HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Accept-Language, Cookie, Accept-Encoding Content-Language: en Date: Thu, 10 Jan 2019 18:11:48 GMT Strict-Transport-Security: max-age=3600 Cache-Control: private, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Sat, 01 Jan 2000 00:00:00 GMT X-Frame-Options: SAMEORIGIN content-security-policy: report-uri https://www.instagram.com/security/csp_report/; default-src 'self' https://www.instagram.com; img-src https: data: blob:; font-src https: data:; media-src 'self' blob: https://www.instagram.com https://*.cdninstagram.com https://*.fbcdn.net; manifest-src 'self' https://www.instagram.com; script-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https://*.www.instagram.com https://www.instagram.com 'unsafe-inline'; connect-src 'self' https://instagram.com https://www.instagram.com https://*.www.instagram.com https://graph.instagram.com https://*.graph.instagram.com https://*.cdninstagram.com https://api.instagram.com wss://www.instagram.com wss://edge-chat.instagram.com https://*.facebook.com https://*.fbcdn.net https://*.facebook.net chrome-extension://boadgeojelhgndaghljhdicfkmllpafd; worker-src 'self' https://www.instagram.com; frame-src 'self' https://instagram.com https://www.instagram.com https://staticxx.facebook.com https://www.facebook.com https://web.facebook.com https://connect.facebook.net https://m.facebook.com; object-src 'none'; upgrade-insecure-requests X-Content-Type-Options: nosniff X-XSS-Protection: 0 Set-Cookie: urlgen="{\"108.161.19.190\": 54154}:1gheo0:HTp4zLA7oQExYE5gEPmQHl9b_YE"; Domain=.instagram.com; HttpOnly; Path=/; Secure Set-Cookie: mid=XDeK5AAEAAEJlizJo249TbqNAGlf; Domain=.instagram.com; expires=Sun, 07-Jan-2029 18:11:48 GMT; Max-Age=315360000; Path=/; Secure Set-Cookie: rur=PRN; Domain=.instagram.com; HttpOnly; Path=/; Secure Set-Cookie: mcd=3; Domain=.instagram.com; expires=Sun, 07-Jan-2029 18:11:48 GMT; Max-Age=315360000; Path=/; Secure Set-Cookie: csrftoken=xsUzwhNqgtwmqGk24MQRlBJG8xzIl3AS; Domain=.instagram.com; expires=Thu, 09-Jan-2020 18:11:48 GMT; Max-Age=31449600; Path=/; Secure Connection: keep-alive Content-Length: 36257 @pk_spam on Instagram: “This post has two photos with alt text”