From b36dbe7cb14602213dd6d185731c5da6c3a6d1c8 Mon Sep 17 00:00:00 2001 From: sidetracked Date: Mon, 29 Apr 2019 18:02:00 +0200 Subject: [PATCH 1/5] HTTP/1.0 301 Moved Permanently Location: http://www.flytap.com Server: BigIP Connection: Keep-Alive Content-Length: 0 HTTP/1.0 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 263 Expires: Mon, 29 Apr 2019 16:02:00 GMT Date: Mon, 29 Apr 2019 16:02:00 GMT Connection: close strict-transport-security: max-age=16070400; includeSubDomains (effective URL => "http://www.flytap.com/") --- not_cloudflare/list_error403.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/not_cloudflare/list_error403.txt b/not_cloudflare/list_error403.txt index 7786b0ce..89740a42 100644 --- a/not_cloudflare/list_error403.txt +++ b/not_cloudflare/list_error403.txt @@ -7,6 +7,7 @@ captaintrain.com catbox.moe dluat.com expo2015.org +flytap.com forum.pfsense.org forums.freebsd.org geocaching.com From 851df60b35b0e89a64a5baa23fd894791f19f154 Mon Sep 17 00:00:00 2001 From: sidetracked Date: Mon, 29 Apr 2019 18:32:27 +0200 Subject: [PATCH 2/5] note that book.flytap.com serves Tor users while www.flytap.com 403s them. Hence the "www" hostname. --- not_cloudflare/list_error403.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/not_cloudflare/list_error403.txt b/not_cloudflare/list_error403.txt index 89740a42..2a4cde68 100644 --- a/not_cloudflare/list_error403.txt +++ b/not_cloudflare/list_error403.txt @@ -7,7 +7,7 @@ captaintrain.com catbox.moe dluat.com expo2015.org -flytap.com +www.flytap.com forum.pfsense.org forums.freebsd.org geocaching.com From fb074e4ce178fb976e2b869fa642deb5412bc2cf Mon Sep 17 00:00:00 2001 From: sidetracked Date: Mon, 29 Apr 2019 20:22:09 +0200 Subject: [PATCH 3/5] HTTP/1.1 302 Found : Moved Temporarily Location: https://www.spirit.com/ Connection: close Cache-Control: no-cache Pragma: no-cache HTTP/1.1 403 Forbidden Server: AkamaiGHost Mime-Version: 1.0 Content-Type: text/html Content-Length: 263 Expires: Mon, 29 Apr 2019 18:22:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 29 Apr 2019 18:22:09 GMT Connection: close Set-Cookie: akacd_1=3734014928~rv=61~id=2e6662875de630c9ae886fd477e5ba79; path=/; (effective URL => "https://www.spirit.com/") --- not_cloudflare/list_error403.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/not_cloudflare/list_error403.txt b/not_cloudflare/list_error403.txt index 2a4cde68..bfdee0e3 100644 --- a/not_cloudflare/list_error403.txt +++ b/not_cloudflare/list_error403.txt @@ -24,6 +24,7 @@ safeco.com securifi.com signon.ruc.dk singpolyma.net +www.spirit.com stadssb.ruc.dk study.com theverge.com From 331db8d1f2fe079a3ffeb927ce6c93dfce30cb10 Mon Sep 17 00:00:00 2001 From: sidetracked Date: Mon, 29 Apr 2019 20:29:27 +0200 Subject: [PATCH 4/5] whole domain not CloudFlared, only some hosts, but whole domain will be listed per the format spec. HTTP/1.1 403 Forbidden Date: Mon, 29 Apr 2019 18:29:26 GMT Content-Type: text/html; charset=UTF-8 Connection: close CF-Chl-Bypass: 1 Set-Cookie: __cfduid=dc3ee68ce6bcccd6b18099067d321712d1556562566; expires=Tue, 28-Apr-20 18:29:26 GMT; path=/; domain=.customersupport.spirit.com; HttpOnly Cache-Control: max-age=2 Expires: Mon, 29 Apr 2019 18:29:28 GMT X-Frame-Options: SAMEORIGIN Server: cloudflare CF-RAY: 4cf3576b3bc3ad1a-OTP (effective URL => "http://customersupport.spirit.com/") --- split/cloudflare_s.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/split/cloudflare_s.txt b/split/cloudflare_s.txt index 28de954f..ea569bf2 100644 --- a/split/cloudflare_s.txt +++ b/split/cloudflare_s.txt @@ -277542,6 +277542,7 @@ spiritcitymusic.com spiritcleaninginc.com spiritclothing.co spiritcollection.ml +spirit.com spirit.com.au spiritcommission.ml spiritcompany.com From 4bd63b70df6e0d564cab9e4024b96ecab24fed4c Mon Sep 17 00:00:00 2001 From: sidetracked Date: Tue, 30 Apr 2019 18:51:55 +0200 Subject: [PATCH 5/5] HTTP/1.1 301 Moved Permanently Date: Tue, 30 Apr 2019 16:51:56 GMT Content-Type: text/html Connection: keep-alive Set-Cookie: __cfduid=d465c2f5b9cded87f28f89365fd1bdd201556643116; expires=Wed, 29-Apr-20 16:51:56 GMT; path=/; domain=.steemit.com; HttpOnly Set-Cookie: cf_clearance=e6e8952a28998cb4a03b6834717c831841f75398-1556643116-1800-220; path=/; expires=Tue, 30-Apr-19 18:21:56 GMT; domain=.steemit.com; HttpOnly Set-Cookie: AWSALB=RsEKAoM85XeI5pT7X23KBRljCMACxAVJYSvm+JHG2jivXBxF1FhzGLiPkjAUH/eqbyeBdzwMaTCf+UY9r2alYPG7BmyEF1wYmz3I9l3asrtC12DHD6eEOC+UFAOf; Expires=Tue, 07 May 2019 16:51:56 GMT; Path=/ Location: https://steemit.com/ Strict-Transport-Security: max-age=31557600; includeSubDomains; preload Content-Security-Policy: upgrade-insecure-requests Server: cloudflare CF-RAY: 4cfb05f76cc2cd08-EWR HTTP/2 200 date: Tue, 30 Apr 2019 16:51:58 GMT content-type: text/html; charset=utf-8 set-cookie: __cfduid=d5c467a954aef8db06fcb7aa6b26afcc91556643117; expires=Wed, 29-Apr-20 16:51:57 GMT; path=/; domain=.steemit.com; HttpOnly set-cookie: cf_clearance=40b808cbb66516b3e04d1cb26dad1487dba23a73-1556643117-1800-220; path=/; expires=Tue, 30-Apr-19 18:21:57 GMT; domain=.steemit.com; HttpOnly set-cookie: AWSALB=ZI7JiNAT2zQAImBcbCH1w/P7iz6PElvzFfdMnKylH4n5ui/cifILyZ59BWfR5yKhb7Yq728hgT/LZMWfW9NoP2bdteXJYczcmXpfIEspOKVmLTqAwu+iWFQ1n25v; Expires=Tue, 07 May 2019 16:51:57 GMT; Path=/ x-dns-prefetch-control: off x-frame-options: SAMEORIGIN x-download-options: noopen x-content-type-options: nosniff x-xss-protection: 1; mode=block content-security-policy: child-src 'self' player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src 'self' api.blocktrades.us steemit.com wss://steemd.steemit.com wss://steemd-int.steemit.com steemitimages.com cdn.steemitimages.com api.steemit.com api-int.steemit.com securepubads.g.doubleclick.net cdn.jsdelivr.net; default-src tpc.googlesyndication.com 'self' www.youtube.com staticxx.facebook.com player.vimeo.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation x-content-security-policy: child-src 'self' player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src 'self' api.blocktrades.us steemit.com wss://steemd.steemit.com wss://steemd-int.steemit.com steemitimages.com cdn.steemitimages.com api.steemit.com api-int.steemit.com securepubads.g.doubleclick.net cdn.jsdelivr.net; default-src tpc.googlesyndication.com 'self' www.youtube.com staticxx.facebook.com player.vimeo.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation x-webkit-csp: child-src 'self' player.twitch.tv www.youtube.com staticxx.facebook.com w.soundcloud.com player.vimeo.com; connect-src 'self' api.blocktrades.us steemit.com wss://steemd.steemit.com wss://steemd-int.steemit.com steemitimages.com cdn.steemitimages.com api.steemit.com api-int.steemit.com securepubads.g.doubleclick.net cdn.jsdelivr.net; default-src tpc.googlesyndication.com 'self' www.youtube.com staticxx.facebook.com player.vimeo.com; font-src data: fonts.gstatic.com; frame-ancestors 'none'; frame-src 'self' googleads.g.doubleclick.net https:; img-src * data:; object-src 'none'; plugin-types application/pdf; script-src 'unsafe-inline' 'unsafe-eval' data: https: 'self' www.google-analytics.com connect.facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /api/v1/csp_violation set-cookie: stm1=crypto-session:G97ELe4SR4f0AgiASzwv5KNn9JlzbMsmiIUwbJO+hBtIGq8W0Z6UElDsKfOhnr+3AFAmQmRBTBXTAGfvdNoEDaYccNlIpYcPJf591IOJIcGTprN2SYhpS8tzgU98zWHl6FEfZnAMSUL3MFEbMvTPVrukN40TTgyoS97pt+KAF863Xrm0TMQhGN2lFdzDRvUKSYpzDtVwCa0pUAW51038eYVmz0avpro8mv421v0uMK1HWxtBPuSqULMrUcA6R12Gl2XzWYQs3t1L5Lgo2QGqUdjA3eWagGnDD/x3oNtTX0lkJXBSjYy0VjILCBvlNPY9Ozlw6j3axjbcRBY=; path=/; expires=Sat, 29 Jun 2019 16:51:58 GMT; httponly set-cookie: stm1.sig=XlnXPUGR0KCD-lD48msQERJCDfw; path=/; expires=Sat, 29 Jun 2019 16:51:58 GMT; httponly strict-transport-security: max-age=31557600; includeSubDomains; preload content-security-policy: upgrade-insecure-requests expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" server: cloudflare cf-ray: 4cfb05fe9ec1cd04-EWR (effective URL => "https://steemit.com/") --- split/cloudflare_s.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/split/cloudflare_s.txt b/split/cloudflare_s.txt index ea569bf2..07b2db46 100644 --- a/split/cloudflare_s.txt +++ b/split/cloudflare_s.txt @@ -313781,6 +313781,7 @@ steem.id steemily.com steeming.com steeming.tv +steemit.com steem-it.com steemithispano.online steemiz.io