Overview

URL https://medium.com/@bonioni46/123netflix-watch-the-possession-of-hannah-grace-online-english-movie-full-e490becf3ba2
IP104.16.120.127
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-12-01 15:01:32 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.16.120.127

Date UQ / IDS / BL URL IP
2018-12-03 22:59:06 +0100
0 - 0 - 0 https://medium.com/@getpagespeed/varnish-4-cl (...) 104.16.120.127
2018-11-28 13:15:51 +0100
0 - 0 - 0 https://medium.com/@searchbuzz/explore-the-be (...) 104.16.120.127
2018-11-27 10:14:16 +0100
0 - 0 - 0 https://medium.com/@eza9153/fox-putlockers-wa (...) 104.16.120.127
2018-11-27 08:51:06 +0100
0 - 0 - 0 https://medium.com/@eza9153/fox-putlockers-wa (...) 104.16.120.127
2018-11-26 10:05:42 +0100
0 - 0 - 0 https://medium.com/@jpmonfort/j-p-monfort-sta (...) 104.16.120.127
2018-11-21 08:51:52 +0100
0 - 0 - 0 https://medium.com/@eza9153/watch-the-girl-in (...) 104.16.120.127
2018-11-21 08:47:03 +0100
0 - 0 - 0 https://medium.com/@eza9153/watch-the-grinch- (...) 104.16.120.127
2018-11-21 08:41:24 +0100
0 - 0 - 0 https://medium.com/@eza9153/watch-the-nutcrac (...) 104.16.120.127
2018-11-17 19:20:59 +0100
0 - 0 - 0 https://medium.com/@alanaheileenray/movi%C3%A (...) 104.16.120.127
2018-11-17 18:52:33 +0100
0 - 0 - 0 https://medium.com/@alanaheileenray/mozipremi (...) 104.16.120.127

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-12-12 11:30:53 +0100
0 - 3 - 1 touramical.be/js/b.exe 104.27.148.119
2018-12-12 11:16:11 +0100
0 - 0 - 1 dl.onlinesubtitles.com/174376d78a662a123cb821 (...) 104.31.77.90
2018-12-12 11:12:18 +0100
0 - 1 - 0 idtalent.com/proforma-invoice-20140207.pdf.exe 104.28.16.185
2018-12-12 11:11:59 +0100
0 - 0 - 1 fastdownloads.info/ds-exe/484/1199/hotspot%20 (...) 104.24.125.44
2018-12-12 11:09:17 +0100
0 - 0 - 1 hotfire.us/clashofclanshack2014.exe 104.27.141.26
2018-12-12 10:54:23 +0100
0 - 0 - 4 nudgeoffer.racing/ 104.27.186.108
2018-12-12 10:53:36 +0100
0 - 0 - 1 cabalbg.com/LauncherEP8/updates/56.exe 104.28.26.57
2018-12-12 10:53:12 +0100
0 - 2 - 0 dl.viracuredownload.net/311002874/lpid:lp-917 (...) 104.27.189.191
2018-12-12 10:48:25 +0100
0 - 0 - 1 l1.pp3.cn/soft/UploadFile/201405/win7/2014051 (...) 162.159.211.34
2018-12-12 10:47:46 +0100
0 - 2 - 1 dl.fixit-softhost.com/371002905/vjj8mty5mjv8n (...) 104.27.148.166

Last 10 reports on domain: medium.com

Date UQ / IDS / BL URL IP
2018-12-10 22:47:06 +0100
0 - 0 - 0 https://medium.com/@8makahk/24bdd868b0d1 104.16.123.127
2018-12-10 21:17:53 +0100
0 - 0 - 0 https://medium.com/@8makahk/live-coverage-afr (...) 104.16.122.127
2018-12-08 10:05:12 +0100
0 - 0 - 0 https://medium.com/@claimcashreview/how-to-lo (...) 104.16.121.127
2018-12-08 06:55:33 +0100
0 - 0 - 0 https://medium.com/@binarycash/the-wealth-com (...) 104.16.123.127
2018-12-07 00:15:01 +0100
0 - 0 - 0 https://medium.com/@KuzineSoba/ 104.16.122.127
2018-12-06 16:35:46 +0100
0 - 0 - 0 https://medium.com/@tazulislam949/day-1-natio (...) 104.16.122.127
2018-12-04 07:37:43 +0100
0 - 0 - 0 https://medium.com/@daumstream/%EC%8A%A4%ED%8 (...) 104.16.124.127
2018-12-03 22:59:06 +0100
0 - 0 - 0 https://medium.com/@getpagespeed/varnish-4-cl (...) 104.16.120.127
2018-12-03 09:46:33 +0100
0 - 0 - 0 https://medium.com/@katejauli/codes-nba-2k19- (...) 104.16.124.127
2018-12-02 09:24:01 +0100
0 - 0 - 0 https://medium.com/p/de407c5d33c4?source=user (...) 104.16.124.127


JavaScript

Executed Scripts (14)


Executed Evals (2)

#1 JavaScript::Eval (size: 97, repeated: 1) - SHA256: b496f532e13aa121a0bafac099213467c734e363779781a255eae1b7d12cd3a5

                                        ({
    "id": "pid=98aba941b742c38e0040a78a4a06fbc5",
    "session_count": 1,
    "last_session_ts": 1543672837365
})
                                    

#2 JavaScript::Eval (size: 88, repeated: 3) - SHA256: cb88400cca33bb25b74581ca7385c2f8bdfbbdd6ddc1166797ae18c9dac2cda8

                                        ({
    "sid": 1,
    "surl": "https://medium.com/suspended",
    "sref": "",
    "sts": 1543672837365,
    "slts": 0
})
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 738, repeated: 1) - SHA256: 39e5c5410a8dccfaedf6fd4e773f9ec440dbeb686f040baa94f0439638e9a8fc

                                        < style > section.section - image--fullBleed.is - backgrounded {
    padding - top: 829 px;
}
section.section - image--fullScreen.is - backgrounded, section.section - image--coverFade.is - backgrounded {
    min - height: 754 px;
    padding - top: 377 px;
}.u - height100vh {
    height: 754 px!important;
}.u - height110vh {
    height: 829 px!important;
}.u - minHeight100vh {
    min - height: 754 px!important;
}.u - maxHeight100vh {
    max - height: 754 px!important;
}
section.section - image--coverFade {
    height: 754 px;
}.section - aspectRatioViewportPlaceholder, .section - aspectRatioViewportCropPlaceholder {
    max - height: 754 px;
}.section - aspectRatioViewportBottomSpacer, .section - aspectRatioViewportBottomPlaceholder {
    max - height: 377 px;
}.zoomable: before {
    top: -754 px;left: -1176 px;padding: 754 px 1176 px;
} < /style>
                                    


HTTP Transactions (29)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=92717
Date: Sat, 01 Dec 2018 14:00:33 GMT
Etag: "5c00c62a-1d7"
Expires: Sun, 02 Dec 2018 15:45:50 GMT
Last-Modified: Fri, 30 Nov 2018 05:10:02 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bc0ca0b131e1778d2fde59424b11f84a
Sha1:   dcda91d74a18dfc01abba4a04cbcfb72174694e0
Sha256: 4baa00634530589f795f7cba0fac947b60d5bff15aec1b3a584628dc4493b682
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=135155
Date: Sat, 01 Dec 2018 14:00:33 GMT
Etag: "5c01e1d7-1d7"
Expires: Mon, 03 Dec 2018 03:33:08 GMT
Last-Modified: Sat, 01 Dec 2018 01:20:23 GMT
Server: ECS (ska/F707)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0c7b4244bee9f3ad7fff2ca6011971c9
Sha1:   fd75db2112d5bede5e21d0e7ad232b72541a879c
Sha256: 274141537c18676616f09bfed963c0a98ede119ea51304d825aba40edf63f87f
                                        
                                            GET /@bonioni46/123netflix-watch-the-possession-of-hannah-grace-online-english-movie-full-e490becf3ba2 HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.16.123.127
HTTP/1.1 302 Found
Content-Type: application/octet-stream
                                        
Date: Sat, 01 Dec 2018 14:00:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; expires=Sun, 01-Dec-19 14:00:33 GMT; path=/; domain=.medium.com; HttpOnly uid=lo_6m8eHKR3w9Vv; Expires=Sun, 01-Dec-19 14:00:33 GMT; Domain=.medium.com; Path=/; Secure; HttpOnly sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY; path=/; expires=Sun, 01 Dec 2019 14:00:33 GMT; domain=.medium.com; secure; httponly
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543672833823:ec53bdbfb3a
X-Obvious-Info: 35933-539706e,539706e3d70
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Location: /suspended
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 482614ab0a9b42c1-OSL


--- Additional Info ---
                                        
                                            GET /suspended HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; uid=lo_6m8eHKR3w9Vv; sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY

                                         
                                         104.16.123.127
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 01 Dec 2018 14:00:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543672834060:807d6ab069fe
X-Obvious-Info: 35933-539706e,539706e3d70
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Content-Encoding: gzip
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 482614ac5bb542c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9366
Md5:    c423612cdab4a87bd33d2fe9878679a8
Sha1:   eacd7b67d0a03e26d9c18a9ebbb0e7d113803ea1
Sha256: 98e193312ad856c99dc2de66a8f7822b3606d176dc2118641bfc911ca6e3ca9a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=168204
Date: Sat, 01 Dec 2018 14:00:34 GMT
Etag: "5c01b7a1-1d7"
Expires: Mon, 03 Dec 2018 12:43:58 GMT
Last-Modified: Fri, 30 Nov 2018 22:20:17 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    743b0d3d66c9da4a9ef0b6e5709f74de
Sha1:   66819a5f7773e1047d99d4ee3bc45f8a943a3afb
Sha256: ac0cb80503b6f61d810f618da3b4e4906a0d66973e4dcbc63bf288c6cebea6f1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=158270
Date: Sat, 01 Dec 2018 14:00:34 GMT
Etag: "5c0248eb-1d7"
Expires: Mon, 03 Dec 2018 09:58:24 GMT
Last-Modified: Sat, 01 Dec 2018 08:40:11 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    7fdad6d85252e7889edb9e70f4600da9
Sha1:   2462593337f20b0e8d74d7b1a8da26fddf35154e
Sha256: 0867ee7793a1a790a2ef9ddc0755c5152277604995114aac5d306c7f01768582
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:00:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    ac44226d0c22e53c8c5f424facdae949
Sha1:   8aa67704a694af1eb145ddc415ade2fb7147b424
Sha256: 39c12549379ddcf57b693fb5c7129df177e89954f679b12732b1f82975b2b1ad
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 01 Dec 2018 14:00:34 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /_/fp/css/main-branding-base.mgmk3IAP7RjRVL2_wGR9ig.css HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; uid=lo_6m8eHKR3w9Vv; sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Sat, 01 Dec 2018 14:00:35 GMT
Content-Length: 65244
Connection: keep-alive
x-amz-id-2: mx6MAUoRlJRCgOc+s2xzm9LnMOizXdyPUfnp/G8ZPShXFCei5qdsLcn7SQv21uJxRiSs84jtV5o=
x-amz-request-id: 718F124289088685
Last-Modified: Fri, 30 Nov 2018 15:39:32 GMT
Etag: "9428b93339ee7b5a340b499eb366f894"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Sun, 01 Dec 2019 14:00:35 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 482614b2590642c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   65244
Md5:    9428b93339ee7b5a340b499eb366f894
Sha1:   dbad78794d12bb660ca977e565e98f6ada91d277
Sha256: b199f0af0c8ce86b41a7c60040cb86e8ac43ac3d2c077121a7a177d5a81b93e6
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Sat, 01 Dec 2018 12:50:48 GMT
Expires: Sat, 01 Dec 2018 14:50:48 GMT
Last-Modified: Mon, 05 Nov 2018 21:10:09 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17404
Cache-Control: public, max-age=7200
Age: 4187
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17404
Md5:    33586531225d561faadda61de818c510
Sha1:   9a3b5ffbdc4071557def3d9609eee6ad3c52d1e1
Sha256: 521d2fb506ca60463e914fd138e092f935579d31436dcff3cc6a1d216d06ef82
                                        
                                            GET /_/fp/icons/favicon-rebrand-medium.3Y6xpZ-0FSdWDnPM3hSBIA.ico HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; uid=lo_6m8eHKR3w9Vv; sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Sat, 01 Dec 2018 14:00:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: UMif/Mf2eidebYT9ZrIun6p9jt2GJhxCBDxdGMfz6heF/CuVjMDdPo7YZk+1+T89lXhXuAe0W+A=
x-amz-request-id: D50AB4BA8395B54E
Last-Modified: Sat, 19 Aug 2017 00:25:31 GMT
Etag: W/"dd8eb1a59fb41527560e73ccde148120"
Cache-Control: public, max-age=31536000
CF-Cache-Status: HIT
Expires: Sun, 01 Dec 2019 14:00:36 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 482614b90a824291-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   788
Md5:    50594f97a83cc68aa5b1b64f4b2b1c50
Sha1:   dce5ec6cdfe8fd06704d83059156f15a9ff24cf9
Sha256: 00380dedc868a00178f805005e401a9c288c811940ca11815c1ee480a94f52c4
                                        
                                            GET /_/stat?event=pixel.load&origin=undefined HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; uid=lo_6m8eHKR3w9Vv; sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY

                                         
                                         104.16.123.127
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Sat, 01 Dec 2018 14:00:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com wss://*.native.ai https://*.native.ai 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1543672835219:76ed3f84368e
X-Obvious-Info: 35933-539706e,539706e3d70
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 482614b3aa7942c1-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=166521
Date: Sat, 01 Dec 2018 14:00:36 GMT
Etag: "5c0256f7-1d7"
Expires: Mon, 03 Dec 2018 12:15:57 GMT
Last-Modified: Sat, 01 Dec 2018 09:40:07 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    066d81a495186099ad3e6e4921b00459
Sha1:   f4f40a0f187e05cc908280628a26a5930270bb7a
Sha256: cfe8cbf584786440d99c964d5175b6c0f8e1379025b293e5ad5851f455c65ecd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=132784
Date: Sat, 01 Dec 2018 14:00:36 GMT
Etag: "5c01e423-1d7"
Expires: Mon, 03 Dec 2018 02:53:40 GMT
Last-Modified: Sat, 01 Dec 2018 01:30:11 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    03be5fd7512470528bf6d98948dff29a
Sha1:   05b890930a4cd422fad88f8ae29d6fd28343d001
Sha256: 2565db86ada595ad2a000aa5574bd872b5da8fa0bafc7f73b3b415360215a2c2
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=410528, public, no-transform, must-revalidate
Last-Modified: Thu, 29 Nov 2018 07:58:58 GMT
Expires: Thu, 6 Dec 2018 07:58:58 GMT
Date: Sat, 01 Dec 2018 14:00:36 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    7fb936d29e33789425f21fe7215a7139
Sha1:   0c682837f5c2fade58311ae14df6c1bbd2115f28
Sha256: 438b0ad43fc2c8404af20293c10af2d770fa30d013ff371329040186650b9b22
                                        
                                            GET /_/fp/gen-js/main-base.bundle.gwfrYt8KmzP4rT8rTje9zQ.js HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended
Cookie: __cfduid=db339dfe8da5c4a1d49b4d7e42b3d9d751543672833; uid=lo_6m8eHKR3w9Vv; sid=1:wGLPCHGtFJyNsvT6DTLxITwINqFbrcnO8kkCv1zZV9VatulX5l70jHEAeJ4lPzHY

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Sat, 01 Dec 2018 14:00:35 GMT
Content-Length: 337668
Connection: keep-alive
x-amz-id-2: bAqgKFsXAzRshhprRSVemY509Cp1DzvS4XT7fO99alQLGTXMnwTTWKjxkbHfzH56p42UD4Vs6j8=
x-amz-request-id: 2942A2BDF3814BCA
Last-Modified: Fri, 30 Nov 2018 19:39:05 GMT
Etag: "897b3fd024d421443850774608104bbf"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Sun, 01 Dec 2019 14:00:35 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 482614b3aa7842c1-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   337668
Md5:    897b3fd024d421443850774608104bbf
Sha1:   e0e148de023febd558c46ecb4129af32340839e0
Sha256: f9dcde5aff7627705183a4d71a3bc6d8aec5355eb358f25096787aa8d28dc959
                                        
                                            GET /r/collect?v=1&_v=j72&a=2147161213&t=pageview&_s=1&dl=https%3A%2F%2Fmedium.com%2Fsuspended&ul=en-us&de=UTF-8&dt=Suspended%20%E2%80%93%20Medium&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=2661013&gjid=690716914&cid=575913040.1543672836&tid=UA-24232453-2&_gid=1045202070.1543672836&_r=1&z=1312556499 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Sat, 01 Dec 2018 14:00:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /keys/medium.com/p.js HTTP/1.1 
Host: d1z2jf7jlzjs58.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.51.119
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Tue, 07 Aug 2018 00:43:09 GMT
Last-Modified: Tue, 07 Aug 2018 00:27:38 GMT
Etag: W/"5b68e77a-9c11"
Content-Encoding: gzip
Age: 47736
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Id: O7uFE-vHNWtVQRtKf1DiwxRE6cVEl8UXc-zyBZewa6zaxSHknBhwbg==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15262
Md5:    73cf72f043a322cf60426749b0819c51
Sha1:   05970b66fb6b712129abb0901e268bca757863a0
Sha256: ff998d914cb73671c692860d98059a7c9f6c03d7b37fe634706e8c3b34eee34a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.176
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159170
Date: Sat, 01 Dec 2018 14:00:37 GMT
Etag: "5c025255-1d7"
Expires: Mon, 03 Dec 2018 10:13:27 GMT
Last-Modified: Sat, 01 Dec 2018 09:20:21 GMT
Server: ECS (lga/1384)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990971.cloudfront.net (CloudFront)
X-Amz-Cf-Id: RXArbObIde-ZV242UMQ_41gFT2te9Ed6fKj3npfq0YxB8r0FagMDsA==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bac7c292378dbdbcf11f92ae3a9b78cb
Sha1:   b292fca212f462c52b17704a3b1e850cbd06cfa2
Sha256: 75f284d6ea57f0e1898115bfc6d13bf4de857fbe877e811fcfe124f721dec99a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.72
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Sat, 01 Dec 2018 14:00:38 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 50584ad285d5f627ddebae74efdd0771.cloudfront.net (CloudFront)
X-Amz-Cf-Id: eyVODaHgA8RiNJ2AHpiw6ro3j_7-xA_MfT40iiwaape3QfrCbsszKg==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    c80b115a699d8b7565c0b540767b3ab7
Sha1:   3ffae152125916bddc227e6df1b2a6bb47a0e02a
Sha256: b77363ea545a19da90ea317e83f47112268fc33d368c3a50614934af63192fd3
                                        
                                            GET /start/?rand=1543672837369&plid=20679145&idsite=medium.com&url=https%3A%2F%2Fmedium.com%2Fsuspended&urlref=&screen=1176x885%7C1176x855%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fmedium.com%2Fsuspended&sref=&sts=1543672837365&slts=0&title=Suspended+%E2%80%93+Medium&date=Sat+Dec+01+2018+15%3A00%3A37+GMT%2B0100&action=pageview&callback=parselyStartCallback HTTP/1.1 
Host: srv-2018-12-01-14.pixel.parsely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         52.5.159.70
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Sat, 01 Dec 2018 14:00:38 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Server: nginx
Set-Cookie: pid=98aba941b742c38e0040a78a4a06fbc5; expires=Sun, 01-Dec-19 14:00:38 GMT; domain=pixel.parsely.com; path=/
Content-Length: 77
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    8f87f2e0d56a7bac90633df1e47b8bbc
Sha1:   0081afa40e16451606ca064f7cba618e45d3360a
Sha256: a473cfe60fa0c19fb2d54d25f3693f0e67f1c7b8df7e3adaf3d246857d03d677
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=154052
Date: Sat, 01 Dec 2018 14:00:38 GMT
Etag: "5c020e50-1d7"
Expires: Mon, 03 Dec 2018 08:48:10 GMT
Last-Modified: Sat, 01 Dec 2018 04:30:08 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b15be946ba9441732d9e9159d45389a5
Sha1:   8ebe399b4fa2014f200f2d004ee2a867f45fe2c3
Sha256: aabfe705301de62f5572fa67366ab3c2236872e480d399a26d4118366367faea
                                        
                                            GET /branch-latest.min.js HTTP/1.1 
Host: cdn.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.47.103
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Content-Length: 21234
Connection: keep-alive
Date: Mon, 26 Nov 2018 17:18:01 GMT
Cache-Control: max-age=300
Content-Encoding: gzip
Last-Modified: Tue, 18 Sep 2018 21:07:20 GMT
x-amz-version-id: mNTfVhEnx32undHGMDgVWco4_EqaZ.NM
Etag: "8342e31a6e2df3a9ad677e9770a07451"
Server: AmazonS3
Age: 156
X-Cache: Hit from cloudfront
Via: 1.1 bb684631d3410428ce0102bc44ea709f.cloudfront.net (CloudFront)
X-Amz-Cf-Id: eSJxRx99fDSJoi7LfKvxDlPVabPDTgrhNpcZUdUAfgabkTlcb3U5jQ==


--- Additional Info ---
Magic:  gzip compressed data, was "build.min.js", from Unix, last modified: Tue Sep 18 23:06:56 2018
Size:   21234
Md5:    8342e31a6e2df3a9ad677e9770a07451
Sha1:   35fab1aaa3a7b08b248b3a989f060eeec7ef1866
Sha256: a829ac244ae1e403ce1511b2e3efddfdb874bcdceb28c4f6da142ad4a0316423
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.176
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=107850
Date: Sat, 01 Dec 2018 14:00:38 GMT
Etag: "5c017cfb-1d7"
Expires: Sun, 02 Dec 2018 19:58:08 GMT
Last-Modified: Fri, 30 Nov 2018 18:10:03 GMT
Server: ECS (lga/13AD)
X-Cache: Miss from cloudfront
Via: 1.1 a034aae43a19aef875fa395182990971.cloudfront.net (CloudFront)
X-Amz-Cf-Id: bDfZbvwDT3xfHpTqqa9ADx9bceBV_L5C6WOV75YUE9AypG1VqP85_w==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    336ee8eb88e45e5a67ba5ec0fe1d2de3
Sha1:   0985255ac2197941ccae9648f3d0084ad5e8014f
Sha256: 0587f786f790f18772ca05b527e7e27d3e634e8924dcfce9a5629d218d724036
                                        
                                            GET /_r?sdk=web2.46.0&branch_key=key_live_ofxXr2qTrrU9NqURK8ZwEhknBxiI6KBm&callback=branch_callback__0 HTTP/1.1 
Host: app.link
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://medium.com/suspended

                                         
                                         143.204.47.96
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=utf-8
                                        
Content-Length: 90
Connection: keep-alive
Server: openresty/1.13.6.2
Date: Sat, 01 Dec 2018 14:00:38 GMT
X-Powered-By: Express
Set-Cookie: _s=UW8sH9oahpe4K0zciqF7I9RRDvi6qb5f4H8vYihmnKuq8ijIViPzYnFMVghaOuPT; Max-Age=31536000; Domain=.app.link; Path=/; Expires=Sun, 01 Dec 2019 14:00:38 GMT
X-Content-Type-Options: nosniff
Etag: W/"5a-4trYTwWUp8wZ1cMblF0JEKiNJLU"
X-Cache: Miss from cloudfront
Via: 1.1 a850dff1d0f5a90907784efc0c02a4fc.cloudfront.net (CloudFront)
X-Amz-Cf-Id: iMp9qfc88MjYBLrMDU-M9WFwqY8f9zL7vgSJy0z2p6oXPIddPfqRpA==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   90
Md5:    9c59458db47d16a7828396bcf613bfd8
Sha1:   e2dad84f0594a7cc19d5c31b945d0910a88d24b5
Sha256: 76b368cc8aad479b94b72ac83b01c2dcd1892f12553e9d977ddd79e231817e21
                                        
                                            OPTIONS /v1/open HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://medium.com
Access-Control-Request-Method: POST

                                         
                                         143.204.55.75
HTTP/1.1 204 No Content
Content-Type: text/plain charset=UTF-8
                                        
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 1728000
Date: Sat, 01 Dec 2018 14:00:38 GMT
Server: openresty/1.13.6.2
X-Content-Type-Options: nosniff
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: nPdZDAFQpEjJSD_Gz8-C5Jc230V3eyodSrcgu_gxJQ0XFLkVX-iyTQ==


--- Additional Info ---
                                        
                                            POST /v1/open HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://medium.com/suspended
Content-Length: 224
Origin: https://medium.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 312
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: no-cache
Date: Sat, 01 Dec 2018 14:00:39 GMT
Server: openresty/1.13.6.2
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: HulZJhBzExPlorYt8OkUne-7FQThUVQ3SiftPRM-raNJDvQJ6yb05g==


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   312
Md5:    190313d2b28e5bf4a226f58d15303f94
Sha1:   16025f2833e7fb6250a9b33edef476d5af8cc08b
Sha256: 8218643cb161253b8da58157d3cef16e1015b3ef3ab2c1df779a9e5c9b2e09cc
                                        
                                            OPTIONS /v1/pageview HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Origin: https://medium.com
Access-Control-Request-Method: POST

                                         
                                         143.204.55.75
HTTP/1.1 204 No Content
Content-Type: text/plain charset=UTF-8
                                        
Content-Length: 0
Connection: keep-alive
Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
Access-Control-Allow-Methods: GET, POST, PUT, OPTIONS
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 1728000
Date: Sat, 01 Dec 2018 14:00:39 GMT
Server: openresty/1.13.6.2
X-Content-Type-Options: nosniff
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: UhOwTF0icPG3xNcgTcnb8PNdxPbeT_umXHd8Jo1_Ze2a1GadJoL8qA==


--- Additional Info ---
                                        
                                            POST /v1/pageview HTTP/1.1 
Host: api.branch.io
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://medium.com/suspended
Content-Length: 1487
Origin: https://medium.com
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         143.204.55.75
HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
                                        
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Origin: *
Date: Sat, 01 Dec 2018 14:00:39 GMT
Etag: W/"1c-KRZWpHfIKyIHGKJ9mp9lAyX+vFY"
Server: openresty/1.13.6.2
X-Powered-By: Express
X-Cache: Miss from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040147.cloudfront.net (CloudFront)
X-Amz-Cf-Id: wD_Cskuv2IABbYX23_Npxk87fggnk30eQbgH8W26it5v6gjkBXw32g==


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   28
Md5:    40ad459cb59514b4661cb0f8372dad3c
Sha1:   291656a477c82b220718a27d9a9f650325febc56
Sha256: a82dc28d43942326b346f92907df3bea5e38b2325ef97176f3b6234966bf19eb