Trying to load icanhazip.com/favicon.ico leads to a 301 redirect to ... icanhazip.com/favicon.ico. This doesn't show up on the terminal, but does slow down the completion of page-loading in web browsers.
sol@atri ~> curl -Lv https://icanhazip.com/favicon.ico
* Trying 2606:4700:10::6814:10f2...
* TCP_NODELAY set
* Connected to icanhazip.com (2606:4700:10::6814:10f2) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: /etc/ssl/certs/ca-certificates.crt
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS Unknown, Certificate Status (22):
* TLSv1.3 (IN), TLS handshake, Unknown (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Client hello (1):
* TLSv1.3 (OUT), TLS Unknown, Certificate Status (22):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
* ALPN, server accepted to use h2
* Server certificate:
* subject: OU=Domain Control Validated; OU=PositiveSSL Multi-Domain; CN=ssl514403.cloudflaressl.com
* start date: Aug 24 00:00:00 2019 GMT
* expire date: Mar 1 23:59:59 2020 GMT
* subjectAltName: host "icanhazip.com" matched cert's "icanhazip.com"
* issuer: C=GB; ST=Greater Manchester; L=Salford; O=COMODO CA Limited; CN=COMODO ECC Domain Validation Secure Server CA 2
* SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* Using Stream ID: 1 (easy handle 0x563ac76fe580)
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
> GET /favicon.ico HTTP/2
> Host: icanhazip.com
> User-Agent: curl/7.58.0
> Accept: */*
>
* TLSv1.3 (IN), TLS Unknown, Certificate Status (22):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* Connection state changed (MAX_CONCURRENT_STREAMS updated)!
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
< HTTP/2 301
< date: Mon, 20 Jan 2020 18:30:26 GMT
< content-type: text/html
< set-cookie: __cfduid=dc607cb098faacb85c86cacd5562c4cad1579545026; expires=Wed, 19-Feb-20 18:30:26 GMT; path=/; domain=.icanhazip.com; HttpOnly; SameSite=Lax
< location: https://icanhazip.com/favicon.ico
< cache-control: max-age=14400
< cf-cache-status: UPDATING
< age: 1056563
< expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< alt-svc: h3-24=":443"; ma=86400, h3-23=":443"; ma=86400
< server: cloudflare
< cf-ray: 55831ea14b8fdd0a-SIN
<
* Ignoring the response-body
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* Connection #0 to host icanhazip.com left intact
* Issue another request to this URL: 'https://icanhazip.com/favicon.ico'
* Found bundle for host icanhazip.com: 0x563ac76fda50 [can multiplex]
* Re-using existing connection! (#0) with host icanhazip.com
* Connected to icanhazip.com (2606:4700:10::6814:10f2) port 443 (#0)
* Using Stream ID: 3 (easy handle 0x563ac76fe580)
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
> GET /favicon.ico HTTP/2
> Host: icanhazip.com
> User-Agent: curl/7.58.0
> Accept: */*
>
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
< HTTP/2 301
< date: Mon, 20 Jan 2020 18:30:26 GMT
< content-type: text/html
< set-cookie: __cfduid=dc607cb098faacb85c86cacd5562c4cad1579545026; expires=Wed, 19-Feb-20 18:30:26 GMT; path=/; domain=.icanhazip.com; HttpOnly; SameSite=Lax
< location: https://icanhazip.com/favicon.ico
< cache-control: max-age=14400
< cf-cache-status: UPDATING
< age: 1056563
< expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< alt-svc: h3-24=":443"; ma=86400, h3-23=":443"; ma=86400
< server: cloudflare
< cf-ray: 55831ea18c11dd0a-SIN
<
* Ignoring the response-body
* TLSv1.3 (IN), TLS Unknown, Unknown (23):
* Connection #0 to host icanhazip.com left intact
* Issue another request to this URL: 'https://icanhazip.com/favicon.ico'
* Found bundle for host icanhazip.com: 0x563ac76fda50 [can multiplex]
* Re-using existing connection! (#0) with host icanhazip.com
* Connected to icanhazip.com (2606:4700:10::6814:10f2) port 443 (#0)
* Using Stream ID: 5 (easy handle 0x563ac76fe580)
* TLSv1.3 (OUT), TLS Unknown, Unknown (23):
> GET /favicon.ico HTTP/2
> Host: icanhazip.com
> User-Agent: curl/7.58.0
> Accept: */*