Overview

URL www.instagran-help-center.ga/login.php?username=emmet48
IP193.142.147.11
ASNFREE RANGE CLOUD
Location Germany
Report completed2022-09-29 05:03:05 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-29 2 www.instagran-help-center.ga/vendor/animsition/js/animsition.min.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/bootstrap/js/bootstrap.min.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/daterangepicker/moment.min.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/bootstrap/js/popper.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/daterangepicker/daterangepicker.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/countdowntime/countdowntime.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/select2/select2.min.js Phishing
2022-09-29 2 www.instagran-help-center.ga/vendor/jquery/jquery-3.2.1.min.js Phishing
2022-09-29 2 www.instagran-help-center.ga/js/main.js Phishing
2022-09-29 2 www.instagran-help-center.ga/fonts/poppins/Poppins-Medium.ttf Phishing
2022-09-29 2 www.instagran-help-center.ga/fonts/poppins/Poppins-SemiBold.ttf Phishing
2022-09-29 2 www.instagran-help-center.ga/fonts/poppins/Poppins-Regular.ttf Phishing
2022-09-29 2 www.instagran-help-center.ga/fonts/poppins/Poppins-Bold.ttf Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS
Scan Date Severity Indicator Comment
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed
2022-09-29 2 instagran-help-center.ga Sinkholed


Files

No files detected



Passive DNS (12)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS e1.o.lencr.org (1) 6159 2021-08-20 07:36:30 UTC 2022-09-28 05:22:53 UTC 23.36.77.32
mnemonic passive DNS img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2022-09-29 04:10:37 UTC 34.120.237.76
mnemonic passive DNS cdn3.dumpor.com (1) 475752 2021-05-14 05:22:05 UTC 2022-09-12 23:18:23 UTC 104.21.70.22
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-28 18:56:49 UTC 143.204.55.36
mnemonic passive DNS r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2022-09-28 04:36:09 UTC 23.36.76.226
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-28 05:13:47 UTC 34.160.144.191
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-28 05:02:28 UTC 54.70.239.215
mnemonic passive DNS www.log.com.tr (1) 616965 2017-02-01 06:58:22 UTC 2022-09-17 10:36:24 UTC 172.67.184.219
mnemonic passive DNS i.hizliresim.com (1) 110131 2015-03-20 20:37:47 UTC 2022-09-28 06:13:46 UTC 104.26.12.201
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-28 04:36:06 UTC 34.117.237.239
mnemonic passive DNS ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-29 04:12:37 UTC 93.184.220.29
mnemonic passive DNS www.instagran-help-center.ga (25) 0 2022-06-26 19:29:16 UTC 2022-09-28 21:55:23 UTC 193.142.147.11 Unknown ranking


Recent reports on same IP/ASN/Domain/Screenshot

Last 2 reports on IP: 193.142.147.11

Date UQ / IDS / BL URL IP
2022-11-14 20:13:09 +0000
0 - 0 - 17 web-roblox.site/games/2753915549/UPDATE-Blox- (...) 193.142.147.11
2022-09-29 05:03:05 +0000
0 - 0 - 38 www.instagran-help-center.ga/login.php?userna (...) 193.142.147.11

Last 5 reports on ASN: FREE RANGE CLOUD

Date UQ / IDS / BL URL IP
2022-12-01 12:44:40 +0000
0 - 0 - 1 homepagestatic.ch/ 206.83.40.111
2022-11-26 01:01:16 +0000
0 - 0 - 2 mldhg.info/hVvi0RamaM0*n4*SQHaHLyZInL*5xr_xrB (...) 23.152.226.66
2022-11-14 20:13:09 +0000
0 - 0 - 17 web-roblox.site/games/2753915549/UPDATE-Blox- (...) 193.142.147.11
2022-11-09 19:22:00 +0000
0 - 0 - 2 1001.skin/CSLHORSLHORtCG73C7bnKaZPDERcNgZ6ZPD (...) 23.152.226.85
2022-10-15 15:35:06 +0000
0 - 0 - 1 pictured.skin/bpe1rcuykvwxadh*6z*5pmyntrqgji5 (...) 23.152.226.66

Last 1 reports on domain: instagran-help-center.ga

Date UQ / IDS / BL URL IP
2022-09-29 05:03:05 +0000
0 - 0 - 38 www.instagran-help-center.ga/login.php?userna (...) 193.142.147.11

No other reports with similar screenshot



JavaScript

Executed Scripts (9)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (46)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 04:15:52 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: czUs5pUNTVcUrrJNuZQ0FJlrGLVlEhWOVSgDu8isN28gxldMVgIU1A==
Age: 2822


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7452
Expires: Thu, 29 Sep 2022 07:07:06 GMT
Date: Thu, 29 Sep 2022 05:02:54 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E16E8B782B441ECB9A57C3FC3DB9884B5A3034967B846CCA67B2F53644FCABDF"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5764
Expires: Thu, 29 Sep 2022 06:38:58 GMT
Date: Thu, 29 Sep 2022 05:02:54 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: b4eqfLnehWaJ6SrgHJTl41H4MyxdOUSQ2WiyoSe6FUKLBl1ybpgqg5NfDQwRDTMeHg3RAZX6qZs=
x-amz-request-id: R6T3E065EP9QH9NJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 29 Sep 2022 04:47:48 GMT
age: 906
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
etag: "6113f8408c59aebe188d6af273b90743"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 29 Sep 2022 05:02:54 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 04:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Thu, 29 Sep 2022 04:37:34 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: y18h0zpOwVSpg2USHF3nhaLvkujgEjnWlOmZwY07YShWK7cd0P7sPw==
Age: 2002


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1457
Cache-Control: 'max-age=158059'
Date: Thu, 29 Sep 2022 05:02:55 GMT
Last-Modified: Thu, 29 Sep 2022 04:38:38 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EJDH52fu02N+jA+Qb0GR4g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         54.70.239.215
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xyHjBBTsZ109fAGTM1yqdic1c1M=

                                        
                                            GET /login.php?username=emmet48 HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 29 Sep 2022 05:02:54 GMT
Server: Apache/2
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp; path=/
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1870
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (612)
Size:   1870
Md5:    f67fe855774d194d0c55a111d7b50357
Sha1:   a2d98d1679be4b3e8c82b80a203c23bb7625c429
Sha256: f9a1de8e83aa4d3be6061f1353528f3b197766853e5c4b82a0a18af024fb5eb0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /fonts/font-awesome-4.7.0/css/font-awesome.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 26 Jun 2022 15:30:52 GMT
ETag: "7918-5e25b7d154300-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 7053
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (30837)
Size:   7053
Md5:    52f1a8a2ce85fa8432308b33bc1a2e79
Sha1:   fd80917af5371c8ecad0198592a1e7cce4b77b0e
Sha256: 07bd6a9ea0213e20f362485aadc17a88c486ecfb394004b41b8b38db6e6a35f6

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/animate/animate.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 26 Jun 2022 15:36:42 GMT
ETag: "5d28-5e25b91f1d680-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2922
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text
Size:   2922
Md5:    3eab22a82ed95236131e00f86db0d1f5
Sha1:   10e68138b5fcd82914d5da31dd619a82ccd4c22a
Sha256: 4c092c3a5766870e645303fa1e3d5883614f7e27538abbeab89c6ea9d0fb073e

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /fonts/iconic/css/material-design-iconic-font.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 26 Jun 2022 15:32:05 GMT
ETag: "1149f-5e25b816f2740-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 8004
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   8004
Md5:    8e52d20cf4fddc255d601b84eb80ff21
Sha1:   bfee70e6b9023a19bdc803e525759d1baca76e3d
Sha256: 64e48e86e8ca9bb84b40fe9dddaec3c3f131552445fc9d9d5593a6174f9b8269

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/css-hamburgers/hamburgers.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 26 Jun 2022 15:37:57 GMT
ETag: "4ce6-5e25b966a3f40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2122
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (19499), with CRLF line terminators
Size:   2122
Md5:    57b2271ac911fcb31c8298e186020a9a
Sha1:   0f4bf0d95f44b5b5c4a3732113082b9f11efd9fb
Sha256: b9b7cd2ae285d5dae7edea4e4d6ed79bdff2178187bf30abd368f4e26037b2e0

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/animsition/css/animsition.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Sun, 26 Jun 2022 15:36:58 GMT
ETag: "6b56-5e25b92e5fa80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 2241
Keep-Alive: timeout=2, max=100


--- Additional Info ---
Magic:  ASCII text, with very long lines (27282)
Size:   2241
Md5:    de74660f0ccc8bee854064e0036baf8f
Sha1:   ee96f6364955f5cf9cd4abff5233fc56e1720cf1
Sha256: 7cc0066820711213a2b600397cf645ff206e85d13d1bd1758a462c17bb8d455a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:55 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:37:27 GMT
ETag: "1e822-5e25b94a07bc0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 18607
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65320)
Size:   18607
Md5:    bc926d176eaaaa9fd2b245fbe6ad7d94
Sha1:   7ad7be43b1046973a71cb597127751262084d899
Sha256: 18ca3be5fe3504ee1a984b1b1b39f92a02f4035233b6f23a8cb071d39d03d57a

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/select2/select2.min.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:26 GMT
ETag: "3b5c-5e25b9824c080-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1987
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (15195)
Size:   1987
Md5:    74cafc55fd4afb3a6c0a72a2d7f9cde3
Sha1:   61fafd31da714aca39ae881c63f6592c65fef75d
Sha256: 484d79735bd0cc611276b69fa005afe594b1160b816d6ed93775fc7258108110

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/daterangepicker/daterangepicker.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:05 GMT
ETag: "1fe3-5e25b96e45140-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1602
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   1602
Md5:    f1b23c8f6117a77367f051d3e07e636a
Sha1:   9f6da21b2bfb770e95433df25300da7983b355b2
Sha256: 48f97f137940c6e141bcd2c5f1b7c5bcb4b2aff0ecf8eb5cce2508b1fa0ef6f6

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /css/main.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:29:27 GMT
ETag: "236d-5e25b780443c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1710
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   1710
Md5:    876145417f864446fa3b28a2f2719db8
Sha1:   987bd6511702304f2e085624fc5536176e701135
Sha256: 805d0039ae01cd451f4cc0297440879a6c1d85b67ee123226864ab64d796001c

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/animsition/js/animsition.min.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:37:06 GMT
ETag: "15ef-5e25b93600c80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1976
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (5415)
Size:   1976
Md5:    6b8d8e542ec21b7658458e71ea366450
Sha1:   bb1c66a03904ee41c573b012766b9b460347951f
Sha256: f1089652852ef18875de26da2f0747141a4507a813b5aa8e105d965fef52a813

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /css/util.css HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:29:27 GMT
ETag: "1531e-5e25b780443c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12894
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   12894
Md5:    f36d15dd75dfe7c0fa0d99779bef9539
Sha1:   fbd7e4b6c50b6ff04e26d8f02f585121d4b787dc
Sha256: 505fd9e6140c348de2838857405c37a8e216f9804cf481f553e9d6f009d77cf2

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /vendor/bootstrap/js/bootstrap.min.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:37:34 GMT
ETag: "c7c7-5e25b950b4b80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12980
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (50904)
Size:   12980
Md5:    2397fd22c4f09352a4c4614c1e28b50e
Sha1:   68c1cf54eb8f7bbd0e4f761c15f3442d7c79c2ec
Sha256: 0e706dd5d11a409c89cd061b62deb06360bef74f5b0c678a2022a547be8a29e8

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /wp-content/uploads/2021/10/facebook-metaverse-ozelinde-yeni-adini-duyurdu-meta.jpg HTTP/1.1 
Host: www.log.com.tr
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         172.67.184.219
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Thu, 29 Sep 2022 05:02:56 GMT
content-length: 33743
cache-control: public, max-age=63072000
expires: Fri, 27 Sep 2024 23:39:49 GMT
last-modified: Thu, 28 Oct 2021 18:19:10 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-cache-status: HIT
age: 19387
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ub7zPl%2BSRsDSn4XHWr5Tl8VkwyIskup%2FFrE8GhsnGJ221lAltW3cf%2BzdR9Yq2tFqzoKKsyxoyoDNqf4iL7fgntDRy86KvFj%2BS11AOFAdLyLR6VnNXfpcniY%2F2t3sH84lVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75222b607af50b06-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1280x720, components 3\012- data
Size:   33743
Md5:    f895c04548680e2aca58de797f81d564
Sha1:   3fd38cefabd544c527e753dea4b2145b31faf951
Sha256: fa9a3079959fa56e1ea2f82ca0123c0ea261cb23adc0fd9939688a780ca0b3dd
                                        
                                            GET /vendor/daterangepicker/moment.min.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:06 GMT
ETag: "b635-5e25b96f39380-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 15265
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32010)
Size:   15265
Md5:    b2ec5f4cde2e11e25ecff427834c47c0
Sha1:   02087cbbbd7da1baad7a1176db0b691a7a28127e
Sha256: 9597804117078ba3ac1cba4a7bc110c1db0a9390087730d7af368c047ef03ed8

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /vendor/bootstrap/js/popper.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:37:33 GMT
ETag: "13f06-5e25b94fc0940-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 21214
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (337)
Size:   21214
Md5:    6b4b06f0bd06bd9871c8e2673b377508
Sha1:   a5938c6ad2c6769bfe2408bdfe0c9fbaca440bc2
Sha256: 5d17010fbdc05e9811f7e036b9095802565a6e4623caa50f5bcb4b0f0254a826

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /vendor/daterangepicker/daterangepicker.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:06 GMT
ETag: "11090-5e25b96f39380-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 12045
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text
Size:   12045
Md5:    8601502bec88c350ae54358d53fe31f5
Sha1:   d73d313182a3e13149e5efcb5ff190ad73c426f2
Sha256: 00db34ffafe8683587df845e452ee7b7a9eac7025807275f9ae4e55d38bb9f6f

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /vendor/countdowntime/countdowntime.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:37:49 GMT
ETag: "53c-5e25b95f02d40-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 483
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   483
Md5:    37989697f8a2da068cf7bdb9e5f2a8f9
Sha1:   016c1b5c7394d231c99e3c838c33d15c90fb0a04
Sha256: a50051e2c19c742e9cfa0c2fe7d1f732a4c8f853e6274bb22444b01c15001162

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /vendor/select2/select2.min.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:27 GMT
ETag: "10468-5e25b983402c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 19023
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (32091)
Size:   19023
Md5:    781d26c70b32fe18c93c2c7a20060370
Sha1:   8b7b946db6b1f7d151ed0f76012641f8e7ba83d6
Sha256: 180879347b62f29bcc5f5b1898566dca64827329582317fb70e275ea4c2d80be

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /vendor/jquery/jquery-3.2.1.min.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:38:14 GMT
ETag: "15283-5e25b976da580-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 30138
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   30138
Md5:    3430607b4301113ad9394c9260eef3f0
Sha1:   8c4db68b161b17e31be300e968a30ab0116b3193
Sha256: 31e4d11375322cd6f94dba7338570426f2412d6c5fa670427966d45c3648098c

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "3271C2596F5BA43D3BF783ED2ECC73ACB7855C079C045BADA5C9537ECCC77498"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17582
Expires: Thu, 29 Sep 2022 09:55:58 GMT
Date: Thu, 29 Sep 2022 05:02:56 GMT
Connection: keep-alive

                                        
                                            GET /js/main.js HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:34:33 GMT
ETag: "717-5e25b8a417440-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 569
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   569
Md5:    0c4ffb745707566eb4f81c8b2b541e58
Sha1:   88c92694a7e8c68b783e7cd035987c229af15449
Sha256: f68cc7bde9bcbf05f39c91c444ac751dbe08e9194f61f87251d227497863e708

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /fonts/poppins/Poppins-Medium.ttf HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/css/main.css
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:32:34 GMT
ETag: "2309c-5e25b8329a880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 15 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)Poppins MediumRegular3.010;I\012- data
Size:   67061
Md5:    8a1fc5ee59ef9b927fe8569771958d89
Sha1:   981d6acb36c76b91cad079e303ae9b26953f3327
Sha256: f2b74b67a91b210c7a4469268f385a94f94eef509410de2c49c47fc6d8ac0232

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /fonts/poppins/Poppins-SemiBold.ttf HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/css/main.css
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:32:34 GMT
ETag: "22b44-5e25b8329a880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 15 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)Poppins SemiBoldRegular3.010\012- data
Size:   66531
Md5:    9dd3b3875dd931d50747dc9ce0f14395
Sha1:   e02e4168ed9dcd8148cca404e35e32a4c562dda6
Sha256: 6dc11d68fed6490b8202ae8da33f424da393f331b446e5e88ea52fd8526b8b63

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /fonts/poppins/Poppins-Regular.ttf HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/css/main.css
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:32:34 GMT
ETag: "237a0-5e25b8329a880-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 13 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)PoppinsRegular3.010;ITFO;Pop\012- data
Size:   67118
Md5:    a36a2407d7de3f64a4528d553c696019
Sha1:   9d6bc5a5684275c17f080d7172dc943f14260048
Sha256: 1588ad4c8cfe14ca90fcc883a2545f89d61ddfa9c89d1796866a54ff25ab4133

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /fonts/poppins/Poppins-Bold.ttf HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/css/main.css
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 200 OK
Content-Type: application/x-font-ttf
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Last-Modified: Sun, 26 Jun 2022 15:32:31 GMT
ETag: "227cc-5e25b82fbe1c0-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=2, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  TrueType Font data, digitally signed, 15 tables, 1st "DSIG", 13 names, Microsoft, language 0x409, Copyright 2014-2017 Indian Type Foundry (info@indiantypefoundry.com)PoppinsBold3.010;ITFO;Poppin\012- data
Size:   66576
Md5:    3b8dba9987a2beed00672dc02e8205b4
Sha1:   d487eaeea9c215cfb94249c162cf4bae30354dd2
Sha256: d70028fb9255b4134a7275942032634befb938fff8f0de91174ca2148066a0f9

Alerts:
  Blocklists:
    - fortinet: Phishing
    - quad9: Sinkholed
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.instagran-help-center.ga
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/login.php?username=emmet48
Cookie: PHPSESSID=uhufu5420dk60caq78k359ebtp

                                         
                                         193.142.147.11
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 29 Sep 2022 05:02:56 GMT
Server: Apache/2
Content-Length: 315
Keep-Alive: timeout=2, max=96
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   315
Md5:    a34ac19f4afae63adc5d2f7bc970c07f
Sha1:   a82190fc530c265aa40a045c21770d967f4767b8
Sha256: d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13947
Expires: Thu, 29 Sep 2022 08:55:23 GMT
Date: Thu, 29 Sep 2022 05:02:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13947
Expires: Thu, 29 Sep 2022 08:55:23 GMT
Date: Thu, 29 Sep 2022 05:02:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13947
Expires: Thu, 29 Sep 2022 08:55:23 GMT
Date: Thu, 29 Sep 2022 05:02:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13947
Expires: Thu, 29 Sep 2022 08:55:23 GMT
Date: Thu, 29 Sep 2022 05:02:56 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6acbf011-a3c6-43cd-8ac6-b264d0806686.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 12387
x-amzn-requestid: dd1dbee1-daca-4539-9c84-a64a1c1b1162
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGU0FFLroAMFXHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326819-537af7437fe7e7141bee544c;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:03:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: IHmoS-ze77qiX6SYhy7-xFiMRLe-x_7qcK0AWcwcPjFvchtBRVyFIQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 04:25:00 GMT
age: 2276
etag: "9d4b472b38d146bb1d9b46ee881628abb8cd5dc5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12387
Md5:    2dae2d2b731dbea3d72711eb4dff2567
Sha1:   9d4b472b38d146bb1d9b46ee881628abb8cd5dc5
Sha256: 21f6b8a436e6ac990601a046f85ed78a2a4af899550d80ce66c43cfdfdcdaae7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5724d6da-9431-4843-a505-d3e09b3288d0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5461
x-amzn-requestid: 4206a547-f263-43be-839d-2f7f6ed98e25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnoFjRoAMFa0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-5558305f2182858a72a41137;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: McmbBeOh8xBrwjA8eMsWF5iSn9YaMXLc16bjNZh-tczaKEfVFmiovg==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:38:20 GMT
age: 26676
etag: "6189f15b09a582c678661657b6428b919e2ae09c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5461
Md5:    b2b1199932a09517125a796542aaeddf
Sha1:   6189f15b09a582c678661657b6428b919e2ae09c
Sha256: e31dc7cf7a636e5612a7ab9101b6e251af22dae8a3f65a4368f5bc7b4a75b072
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff61695e2-14b2-44b1-b2d0-93aed95788f3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10272
x-amzn-requestid: 443e641f-25dc-456c-bb7f-ae23153dc52d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVSwECzoAMFpeA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633268de-20524e433a72428653175a94;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:10 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: k1I8tevinkxbPVl-cUWVt8vOEqQK5rxo5B17xyQGMSkCUbrbNj4AmA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 04:02:37 GMT
age: 3619
etag: "9f21cefa8882ea63961ae2eb51b7cd406b2358d6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10272
Md5:    33d8a1c1782f57095619cfba8c58a4a5
Sha1:   9f21cefa8882ea63961ae2eb51b7cd406b2358d6
Sha256: 47c04dd3680f76a5bc54157c64d64dcb7dea517c8dace4fdcf8e46df43fa9cae
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Facd7b538-d96a-4708-95ed-af68304277d4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9312
x-amzn-requestid: 0982fd37-74e6-4b48-8c8c-3a34fd383655
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJo02EEQIAMFsIg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333bb52-66367f6431f844e965b07df5;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 03:11:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b4jMrNUwy5xlh8naPaqMLAUgG7EbnDgial9xpvOD2Dxn4s7BOAQlTg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 04:12:51 GMT
age: 3005
etag: "06a379cb61f7d7f113225b46e3f5e7ced25c6878"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9312
Md5:    dca86bc432ad7d82538e6edac4744212
Sha1:   06a379cb61f7d7f113225b46e3f5e7ced25c6878
Sha256: 55e111e036369e426b8f32f4a43ecec7fb8257b20de8445ae533676acbacb8de
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48a423-ea95-40fe-9f8b-55ca1ca874fc.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9688
x-amzn-requestid: 68e9fd78-af17-4a8f-ad4b-6fe563ae94fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4JHF5IAMFSXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9a-603f13d3016d77fa2ca94492;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gIg0vR5I9vnA6Z7MJtTNaXn2TK8YeHWWcJEodiNJ6BEB7z7LUrcV1Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:45:26 GMT
age: 26250
etag: "523da6aeec4cc23897fe01b0bc8b5da254edb3a8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9688
Md5:    28799c10f9ea39af55c7003f4254cc60
Sha1:   523da6aeec4cc23897fe01b0bc8b5da254edb3a8
Sha256: 2d1640fbd1f61aee3f2be670b37eb06e20bb265f702a428fadb550a4b51d64ab
                                        
                                            GET /view?q=%3DMCZhFmYjVTPkl2cfNmbfZyMGdjQ5MzM20TZvZyZzZTUyIleFh3Y5gTeiJlWK1kS581T1RUdO1kbVJld61ES4l2awQTeaJVOfRVQfBDM9g2bmUTL30jYjNmJBFUQBJ0YMF0NHhUQ90GZlZCVCl0bC1CWBt2Rhp1aoNFbxcUe9MGav91Yu9lJ5ATM9QXYj91Yu9lJt92Yu0WYydWY0Nnbp5GZj5SMtMTYnxWL05WZ052bjNXP0h2Xj52XmATNxgHM1EzcfdGcq1CdzRWPwR3c%2FcGcq5ibfhTM5MjM2czN0MTN4AjN0kjNwUzX5gTMyYDNyQDO5QTO2ETMx81N5MTNzYDO3IzL5ETL1gDOy4SM1Q3L29SbvNmLtFmcnFGdz5WauR2YuETLzE2Zs1CduVGdu92Yz9yL6MHc0RHa HTTP/1.1 
Host: cdn3.dumpor.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         104.21.70.22
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Thu, 29 Sep 2022 05:02:56 GMT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cache-control: max-age=1209600, no-transform, max-age=0, private, must-revalidate
last-modified: Mon, 18 Apr 2022 19:58:57 GMT
x-fb-trip-id: 1512268381
x-frame-options: DENY
content-digest: adler32=4113958315
timing-allow-origin: *
x-haystack-needlechecksum: 2438896864
x-needle-checksum: 1964655447
x-request-id: Fxk8Pmle3auc7OoJL54C
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2hGwEi0X6p3bVh7ix%2F1DhJVeI7A%2F7B0t%2FZ8xi75VZ6qle5B11O%2FVOq6jYvVjJMvSl351TxzZ5bDUoMk2sMRMJkxVk9Gqt0tGM6MKDlfOGOS0d53sTxmCKshgAQRKGVrB6eA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75222b600f07b505-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3\012- data
Size:   11366
Md5:    d9c0c17a935aab10919f6296ed87b630
Sha1:   59f6746fddab69367da699483b20cb750102aa7e
Sha256: b514764ae6f622cca67cb3984bba7b0bb48120a0a19d889d689f67045fe5a0fd
                                        
                                            GET /mwk2go0.png HTTP/1.1 
Host: i.hizliresim.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.instagran-help-center.ga/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.26.12.201
HTTP/2 200 OK
content-type: image/webp
                                        
date: Thu, 29 Sep 2022 05:02:56 GMT
cache-control: max-age=604800
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=26515
content-disposition: inline; filename="mwk2go0.webp"
etag: W/"0a3a43fbb5c19d8a314ae1b226998ac3"
expires: Sun, 11 Sep 2022 21:54:28 GMT
last-modified: Mon, 20 Sep 2021 20:16:45 GMT
vary: Accept
x-amz-id-2: +7drLYnQeumgZCSnC3R6j4352hIPgSY0Zsau/GKVkBk2smryOR2+MoiydnVpdbKwJZC6xAXHXDN4
x-amz-request-id: 9F69693D20FC3CDD
cf-cache-status: HIT
age: 19387
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDIUDbiedc%2BFLwTTwVhdoQ9IguX7s10LjALV5MmMvnqi7uezGZ%2BSgk6De03w%2FM6su82VDZ2Nv5Pjlz%2FcLSvAEAyJcFWvrI4%2FNdLhbXGx26Ex2ZpYO86WoAZxAgtPT5ihwqc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75222b61487eb505-OSL
X-Firefox-Spdy: h2


--- Additional Info ---