Overview

URL mrooding.me
IP52.4.145.119
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-08-10 15:57:33 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 52.4.145.119

Date UQ / IDS / BL URL IP
2018-05-25 05:33:22 +0200
0 - 0 - 0 hackernoon.com 52.4.145.119
2018-03-22 10:59:45 +0100
0 - 0 - 0 https://engineering.instagram.com/ 52.4.145.119
2018-02-28 06:57:11 +0100
0 - 0 - 0 https://hackernoon.com/brain-chain-interface- (...) 52.4.145.119
2018-02-26 18:30:34 +0100
0 - 0 - 0 https://intrinsicpoint.com/mastering-product- (...) 52.4.145.119
2018-02-23 21:21:18 +0100
0 - 0 - 0 https://medium.freecodecamp.org/whats-the-dif (...) 52.4.145.119
2017-11-30 18:45:37 +0100
0 - 0 - 0 psiloveyou.xyz 52.4.145.119
2017-10-27 22:12:40 +0200
0 - 0 - 0 blog.restsecured.xyz 52.4.145.119
2017-09-13 16:08:19 +0200
0 - 0 - 0 https://blog.newtonhq.com/newton-for-windows- (...) 52.4.145.119
2017-09-07 15:31:47 +0200
0 - 0 - 0 cherryhillsun.com/about 52.4.145.119
2017-09-01 21:05:57 +0200
0 - 0 - 0 https://codeburst.io/how-to-test-javascript-w (...) 52.4.145.119

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2018-11-21 03:24:33 +0100
0 - 0 - 0 52.21.77.134 52.21.77.134
2018-11-21 03:20:16 +0100
0 - 0 - 0 52.6.201.252 52.6.201.252
2018-11-21 03:16:17 +0100
0 - 0 - 0 52.22.195.105 52.22.195.105
2018-11-21 02:21:35 +0100
0 - 0 - 0 security.defendid.us/refid=pHkxyzOwSyp/4cf708/ 54.83.101.48
2018-11-21 02:02:30 +0100
2 - 0 - 0 hyperurl.co/rr227u 52.5.231.4
2018-11-21 01:58:28 +0100
0 - 0 - 0 https://gostryder.sharefile.com/d-s08c296e9a8 (...) 52.3.211.188
2018-11-21 01:56:36 +0100
0 - 0 - 0 idoctorapp.com 52.0.200.85
2018-11-21 00:52:16 +0100
0 - 0 - 0 23.23.90.201 23.23.90.201
2018-11-21 00:48:41 +0100
0 - 0 - 1 a3yojonhyrfvjs.xyz/c1 52.71.119.60
2018-11-21 00:48:33 +0100
0 - 0 - 2 https://www.spoiledphotos.com/posts/popular/45 52.1.65.199

No other reports on domain: mrooding.me



JavaScript

Executed Scripts (11)


Executed Evals (2)

#1 JavaScript::Eval (size: 97, repeated: 1) - SHA256: 3abaa72eb13860a3ad20cf2fa9adaf45343b4095731e32fde9a3b4b61db69620

                                        ({
    "id": "pid=e7d0cf051d4e8689c68ed7ba7aef99c0",
    "session_count": 1,
    "last_session_ts": 1533909423618
})
                                    

#2 JavaScript::Eval (size: 96, repeated: 3) - SHA256: b2e5d11e08f672d2d76005f7dd0fa220b3c393cb40ab0f81e5073d5398dae088

                                        ({
    "sid": 1,
    "surl": "https://mrooding.me/?gi=416c0cfee213",
    "sref": "",
    "sts": 1533909423618,
    "slts": 0
})
                                    

Executed Writes (1)

#1 JavaScript::Write (size: 762, repeated: 1) - SHA256: 8342def22ea3314572cb9c43ffffac088c97850262d95072dcf1f80c3a2e1020

                                        < style > section.section - image--fullBleed.is - backgrounded {
    padding - top: 829 px;
}
section.section - image--fullScreen.is - backgrounded, section.section - image--coverFade.is - backgrounded {
    min - height: 754 px;
    padding - top: 377 px;
}.u - sizeViewHeight100 {
    height: 754 px!important;
}.u - sizeViewHeight110 {
    height: 829 px!important;
}.u - sizeViewHeightMin100 {
    min - height: 754 px!important;
}.u - sizeViewHeightMax100 {
    max - height: 754 px!important;
}
section.section - image--coverFade {
    height: 754 px;
}.section - aspectRatioViewportPlaceholder, .section - aspectRatioViewportCropPlaceholder {
    max - height: 754 px;
}.section - aspectRatioViewportBottomSpacer, .section - aspectRatioViewportBottomPlaceholder {
    max - height: 377 px;
}.zoomable: before {
    top: -754 px;left: -1176 px;padding: 754 px 1176 px;
} < /style>
                                    


HTTP Transactions (31)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: mrooding.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.1.119.170
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: openresty
Date: Fri, 10 Aug 2018 13:56:59 GMT
Content-Length: 178
Connection: keep-alive
Location: https://mrooding.me/


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Tue, 07 Aug 2018 07:34:49 GMT
Etag: 6D98A575EDE6C8A6E6624E8BD6E1665BB720B161
X-OCSP-Responder-ID: rmdccaocsp20
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=322036
Expires: Tue, 14 Aug 2018 07:24:15 GMT
Date: Fri, 10 Aug 2018 13:56:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    eb4904a522d3ac12e70f25ff995fd300
Sha1:   6d98a575ede6c8a6e6624e8bd6e1665bb720b161
Sha256: f237b6645a56a4740cb2b7ff9af5e0fb3b5f05504e9d51f60c2c84a0c053f710
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 05 Aug 2018 22:51:21 GMT
Etag: AA574501BAA9BFAB21483877902FE641A7F51A96
X-OCSP-Responder-ID: rmdccaocsp19
Content-Length: 727
Cache-Control: public, no-transform, must-revalidate, max-age=204292
Expires: Sun, 12 Aug 2018 22:41:51 GMT
Date: Fri, 10 Aug 2018 13:56:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   727
Md5:    562535190d65f7e9793cb5de79d8f3c0
Sha1:   aa574501baa9bfab21483877902fe641a7f51a96
Sha256: 0035bf70c33311f9d506bbce5e28698c2dedcabc2daaa783e8a5d7605fb629d9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.17
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Sun, 05 Aug 2018 22:51:21 GMT
Etag: BEF0EDBC8F5E5C0A27EBB66D16D938E09C93E159
X-OCSP-Responder-ID: rmdccaocsp35
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=204301
Expires: Sun, 12 Aug 2018 22:42:00 GMT
Date: Fri, 10 Aug 2018 13:56:59 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f0463edd32c6f9408be2550457b48f54
Sha1:   bef0edbc8f5e5c0a27ebb66d16d938e09c93e159
Sha256: d4f48bb10368e80407c0f07d02221c7b4a002ebae7b80ada3c80dc452c8583a9
                                        
                                            GET / HTTP/1.1 
Host: mrooding.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.1.119.170
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: openresty
Date: Fri, 10 Aug 2018 13:57:00 GMT
Content-Length: 154
Connection: keep-alive
Location: https://medium.com/m/global-identity?redirectUrl=https%3A%2F%2Fmrooding.me%2F


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=152384
Date: Fri, 10 Aug 2018 13:57:00 GMT
Etag: "5b6d101c-1d7"
Expires: Sun, 12 Aug 2018 08:07:16 GMT
Last-Modified: Fri, 10 Aug 2018 04:10:04 GMT
Server: ECS (arn/46BA)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    4be5d30184259a9ee1cc5d528eaf2c4a
Sha1:   3d6fef0d1253f78f9d3c7b027336e49491209ec8
Sha256: 60350329df636850d0be69f3a7b28fa00a00d3d532022372b8861fc4296f2634
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=155494
Date: Fri, 10 Aug 2018 13:57:00 GMT
Etag: "5b6d2ca0-1d7"
Expires: Sun, 12 Aug 2018 08:41:06 GMT
Last-Modified: Fri, 10 Aug 2018 06:11:44 GMT
Server: ECS (arn/46A2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    67018df6e7b37502c94fb10a32f4bb71
Sha1:   f4b5fbc5963300995448e4e7c6aed103cfda2bc6
Sha256: ca750756162061f7c02a5cb87ac4c7a74fa9231d2eca85c142f89202a59c80fc
                                        
                                            GET /m/global-identity?redirectUrl=https%3A%2F%2Fmrooding.me%2F HTTP/1.1 
Host: medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.16.120.127
HTTP/1.1 302 Found
Content-Type: application/octet-stream
                                        
Date: Fri, 10 Aug 2018 13:57:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; expires=Sat, 10-Aug-19 13:57:00 GMT; path=/; domain=.medium.com; HttpOnly uid=lo_9H7hKocLcaLL; Expires=Sat, 10-Aug-19 13:57:00 GMT; Domain=.medium.com; Path=/; Secure; HttpOnly sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP; path=/; expires=Sat, 10 Aug 2019 13:57:00 GMT; domain=.medium.com; secure; httponly
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://medium.com:443 https://*.medium.com:443 https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1533909420248:d37a04b6905c
X-Obvious-Info: 34569-f97b249,f97b2491188
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T
Location: https://mrooding.me/?gi=416c0cfee213
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f8142b584261-OSL


--- Additional Info ---
                                        
                                            GET /?gi=416c0cfee213 HTTP/1.1 
Host: mrooding.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         52.1.119.170
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: openresty
Date: Fri, 10 Aug 2018 13:57:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://mrooding.me https://*.mrooding.me https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1533909420438:f5707efdcc15
X-Obvious-Info: 34569-f97b249,f97b2491188
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Set-Cookie: uid=lo_9H7hKocLcaLL; path=/; expires=Sat, 10 Aug 2019 13:57:00 GMT; secure; httponly sid=1:Q5yZ369FwlWqswmVtMA50N3eVSTf/wwJZnOlW6RC7yvOHHOQRjT57jmuASBiJK73; path=/; expires=Sat, 10 Aug 2019 13:57:00 GMT; secure; httponly
Tk: T
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17370
Md5:    3b4551c71efb84c2f3ba9dc4cda53650
Sha1:   94bfd2823c542b36317c6074d7153597a137925f
Sha256: 409a672c39df06ac172b24dfcaf89d295403e49e169f0a937dd1e5e57f5be55d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=171119
Date: Fri, 10 Aug 2018 13:57:01 GMT
Etag: "5b6d7062-1d7"
Expires: Sun, 12 Aug 2018 13:04:30 GMT
Last-Modified: Fri, 10 Aug 2018 11:00:50 GMT
Server: ECS (arn/4692)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d9d8981f1576ee698fe0846b1be2c394
Sha1:   499b8bdf5fcc13a5b6a6af17159676dfa8fec8eb
Sha256: bc76096357e005995fafd49f67787938274de40efa4f5f4dbed5ceb1b8b62939
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=170076
Date: Fri, 10 Aug 2018 13:57:01 GMT
Etag: "5b6d85ad-1d7"
Expires: Sun, 12 Aug 2018 12:56:27 GMT
Last-Modified: Fri, 10 Aug 2018 12:31:41 GMT
Server: ECS (arn/469D)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    52bae982524da3826af12a01eb6d7b1a
Sha1:   83f4a670d955d162a66c46a005c4084225a64055
Sha256: d7b4d8c584b96223769c4526d2d1638c67f90969134601e98603bead86c6991d
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 Aug 2018 13:57:01 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d93bc95c22bc0c2b08304f786277cb73
Sha1:   7af1ed62e222e6b2d9ec67a4f54f5429aa763eeb
Sha256: 623f5367c93fb047134a103bbd4393f94a4584ab7310e4fcc91e2ea157eea1ae
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 10 Aug 2018 13:57:01 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            GET /_/fp/css/main-branding-base.Fc55unvcP5htkyH_Q-aGIA.css HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 10 Aug 2018 13:57:01 GMT
Content-Length: 63433
Connection: keep-alive
x-amz-id-2: dDHunmQNCKLEsytwy2zxA+HfKG3FRtgMYXM46OysKxbSINh9uuDJQKBbCeEcAu2w2KLKQM6L3vE=
x-amz-request-id: 5C099BC711B45D30
Last-Modified: Sat, 04 Aug 2018 00:38:47 GMT
Etag: "e150f56a1ba917d89d0e41e0a36f7686"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Sat, 10 Aug 2019 13:57:01 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f81a28c8429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   63433
Md5:    e150f56a1ba917d89d0e41e0a36f7686
Sha1:   094e9ceb2f092aaa3e91c535c7b414ed952a4174
Sha256: ccdd09cecca23b85ddc3f124a6371761aad04244c4adcac13cd55b52525f3358
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 10 Aug 2018 13:22:10 GMT
Expires: Fri, 10 Aug 2018 15:22:10 GMT
Last-Modified: Fri, 18 May 2018 01:10:24 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14386
Cache-Control: public, max-age=7200
Age: 2091
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14386
Md5:    b3de885583a477d4e31568948d6bebd7
Sha1:   2ce8d853244dde551c41d5207d6f71c567bde8c6
Sha256: e1bb5aa555a0d875e2a67884ceaa0629e08994a8aabadc2fac5b6915793dbf75
                                        
                                            GET /fit/c/72/72/1*zVlP8CJMlBOnYW-h5DYs5w.png HTTP/1.1 
Host: cdn-images-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.120.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 10 Aug 2018 13:57:01 GMT
Content-Length: 3449
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=2592000
Etag: "16.3"
Expires: Sun, 09 Sep 2018 13:57:01 GMT
Pragma: public
X-Obvious-Info: 16.3, 3173-05fbec3
X-Powered-By: Geomyidae artificij
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f81f2dd9426d-OSL


--- Additional Info ---
Magic:  PNG image, 72 x 72, 8-bit/color RGB, non-interlaced
Size:   3449
Md5:    d8204b0fd038c53d1355aeff869cfb4e
Sha1:   f8f2e0d6aecfc15d0544a9da61e9e6d7357ccfe3
Sha256: 0078ae838c7b8881bc590c0814b1c36a5b8a87cf34727d506f4fc0ee96b1f5c4
                                        
                                            GET /r/collect?v=1&_v=j68&a=1786802237&t=pageview&_s=1&dl=https%3A%2F%2Fmrooding.me%2F%3Fgi%3D416c0cfee213&ul=en-us&de=UTF-8&dt=Ramblings%20of%20a%20Dutch%20dev&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQ~&jid=504708813&gjid=1506800388&cid=1460647510.1533909422&tid=UA-24232453-2&_gid=404694349.1533909422&_r=1&z=1998727839 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 10 Aug 2018 13:57:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /max/800/1*d6JJW9SdeVs3GP6zcdTgnw.png HTTP/1.1 
Host: cdn-images-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.120.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 10 Aug 2018 13:57:02 GMT
Content-Length: 85661
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=2592000
Etag: "16.3"
Expires: Sun, 09 Sep 2018 13:57:02 GMT
Pragma: public
X-Obvious-Info: 16.3, 3173-05fbec3
X-Powered-By: Geomyidae artificij
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f82049bc428b-OSL


--- Additional Info ---
Magic:  PNG image, 800 x 800, 8-bit/color RGB, non-interlaced
Size:   85661
Md5:    14ccc8e14d6ed9faefd7d7a8456fa0b6
Sha1:   686afff3984cc1e9298fccb045e8f1ee21cb8de2
Sha256: 07d1441569024abea42123a0751875fe6647a73c87fa4dcd0fb423fd1b534fbb
                                        
                                            GET /_/stat?event=pixel.load&origin=undefined HTTP/1.1 
Host: mrooding.me
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: uid=lo_9H7hKocLcaLL; sid=1:Q5yZ369FwlWqswmVtMA50N3eVSTf/wwJZnOlW6RC7yvOHHOQRjT57jmuASBiJK73

                                         
                                         52.1.119.170
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Fri, 10 Aug 2018 13:57:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Security-Policy: default-src 'self'; connect-src https://localhost https://*.instapaper.com https://*.stripe.com https://*.paypal.com https://getpocket.com https://mrooding.me https://*.mrooding.me https://*.medium.com https://medium.com https://*.medium.com https://*.algolia.net https://cdn-static-1.medium.com https://dnqgz544uhbo8.cloudfront.net https://cdn-videos-1.medium.com https://cdn-audio-1.medium.com https://*.lightstep.com https://*.branch.io https://app.zencoder.com 'self'; font-src data: https://*.amazonaws.com https://*.medium.com https://glyph.medium.com https://medium.com https://*.gstatic.com https://dnqgz544uhbo8.cloudfront.net https://use.typekit.net https://cdn-static-1.medium.com 'self'; frame-src chromenull: https: webviewprogressproxy: medium: 'self'; img-src blob: data: https: 'self'; media-src https://*.cdn.vine.co https://d1fcbxp97j4nb2.cloudfront.net https://d262ilb51hltx0.cloudfront.net https://*.medium.com https://gomiro.medium.com https://miro.medium.com https://pbs.twimg.com 'self' blob:; object-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' about: https: 'self'; style-src 'unsafe-inline' data: https: 'self'; report-uri https://csp.medium.com
X-Frame-Options: sameorigin
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-UA-Compatible: IE=edge, Chrome=1
X-Powered-By: Medium
X-Obvious-Tid: 1533909422008:9f6d196276d5
X-Obvious-Info: 34569-f97b249,f97b2491188
Link: <https://medium.com/humans.txt>; rel="humans"
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Expires: Thu, 09 Sep 1999 09:09:09 GMT
Pragma: no-cache
Tk: T


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /max/800/1*n8rGL3FQMnVcUXHsAl_QJg.png HTTP/1.1 
Host: cdn-images-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.120.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 10 Aug 2018 13:57:02 GMT
Content-Length: 119014
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=2592000
Etag: "16.3"
Expires: Sun, 09 Sep 2018 13:57:02 GMT
Pragma: public
X-Obvious-Info: 16.3, 3173-05fbec3
X-Powered-By: Geomyidae artificij
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f8204ffe42b5-OSL


--- Additional Info ---
Magic:  PNG image, 800 x 800, 8-bit/color RGB, non-interlaced
Size:   119014
Md5:    73330ed675ce54da409e8eaae422531c
Sha1:   cda08d0d56417cc3be313149106f887718d6d5bf
Sha256: 014a9992f02a910182a3c061b2bdde11505300182db7c5e88b98e46f2478faaf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=162419
Date: Fri, 10 Aug 2018 13:57:02 GMT
Etag: "5b6d58ee-1d7"
Expires: Sun, 12 Aug 2018 10:55:43 GMT
Last-Modified: Fri, 10 Aug 2018 09:20:46 GMT
Server: ECS (arn/459B)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e9aaf4ffad952cc8d90b987a48f9e84d
Sha1:   7181b2c1610922ef90b13393bb526308ba3c8910
Sha256: df1d336225791b5203b40bed6d7a6eaa3f7d1ee659bc3ddd2ef3a84edb15e12d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=152163
Date: Fri, 10 Aug 2018 13:57:02 GMT
Etag: "5b6d2c6b-1d7"
Expires: Sun, 12 Aug 2018 07:52:38 GMT
Last-Modified: Fri, 10 Aug 2018 06:10:51 GMT
Server: ECS (arn/45E2)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    feb0f87ee1da652d7cba817c4bbf49aa
Sha1:   32d40ec89d368a4ae9ad16f2e6a2afc5d76c2ea6
Sha256: c7fe48f5082d9715b632129e50c57efe2567dfb29c5fdee541cf91bbbb64939e
                                        
                                            POST / HTTP/1.1 
Host: s.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.12.2
Content-Length: 1754
Content-Transfer-Encoding: binary
Cache-Control: max-age=472903, public, no-transform, must-revalidate
Last-Modified: Thu, 9 Aug 2018 01:17:31 GMT
Expires: Thu, 16 Aug 2018 01:17:31 GMT
Date: Fri, 10 Aug 2018 13:57:02 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1754
Md5:    bba2755a99ed547f888ab0d131453bf8
Sha1:   dc27d08460a9b0f6055e6fea05511ab011bb0c4d
Sha256: 8a74e44b29548d5e85da1260785f3457725de51f60b794d7c1f84c80fa7956ef
                                        
                                            GET /_/fp/gen-js/main-base.bundle.QpKysc6LAYUJotWFnHxHzQ.js HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 10 Aug 2018 13:57:01 GMT
Content-Length: 335076
Connection: keep-alive
x-amz-id-2: 7XS8wZfkYWWGSw9D6OvfMD3fy0Dz+/C4mkfRuh54aTHTyXaHO8imk/G4um7pDVnbUJuKN/d/nm4=
x-amz-request-id: 37544ED2AAE8006E
Last-Modified: Thu, 09 Aug 2018 21:53:41 GMT
Etag: "60467c7fd120d332460864a16ff8ec9e"
Cache-Control: public, max-age=31536000
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Sat, 10 Aug 2019 13:57:01 GMT
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f81f3c8d429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   335076
Md5:    60467c7fd120d332460864a16ff8ec9e
Sha1:   284549a7c065d814a67850fe7ec946d935ce0f06
Sha256: 96f9f57ecd64182d0a1c8431edee6ff545aa9caa342827f25ae698e56592b041
                                        
                                            GET /keys/medium.com/p.js HTTP/1.1 
Host: d1z2jf7jlzjs58.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213

                                         
                                         143.204.51.135
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Date: Tue, 07 Aug 2018 00:43:09 GMT
Last-Modified: Tue, 07 Aug 2018 00:27:38 GMT
Etag: W/"5b68e77a-9c11"
Content-Encoding: gzip
Age: 47631
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b9.cloudfront.net (CloudFront)
X-Amz-Cf-Id: PnVkPh1Xh93-wndTeaXGp-DTtQettW7r3X2seRDlxJDdEwmgHVvI1w==


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15262
Md5:    73cf72f043a322cf60426749b0819c51
Sha1:   05970b66fb6b712129abb0901e268bca757863a0
Sha256: ff998d914cb73671c692860d98059a7c9f6c03d7b37fe634706e8c3b34eee34a
                                        
                                            GET /max/2000/1*_djdK0inzgoACB_PtcyKag.jpeg HTTP/1.1 
Host: cdn-images-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.120.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 10 Aug 2018 13:57:02 GMT
Content-Length: 544516
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=2592000
Etag: "16.3"
Expires: Sun, 09 Sep 2018 13:57:02 GMT
Pragma: public
X-Obvious-Info: 16.3, 3173-05fbec3
X-Powered-By: Geomyidae artificij
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f8223d8842a3-OSL


--- Additional Info ---
Magic:  JPEG image data, baseline, precision 0, 4360x1499
Size:   544516
Md5:    afe6465b47001c571add03da8050f00f
Sha1:   21570ee8a5e1cc577da284e312ec0b0c7985086e
Sha256: 547d4ef0689bcc39d259f87317c63b96bfddfb59e99c0252157fb22145799060
                                        
                                            GET /max/800/1*gVVf9VUuIMuyeILDNo1ghQ.png HTTP/1.1 
Host: cdn-images-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.120.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 10 Aug 2018 13:57:03 GMT
Content-Length: 46047
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=2592000
Etag: "16.3"
Expires: Sun, 09 Sep 2018 13:57:03 GMT
Pragma: public
X-Obvious-Info: 16.3, 3173-05fbec3
X-Powered-By: Geomyidae artificij
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f829ff5342bb-OSL


--- Additional Info ---
Magic:  PNG image, 597 x 596, 8-bit/color RGB, non-interlaced
Size:   46047
Md5:    781f7749fb4fb1584cac86d1037ecb24
Sha1:   5962be4652b9ba880caa58eaddb5f835aba598d2
Sha256: 9e277889740d10ccdd5ddc6e9c3fd8810f15122d2aa52c625a94831820ded41d
                                        
                                            GET /_/fp/icons/favicon-rebrand-medium.3Y6xpZ-0FSdWDnPM3hSBIA.ico HTTP/1.1 
Host: cdn-static-1.medium.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d6fcc3c3dc69411dfdeb66110adf909621533909420; uid=lo_9H7hKocLcaLL; sid=1:e0N6UPL5Q+JiFLCtSnjyCciZbi5Rip5ZdjuL9VnnZrWYXayEHQdTaqBckhGhzzvP

                                         
                                         104.16.118.145
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Fri, 10 Aug 2018 13:57:02 GMT
Transfer-Encoding: chunked
Connection: keep-alive
x-amz-id-2: UMif/Mf2eidebYT9ZrIun6p9jt2GJhxCBDxdGMfz6heF/CuVjMDdPo7YZk+1+T89lXhXuAe0W+A=
x-amz-request-id: D50AB4BA8395B54E
Last-Modified: Sat, 19 Aug 2017 00:25:31 GMT
Etag: W/"dd8eb1a59fb41527560e73ccde148120"
Cache-Control: public, max-age=31536000
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Sat, 10 Aug 2019 13:57:02 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4482f8223d8042a3-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   788
Md5:    50594f97a83cc68aa5b1b64f4b2b1c50
Sha1:   dce5ec6cdfe8fd06704d83059156f15a9ff24cf9
Sha256: 00380dedc868a00178f805005e401a9c288c811940ca11815c1ee480a94f52c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.201
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=159671
Date: Fri, 10 Aug 2018 13:57:04 GMT
Etag: "5b6d5aec-1d7"
Expires: Sun, 12 Aug 2018 10:15:27 GMT
Last-Modified: Fri, 10 Aug 2018 09:29:16 GMT
Server: ECS (lga/1372)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IS6HPdOpBIiKmj5q0vsn3RkuWV9mUJkBZTSjpYDpfFjLRtm7wXJdgg==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d4e86ce1deeaf0cb933b784fd5c87ca4
Sha1:   0e0bef3570c082bdb92c52f1a86b25d64b41ff17
Sha256: d604536aee23224a2a0f0566eae2a43de9f7e83afc739547bb42862002b9a254
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.72
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Fri, 10 Aug 2018 13:57:04 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.7/2018-03-28)
X-Cache: Miss from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Id: G1d5CmH350bJCKHJJsD3k2PL7ySQlRtmEP2WDQYRBKxBxCvY-Dyw0w==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    6b77a037dc5ef6de4e2dab536332152b
Sha1:   107f0e6abb90e43f0515e3aa83f89b3c96be41b1
Sha256: 86d1ee54abc1281ff3e478c3170b45c68bb37652e774ecbdae461de8416e320a
                                        
                                            GET /start/?rand=1533909423624&plid=97961042&idsite=medium.com&url=https%3A%2F%2Fmrooding.me%2F%3Fgi%3D416c0cfee213&urlref=&screen=1176x885%7C1176x855%7C24&data=%7B%7D&sid=1&surl=https%3A%2F%2Fmrooding.me%2F%3Fgi%3D416c0cfee213&sref=&sts=1533909423618&slts=0&title=Ramblings+of+a+Dutch+dev&date=Fri+Aug+10+2018+15%3A57%3A03+GMT%2B0200&action=pageview&callback=parselyStartCallback HTTP/1.1 
Host: srv-2018-08-10-13.pixel.parsely.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://mrooding.me/?gi=416c0cfee213

                                         
                                         52.71.118.167
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Fri, 10 Aug 2018 13:57:05 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Server: nginx
Set-Cookie: pid=e7d0cf051d4e8689c68ed7ba7aef99c0; expires=Sat, 10-Aug-19 13:57:05 GMT; domain=pixel.parsely.com; path=/
Content-Length: 77
Connection: keep-alive


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   77
Md5:    811f81b43cee750ab742f115c6f62dd5
Sha1:   92eafede772b2f12820ce49ef48764d1cf11e030
Sha256: 116f6bf0c5343df37661c7556139310125b452c547a353f52caa6608963c95a1