"","tlshash":"be800003c280c002c2a2c0308e08ca802a8ab0a08a28030fb0ec3baafc2a2a20c00000","first_seen":"2023-04-05T07:36:27Z","last_seen":"2026-08-10T19:39:01.721205Z","times_seen":54799,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":2,"connect":98,"send":0,"wait":93,"receive":0,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/bframe.html","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.167Z","timestamp":1785594479167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/bframe.html HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nCookie: _swa_u=ccf4b38a-6b28-44bf-a030-2d6b2d33a288\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nlast-modified: Mon, 28 Sep 2020 18:54:45 GMT\r\netag: \"1ed3-5f723175-af0b39865c0604f9;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1033\r\ndate: Sat, 01 Aug 2026 14:27:59 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7891,"size_decoded":1318,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"09ff5641333519ec831f7e17fb96a491","sha1":"a62ebee42449e93d1b1350689592d0c282481c8d","sha256":"74340c500a513aef076ef71d11a1c669747906026fd09e63c9094c0e072c97ed","sha512":"a3dc85a0e775e69ed809ddd85bf6501928fcf8cab52e2693af2fc42e28e6dd0765e0f5f80f67e60417ac2cdf4d66502b71886e57e9c9f0088c74568a7ba1e8bd","ssdeep":"192:ej7fQ7H7y7TX7V7lg7IbrW7rUrBrNsrSrFLrvJ3nJRJEJWAJ/JM3J7wh:+fsb2TrBKqWHAtNYe9R3JzqWuhw7wh","tlshash":"6af1ad500c8b9414ab830ce177ce3a35fd4e9515310ac566fbfd7868eee7e1a829474e","first_seen":"2026-07-17T06:33:18.909131Z","last_seen":"2026-08-01T14:32:36.85962Z","times_seen":4,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/recaptcha.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.626Z","timestamp":1785594478626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/recaptcha.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:50 GMT\r\netag: \"3cf-5f72317a-da3ed80972674e1f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 975\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":975,"size_decoded":1235,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"0973cb3bce7c134b9568a1a5618161e0","sha1":"f4429294daf03f14b0c446b25ef1a7821a07aa46","sha256":"b792d591094e6e05f3aec7d0af84483fe6e5ca316532f33e61ed05f351f03d6a","sha512":"b3b9f4830b537bb95b0b4ea99c3d1a0cebb8c21ef248130472e8aa90ed026ebca902fbf4427b17864343bb7e7b1713bf3f16ed50f9222767ba3b2fd2ec81d938","ssdeep":"","tlshash":"ef119eb5acb610a06c27147593df1bc5b01b819ff10f9e403948921d1ff88e7c559f99","first_seen":"2023-03-07T13:11:19Z","last_seen":"2026-08-01T14:32:36.855914Z","times_seen":100,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/browserify.build.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.629Z","timestamp":1785594478629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/browserify.build.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:48 GMT\r\netag: \"52cd2-5f723178-b54d9492841f8a4;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 339154\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":339154,"size_decoded":339418,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T19:57:25.563791Z","times_seen":17823511,"resource_available":true,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.sitewit.com/js/42D4F868883B401682BD9AE7F3E28925/sw_connect.js?ispartner=yola\u0026ns=sw","fqdn":"connect.sitewit.com","domain":"sitewit.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.006Z","timestamp":1785594479006,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/42D4F868883B401682BD9AE7F3E28925/sw_connect.js?ispartner=yola\u0026ns=sw HTTP/1.1\r\nHost: connect.sitewit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T19:57:25.563791Z","times_seen":17823511,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:59.028Z","timestamp":1785594479028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://instagramhelp.whf.bz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 29 Jul 2026 13:10:20 GMT\r\nexpires: Thu, 29 Jul 2027 13:10:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 263859\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-08-10T18:08:52.444968Z","times_seen":63474,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":18,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/flyoutmenu.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.616Z","timestamp":1785594478616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/flyoutmenu.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:48 GMT\r\netag: \"bd8-5f723178-c43974aef6dfbba1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3032\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3032,"size_decoded":3293,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text","md5":"2d8976f0d819a70d2e1e3adc3c1ecb57","sha1":"d9348033373d02b006ee3e73a8a53be9bb0e79f4","sha256":"4b7dd2923843fa2780f4a26f9230c200538a6d6204093fe1a0d692eea3f777e8","sha512":"4001f81785ac5e353e41a1937d11cf2a3af802f535892437f0a8ce016f30aad8b98de81c70adf25a07d1b179254cc9f7d816c449694ac5070729cbcc0d80dc4f","ssdeep":"","tlshash":"7451d256b5b220a1e8e77164879f7c1497734913010dce00783e7d4c1fa19b925ecbfa","first_seen":"2023-03-07T01:10:16Z","last_seen":"2026-08-08T17:01:35.485172Z","times_seen":475,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"instagramhelp.whf.bz/index_files/api.js.indir","fqdn":"instagramhelp.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"69.164.250.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://instagramhelp.whf.bz/","date":"2026-08-01T14:27:58.628Z","timestamp":1785594478628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ftp.instagramhelp.whf.bz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Jul 2026 16:53:40 GMT","end":"Tue, 20 Oct 2026 16:53:39 GMT"},"fingerprint":{"sha1":"C0:44:40:1E:47:CE:A0:44:4C:AB:C0:88:DE:1A:9E:3B:9D:7D:DA:47","sha256":"6A:94:F0:36:22:F7:2F:85:EE:B6:67:D5:77:55:D2:8B:27:16:FB:F8:F5:FA:DA:AC:42:7D:62:41:C0:CF:A9:C1"}}},"request":{"raw":"GET /index_files/api.js.indir HTTP/1.1\r\nHost: instagramhelp.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://instagramhelp.whf.bz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/octet-stream\r\nlast-modified: Mon, 28 Sep 2020 18:54:45 GMT\r\netag: \"2da-5f723175-9560bf9becae383b;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 730\r\ndate: Sat, 01 Aug 2026 14:27:58 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":730,"size_decoded":990,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (730), with no line terminators","md5":"3f7c86e38e7bc26d7d37aad16999af12","sha1":"e490c9282485ae2a310ad2ff70b77fa150731fca","sha256":"44a3eb2096c23ee431e8ea1d5e7e51c67ca897570e31656fa765356c51055f70","sha512":"a6e3ab7a158b3f1152a1ff989765b9cb62df1dd9be1ae0caecdb7fce2f6d1cfc89eee512709df2f688eb962a079643640cb9c61c2610fac1a9aabe84623a38e1","ssdeep":"","tlshash":"630197b61914b0395eb219f2d0fecbb0e4105028e01889e89616ea885e3ddcbce15986","first_seen":"2026-07-17T06:33:18.930629Z","last_seen":"2026-08-01T14:32:36.864757Z","times_seen":4,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"instagramhelp.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-01","alert":"Phishing Block","trigger":"instagramhelp.whf.bz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}