Overview

URL https://medium.com/@eza9153/watch-online-fantastic-beasts-the-crimes-of-grindelwald-2018-full-hdq-movie-online-2759fd0ddab8
IP104.16.122.127
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-11-27 10:04:00 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.16.122.127

Date UQ / IDS / BL URL IP
2018-12-10 21:17:53 +0100
0 - 0 - 0 https://medium.com/@8makahk/live-coverage-afr (...) 104.16.122.127
2018-12-07 00:15:01 +0100
0 - 0 - 0 https://medium.com/@KuzineSoba/ 104.16.122.127
2018-12-06 16:35:46 +0100
0 - 0 - 0 https://medium.com/@tazulislam949/day-1-natio (...) 104.16.122.127
2018-12-02 06:12:20 +0100
0 - 0 - 0 https://medium.com/@banililyui/2018-fortnite- (...) 104.16.122.127
2018-11-29 05:34:46 +0100
0 - 0 - 0 https://medium.com/@kohd/%E0%B8%94%E0%B8%B9%E (...) 104.16.122.127
2018-11-28 13:15:49 +0100
0 - 0 - 0 https://medium.com/@Wildervsfurylive/how-to-w (...) 104.16.122.127
2018-11-28 13:15:34 +0100
0 - 0 - 0 https://medium.com/@searchbuzz/explore-the-be (...) 104.16.122.127
2018-11-27 09:06:23 +0100
0 - 0 - 0 https://medium.com/@eza9153/imdb-watch-ralph- (...) 104.16.122.127
2018-11-21 06:48:06 +0100
0 - 0 - 0 https://medium.com/@eza9153/watch-full-superg (...) 104.16.122.127
2018-11-21 06:40:24 +0100
0 - 0 - 0 https://medium.com/@eza9153/watch-full-arrow- (...) 104.16.122.127

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-12-12 11:44:23 +0100
0 - 0 - 0 rona.ca 104.16.252.81
2018-12-12 11:30:53 +0100
0 - 3 - 1 touramical.be/js/b.exe 104.27.148.119
2018-12-12 11:16:11 +0100
0 - 0 - 1 dl.onlinesubtitles.com/174376d78a662a123cb821 (...) 104.31.77.90
2018-12-12 11:12:18 +0100
0 - 1 - 0 idtalent.com/proforma-invoice-20140207.pdf.exe 104.28.16.185
2018-12-12 11:11:59 +0100
0 - 0 - 1 fastdownloads.info/ds-exe/484/1199/hotspot%20 (...) 104.24.125.44
2018-12-12 11:09:17 +0100
0 - 0 - 1 hotfire.us/clashofclanshack2014.exe 104.27.141.26
2018-12-12 10:54:23 +0100
0 - 0 - 4 nudgeoffer.racing/ 104.27.186.108
2018-12-12 10:53:36 +0100
0 - 0 - 1 cabalbg.com/LauncherEP8/updates/56.exe 104.28.26.57
2018-12-12 10:53:12 +0100
0 - 2 - 0 dl.viracuredownload.net/311002874/lpid:lp-917 (...) 104.27.189.191
2018-12-12 10:48:25 +0100
0 - 0 - 1 l1.pp3.cn/soft/UploadFile/201405/win7/2014051 (...) 162.159.211.34

Last 10 reports on domain: medium.com

Date UQ / IDS / BL URL IP
2018-12-10 22:47:06 +0100
0 - 0 - 0 https://medium.com/@8makahk/24bdd868b0d1 104.16.123.127
2018-12-10 21:17:53 +0100
0 - 0 - 0 https://medium.com/@8makahk/live-coverage-afr (...) 104.16.122.127
2018-12-08 10:05:12 +0100
0 - 0 - 0 https://medium.com/@claimcashreview/how-to-lo (...) 104.16.121.127
2018-12-08 06:55:33 +0100
0 - 0 - 0 https://medium.com/@binarycash/the-wealth-com (...) 104.16.123.127
2018-12-07 00:15:01 +0100
0 - 0 - 0 https://medium.com/@KuzineSoba/ 104.16.122.127
2018-12-06 16:35:46 +0100
0 - 0 - 0 https://medium.com/@tazulislam949/day-1-natio (...) 104.16.122.127
2018-12-04 07:37:43 +0100
0 - 0 - 0 https://medium.com/@daumstream/%EC%8A%A4%ED%8 (...) 104.16.124.127
2018-12-03 22:59:06 +0100
0 - 0 - 0 https://medium.com/@getpagespeed/varnish-4-cl (...) 104.16.120.127
2018-12-03 09:46:33 +0100
0 - 0 - 0 https://medium.com/@katejauli/codes-nba-2k19- (...) 104.16.124.127
2018-12-02 09:24:01 +0100
0 - 0 - 0 https://medium.com/p/de407c5d33c4?source=user (...) 104.16.124.127


JavaScript

Executed Scripts (14)


Executed Evals (2)

#1 JavaScript::Eval (size: 97, repeated: 1) - SHA256: a709ec2a7400c3a003f40710499297845c6aec32aa20a43de912e4394e9c3df1

                                        ({
    "id": "pid=264c9734ee45070315aceda5dc78dab4",
    "session_count": 1,
    "last_session_ts": 1543309405853
})
                                    

#2 JavaScript::Eval (size: 88, repeated: 3) - SHA256: d2e6ee1fef65e2035f9e12867b5459383921279c3707b1b4fb5b34afebe24092

                                        ({
    "sid": 1,
    "surl": "https://medium.com/suspended",
    "sref": "",
    "sts": 1543309405853,
    "slts": 0
})
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 738, repeated: 1) - SHA256: 39e5c5410a8dccfaedf6fd4e773f9ec440dbeb686f040baa94f0439638e9a8fc

                                        < style > section.section - image--fullBleed.is - backgrounded {
    padding - top: 829 px;
}
section.section - image--fullScreen.is - backgrounded, section.section - image--coverFade.is - backgrounded {
    min - height: 754 px;
    padding - top: 377 px;
}.u - height100vh {
    height: 754 px!important;
}.u - height110vh {
    height: 829 px!important;
}.u - minHeight100vh {
    min - height: 754 px!important;
}.u - maxHeight100vh {
    max - height: 754 px!important;
}
section.section - image--coverFade {
    height: 754 px;
}.section - aspectRatioViewportPlaceholder, .section - aspectRatioViewportCropPlaceholder {
    max - height: 754 px;
}.section - aspectRatioViewportBottomSpacer, .section - aspectRatioViewportBottomPlaceholder {
    max - height: 377 px;
}.zoomable: before {
    top: -754 px;left: -1176 px;padding: 754 px 1176 px;
} < /style>
                                    


HTTP Transactions (29)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=164929
Date: Tue, 27 Nov 2018 09:03:22 GMT
Etag: "5bf78baa-1d7"
Expires: Thu, 29 Nov 2018 06:52:11 GMT
Last-Modified: Fri, 23 Nov 2018 05:10:02 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6da733b36c01b660f5d85c95777b9c10
Sha1:   1e43d87035a0dec9ce5d3bc28c7b50c61d8f0e57
Sha256: 8712e72fdcfd8e4c8a2d1eb714316c1784452244b312ca8a8f5880ab5a6cc1b3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=156762
Date: Tue, 27 Nov 2018 09:03:22 GMT
Etag: "5bfc9bd2-1d7"
Expires: Thu, 29 Nov 2018 04:36:04 GMT
Last-Modified: Tue, 27 Nov 2018 01:20:18 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d940db5776ef9a58d489f2ed62ceb2f5
Sha1:   84dc84ce836be67f77c86356fa2c3ebed680e98e
Sha256: 52e2c816ba27d763aacdf578668f375f39b08eb30c0015776cf6b396ceb8ce48
                                        
                                            GET /@eza9153/watch-online-fantastic-beasts-the-crimes-of-grindelwald-2018-full-hdq-movie-online-2759fd0ddab8 HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.16.121.127
HTTP/1.1 302 Found
Content-Type: application/octet-stream
                                        
Date: Tue, 27 Nov 2018 09:03:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; expires=Wed, 27-Nov-19 09:03:22 GMT; path=/; domain=.medium.com; HttpOnly uid=lo_6LLt0Msp1rFF; Expires=Wed, 27-Nov-19 09:03:22 GMT; Domain=.medium.com; Path=/; Secure; HttpOnly sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI; path=/; expires=Wed, 27 Nov 2019 09:03:22 GMT; domain=.medium.com; secure; httponly
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543309402483:406cbad05a9a
X-Obvious-Info: 35868-cbef9d5,cbef9d58986
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Location: /suspended
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48036bd51e234279-OSL


--- Additional Info ---
                                        
                                            GET /suspended HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; uid=lo_6LLt0Msp1rFF; sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI

                                         
                                         104.16.121.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Tue, 27 Nov 2018 09:03:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543309402799:eb4dcdf64a8
X-Obvious-Info: 35868-cbef9d5,cbef9d58986
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48036bd71fa04279-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9305
Md5:    4cbd91f87f78f2d307bff6707066bc0c
Sha1:   74a090da2ab9b7bbe4388329a8031d9a6b630422
Sha256: ab26177fc3a829316e62e43f538b2b985167e05dbdab1867a455d8fec38afc64
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172682
Date: Tue, 27 Nov 2018 09:03:23 GMT
Etag: "5bfc789b-1d7"
Expires: Thu, 29 Nov 2018 09:01:25 GMT
Last-Modified: Mon, 26 Nov 2018 22:50:03 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e89178479164fafd1073e908792e3f02
Sha1:   dc45ad3969142947b9c0dfc5d7871816b940cf17
Sha256: d0a50fd9650c95180cdfc76a9098ceb3895a89ec843f5125797589875e54a18f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=89950
Date: Tue, 27 Nov 2018 09:03:23 GMT
Etag: "5bfbb168-1d7"
Expires: Wed, 28 Nov 2018 10:02:33 GMT
Last-Modified: Mon, 26 Nov 2018 08:40:08 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7a0dc1e1a5900b37c8b6072d053a6bd4
Sha1:   da7c654c73a5f1cc43d1b143ffe4349415cf2d41
Sha256: a7664120cf7ed3c6b311e8b87bc4d1b7949bf2527f0c20fa126b6d26dac28c05
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=89983
Date: Tue, 27 Nov 2018 09:03:23 GMT
Etag: "5bfbbf76-1d7"
Expires: Wed, 28 Nov 2018 10:03:06 GMT
Last-Modified: Mon, 26 Nov 2018 09:40:06 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    30ab553935c0dcf7f0e498c9166179ff
Sha1:   dd0c3e1b17b0060bba6d5721c1a8ffd457498d95
Sha256: 5049ac3caf776eaddd53f8d02101ab21eb9d41ddec9dbdaa12303f6a9221d0d6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=152996
Date: Tue, 27 Nov 2018 09:03:23 GMT
Etag: "5bfc9e20-1d7"
Expires: Thu, 29 Nov 2018 03:33:19 GMT
Last-Modified: Tue, 27 Nov 2018 01:30:08 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    eb0473f31e9bb529c01550801241cb17
Sha1:   fe7bfd287690a7607dfa09460706d750570f0ff7
Sha256: e0be596a359c388cbc5eae66f8a8f964fe8776fc06563255bb4851185c496445
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=473647, public, no-transform, must-revalidate
Last-Modified: Sun, 25 Nov 2018 20:36:39 GMT
Expires: Sun, 2 Dec 2018 20:36:39 GMT
Date: Tue, 27 Nov 2018 09:03:23 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    5b75500d5f7be790d83f1977117681eb
Sha1:   9184e5d39e232a577cc4278d048be298bf46d7bc
Sha256: 904e5ea1e9e5a4cd447ec283ebb8e7738333644957d69e998ee8ea909a2404f2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Nov 2018 09:03:23 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    57a15c4c0b58479a9270e24e313195f7
Sha1:   141849b67d996cf392a769a23905f08c3f30b4b7
Sha256: d9a457687fc64396c3178b6fe0cac62a7e905ac79ee36be962c7755b4e6765f0
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 27 Nov 2018 09:03:23 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /_/fp/gen-js/main-base.bundle.CaJkEaw9pdVKRmr9oIi5ng.js HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; uid=lo_6LLt0Msp1rFF; sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI

                                         
                                         104.16.119.145
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 27 Nov 2018 09:03:23 GMT
Content-Length: 337302
Connection: keep-alive
x-amz-id-2: pJQMJppIdGr9itAqBO/mBgWtHd9jZHVtwJZ5z3czmwAg67Ph/jlazADTTJMvD/co76fZo/59kqM=
x-amz-request-id: 854790F1BEDC49CC
Last-Modified: Mon, 26 Nov 2018 23:09:06 GMT
Etag: "cc602a36e08bad855c26bc97d6dc362b"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 27 Nov 2019 09:03:23 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 48036bda1a584261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   337302
Md5:    cc602a36e08bad855c26bc97d6dc362b
Sha1:   028e5d3bfe1787361300569ba49ca31df2273568
Sha256: a93933488a5449068b71c46579f0e1b900d77d1c38f7a0da2dbbdc36258292b6
                                        
                                            GET /keys/medium.com/p.js HTTP/1.1 
Host: d1z2jf7jlzjs58.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.51.135
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Tue, 07 Aug 2018 00:43:09 GMT
Last-Modified: Tue, 07 Aug 2018 00:27:38 GMT
Etag: W/"5b68e77a-9c11"
Content-Encoding: gzip
Age: 29906
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: WqR7LZ73dhZ_onXimw6Q141Mp4z2gdGhc7Hej06OcdUfWwPU-BgEgQ==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15262
Md5:    73cf72f043a322cf60426749b0819c51
Sha1:   05970b66fb6b712129abb0901e268bca757863a0
Sha256: ff998d914cb73671c692860d98059a7c9f6c03d7b37fe634706e8c3b34eee34a
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 27 Nov 2018 07:23:13 GMT
Expires: Tue, 27 Nov 2018 09:23:13 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17404
Cache-Control: public, max-age=7200
Age: 6010
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17404
Md5:    33586531225d561faadda61de818c510
Sha1:   9a3b5ffbdc4071557def3d9609eee6ad3c52d1e1
Sha256: 521d2fb506ca60463e914fd138e092f935579d31436dcff3cc6a1d216d06ef82
                                        
                                            GET /_/fp/css/main-branding-base.FeccmUudkubUaq0MQo0iAA.css HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; uid=lo_6LLt0Msp1rFF; sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI

                                         
                                         104.16.119.145
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 27 Nov 2018 09:03:24 GMT
Content-Length: 65226
Connection: keep-alive
x-amz-id-2: lndyDhyVmX2ewQR5im6Z7g+8XRBBo++LSpEoUK34twQabvJw6WWRhEHJHXKAvG/uogeBvoYPM9Q=
x-amz-request-id: A11F700A0BFB1D2B
Last-Modified: Wed, 21 Nov 2018 23:09:44 GMT
Etag: "2a45eae0ab4e5adbe058c4298eea9f12"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 27 Nov 2019 09:03:24 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 48036bd9f85a4255-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   65226
Md5:    2a45eae0ab4e5adbe058c4298eea9f12
Sha1:   e9053521bd4b10ee1a0848f5d44e22d9047dd935
Sha256: 0c64192290fd878ee4d8e644f024ff2625f7de71a4560301f80efdbd52f9d513
                                        
                                            GET /_/stat?event=pixel.load&origin=undefined HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; uid=lo_6LLt0Msp1rFF; sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI

                                         
                                         104.16.121.127
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Tue, 27 Nov 2018 09:03:24 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543309404406:15c6e6f814ef
X-Obvious-Info: 35868-cbef9d5,cbef9d58986
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48036be128864279-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /r/collect?v=1&_v=j72&a=1167442631&t=pageview&_s=1&dl=https%3A%2F%2Fmedium.com%2Fsuspended&ul=en-us&de=UTF-8&dt=Suspended%20%E2%80%93%20Medium&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=1098872533&gjid=2088578030&cid=1586164587.1543309405&tid=UA-24232453-2&_gid=1421932927.1543309405&_r=1&z=59572521 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         172.217.21.142
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 27 Nov 2018 09:03:24 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /_/fp/icons/favicon-rebrand-medium.3Y6xpZ-0FSdWDnPM3hSBIA.ico HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=dfc48b093629c53e261167361f517bbef1543309402; uid=lo_6LLt0Msp1rFF; sid=1:5B0+UuvN5IQVh2BjZ7NbmSlESpAX7dyeXJW755Nm03k03FW4DoO02cBgIPo0bhVI; _ga=GA1.2.1586164587.1543309405; _gid=GA1.2.1421932927.1543309405; _gat=1

                                         
                                         104.16.119.145
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Tue, 27 Nov 2018 09:03:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: UMif/Mf2eidebYT9ZrIun6p9jt2GJhxCBDxdGMfz6heF/CuVjMDdPo7YZk+1+T89lXhXuAe0W+A=
x-amz-request-id: D50AB4BA8395B54E
Last-Modified: Sat, 19 Aug 2017 00:25:31 GMT
Etag: W/"dd8eb1a59fb41527560e73ccde148120"
Cache-Control: public, max-age=31536000
CF-Cache-Status: HIT
Expires: Wed, 27 Nov 2019 09:03:25 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 48036be9de624261-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   788
Md5:    50594f97a83cc68aa5b1b64f4b2b1c50
Sha1:   dce5ec6cdfe8fd06704d83059156f15a9ff24cf9
Sha256: 00380dedc868a00178f805005e401a9c288c811940ca11815c1ee480a94f52c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100595
Date: Tue, 27 Nov 2018 09:03:26 GMT
Etag: "5bfbbacd-1d7"
Expires: Wed, 28 Nov 2018 13:00:01 GMT
Last-Modified: Mon, 26 Nov 2018 09:20:13 GMT
Server: ECS (lga/1378)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77bab.cloudfront.net (CloudFront)
X-Amz-Cf-Id: zzVyQ2CBAvIMxT7DMEdKMy8HLPvLUaKSu9NwBCzTrtoiJggcleJueQ==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    38dee670ab6d66fabf7f08c8e684e7c9
Sha1:   caaa74e8044dc7952330ee9ad8553dbc1055ecb3
Sha256: 880c3f1a8e79a1edfda3185af999562878af6e9064860624040c79de228bb949
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Tue, 27 Nov 2018 09:03:26 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Id: JyuReSZ7RmuxAVr2QyprjYupkfvvID2nCcewoB1qa3pwx_aeQsnCOA==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    6ada8ea047bde5eb7d4bd0e797e57317
Sha1:   16618cbcbd07d7c318b5f2a31d6729dd80be4055
Sha256: a3bce12464c94966d745e89c506fbad5dbb8737994b30c3291a34f0cb1b8f8f8
                                        
                                            GET /start/?rand=1543309405858&plid=62745992&idsite=medium.com&url=https%3A%2F%2Fmedium.com%2Fsuspended&urlref=&screen=1176x885%7C1176x855%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fmedium.com%2Fsuspended&sref=&sts=1543309405853&slts=0&title=Suspended+%E2%80%93+Medium&date=Tue+Nov+27+2018+10%3A03%3A25+GMT%2B0100&action=pageview&callback=parselyStartCallback HTTP/1.1 
Host: srv-2018-11-27-09.pixel.parsely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         52.3.6.115
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Tue, 27 Nov 2018 09:03:26 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Server: nginx
Set-Cookie: pid=264c9734ee45070315aceda5dc78dab4; expires=Wed, 27-Nov-19 09:03:26 GMT; domain=pixel.parsely.com; path=/
Content-Length: 77
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    decf5dd89bc3d620bbef3787931ca7a1
Sha1:   8cff72d0f79abcd1621578f2f741e8d2c254b01c
Sha256: e455e4471b330d0e5dfce3716dc431f6c44b24a4ccbaf671e893cf0a0c27aae3
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=87399
Date: Tue, 27 Nov 2018 09:03:26 GMT
Etag: "5bfb76cd-1d7"
Expires: Wed, 28 Nov 2018 09:20:05 GMT
Last-Modified: Mon, 26 Nov 2018 04:30:05 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ea67cfdbd13f55bed6c251c1a3fb538e
Sha1:   2f73aa9affea2a9b9ab8620b9bcc18310e18f84c
Sha256: 985a796cc79c37a4809043a3ff2484d0b49b2ac315eb5f146a46b304a982afaf
                                        
                                            GET /branch-latest.min.js HTTP/1.1 
Host: cdn.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.47.103
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 21234
Connection: keep-alive
Date: Mon, 22 Oct 2018 12:17:09 GMT
Cache-Control: max-age=300
Content-Encoding: gzip
Last-Modified: Tue, 18 Sep 2018 21:07:20 GMT
x-amz-version-id: mNTfVhEnx32undHGMDgVWco4_EqaZ.NM
Etag: "8342e31a6e2df3a9ad677e9770a07451"
Server: AmazonS3
Age: 26
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Id: vGfHPmtIUBtaiFa5Lcg0xpX2aKZB-DH78oZWClAILzewxQFTwrLr0g==


--- Additional Info ---
Magic:  gzip compressed data, was "build.min.js", from Unix, last modified: Tue Sep 18 23:06:56 2018
Size:   21234
Md5:    8342e31a6e2df3a9ad677e9770a07451
Sha1:   35fab1aaa3a7b08b248b3a989f060eeec7ef1866
Sha256: a829ac244ae1e403ce1511b2e3efddfdb874bcdceb28c4f6da142ad4a0316423
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125080
Date: Tue, 27 Nov 2018 09:03:26 GMT
Etag: "5bfc36fa-1d7"
Expires: Wed, 28 Nov 2018 19:48:06 GMT
Last-Modified: Mon, 26 Nov 2018 18:10:02 GMT
Server: ECS (lga/1318)
X-Cache: Miss from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77bab.cloudfront.net (CloudFront)
X-Amz-Cf-Id: xM6ppA3MVUWTcORW_VdqnGY4KFaaOc4wCXN_zATm3n_TVXll7fTtEA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    186a046fe06b6afb1aa38cfbfab67820
Sha1:   68d59f9d888b3293f21a8c3723868580951ba563
Sha256: 82ff40de691c5c96e8de0fd5091eb2cbdec91c53a90ba09cbbcebba9769fd83a
                                        
                                            GET /_r?sdk=web2.46.0&branch_key=key_live_ofxXr2qTrrU9NqURK8ZwEhknBxiI6KBm&callback=branch_callback__0 HTTP/1.1 
Host: app.link
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.47.45
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Content-Length: 90
Connection: keep-alive
Server: openresty/1.13.6.2
Date: Tue, 27 Nov 2018 09:03:27 GMT
X-Powered-By: Express
Set-Cookie: _s=H8TRzc5prw68ssYUF9EDmiM%2FeicdU240c1NDjSKzSHixsGN6ZUvkzjVnaYddcuL7; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Wed, 27 Nov 2019 09:03:27 GMT
X-Content-Type-Options: nosniff
Etag: W/"5a-kMISldSkcyJRMHnVnhNuO8IhJPg"
X-Cache: Miss from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190759.cloudfront.net (CloudFront)
X-Amz-Cf-Id: aYc31OVS3pycEFRnoQCTwyxfgX9yiha_aqSxSo7_S4cqlCVChQ8dnw==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   90
Md5:    7b1723c4fe6198839ea6a2875fbf28f0
Sha1:   90c21295d4a47322513079d59e136e3bc22124f8
Sha256: e0892570d8b4947df0fc66ba7a428cc6876a22ea48ed0c3039a98d5e71d8e697
                                        
                                            OPTIONS /v1/open HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://medium.com
Access-Control-Request-Method: POST

                                         
                                         143.204.55.75
HTTP/1.1 204 No Content
Content-Type: text/plain charset=UTF-8
                                        
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 1728000
Date: Tue, 27 Nov 2018 09:03:27 GMT
Server: openresty/1.13.6.2
X-Content-Type-Options: nosniff
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: x8bf5yt1qy6WTmLmImsOw3dfHX6dgkyXn2ddHDtZf3MejoMYtTLu3A==


--- Additional Info ---
                                        
                                            POST /v1/open HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://medium.com/suspended
Content-Length: 224
Origin: https://medium.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 312
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Date: Tue, 27 Nov 2018 09:03:27 GMT
Server: openresty/1.13.6.2
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 6R78_QUsaj4swi22zFE2hHlRdH7Dm67IHYQSNTOytTk39jP4KAsC5Q==


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   312
Md5:    42b7f05071fb6c904a7bdab14765f1a9
Sha1:   3ebdcb4266ffa31f6865e4effde5a03058585028
Sha256: 480c3ac4ce227c777576ad88d95baa801c02559883783fa45bf475ee52d362e5
                                        
                                            OPTIONS /v1/pageview HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://medium.com
Access-Control-Request-Method: POST

                                         
                                         143.204.55.75
HTTP/1.1 204 No Content
Content-Type: text/plain charset=UTF-8
                                        
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 1728000
Date: Tue, 27 Nov 2018 09:03:27 GMT
Server: openresty/1.13.6.2
X-Content-Type-Options: nosniff
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: Rs-n1lBO3mF9FyblBMeXIIH2J0J6oTeofehl2d0TGho2gKwXTnfZKA==


--- Additional Info ---
                                        
                                            POST /v1/pageview HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://medium.com/suspended
Content-Length: 1487
Origin: https://medium.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Origin: *
Date: Tue, 27 Nov 2018 09:03:27 GMT
Etag: W/"1c-KRZWpHfIKyIHGKJ9mp9lAyX+vFY"
Server: openresty/1.13.6.2
X-Powered-By: Express
X-Cache: Miss from cloudfront
Via: 1.1 ea7d28c8429ff02fa6691837c74eae60.cloudfront.net (CloudFront)
X-Amz-Cf-Id: tAMxGn1oSIfMIqjY7bxtBvkpYXT_X22flJgZY3qy44CLPHxLJw5MLA==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    40ad459cb59514b4661cb0f8372dad3c
Sha1:   291656a477c82b220718a27d9a9f650325febc56
Sha256: a82dc28d43942326b346f92907df3bea5e38b2325ef97176f3b6234966bf19eb