Overview

URLthatgoesinthebook.com/grandpa-died-grandma-died-who-really-died
IP 23.229.220.229 (United States)
ASN#398101 GO-DADDY-COM-LLC
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-28 16:55:46 UTC
StatusLoading report..
IDS alerts0
Blocklist alert7
urlquery alerts No alerts detected
Tags None

Domain Summary (12)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
thatgoesinthebook.com (29) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 12248 673896 23.229.220.229
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
s.gravatar.com (3) 11150 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 957 10708 192.0.73.2
stats.wordpress.com (2) 30226 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 661 730 192.0.78.26
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.42.148.177
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6202 23.36.76.226
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1594 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5843 34.160.144.191
pixel.wp.com (1) 2545 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 402 245 192.0.76.3
s.wordpress.org (2) 846806 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 718 10647 198.143.164.252
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 60494 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-28 medium thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died Malware
2022-11-28 medium thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/ Malware
2022-11-28 medium thatgoesinthebook.com/wordpress/wp-includes/js/comment-reply.js?ver=20090102 Malware
2022-11-28 medium thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/aj.js?v (...) Malware
2022-11-28 medium thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/bh.js?v (...) Malware
2022-11-28 medium thatgoesinthebook.com/wordpress/wp-includes/js/jquery/jquery.js?ver=1.7.1 Malware
2022-11-28 medium thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/fonts/V (...) Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 23.229.220.229
Date UQ / IDS / BL URL IP
2023-03-14 02:53:47 UTC 0 - 0 - 15 talansbs.com/http:/talansbs.com/?p=92'; 23.229.220.229
2023-03-12 07:50:30 UTC 0 - 0 - 16 talansbs.com/http:/talansbs.com/small-busines (...) 23.229.220.229
2023-03-12 07:50:29 UTC 0 - 0 - 15 talansbs.com/http:/talansbs.com/?p=92'; 23.229.220.229
2023-03-12 07:49:20 UTC 0 - 0 - 1 talansbs.com/http:/talansbs.com/small-busines (...) 23.229.220.229
2023-03-12 07:48:23 UTC 0 - 0 - 15 talansbs.com/http:/talansbs.com/small-busines (...) 23.229.220.229


Last 5 reports on ASN: GO-DADDY-COM-LLC
Date UQ / IDS / BL URL IP
2023-06-01 22:28:21 UTC 0 - 1 - 0 thekashmircompany.com/shawls/category/gift/ 160.153.75.69
2023-06-01 21:46:03 UTC 0 - 2 - 386 thecrescentschools.com/nsu/?528578 208.109.57.58
2023-06-01 20:14:28 UTC 0 - 0 - 2 enfermagemadistancia.com.br/purple/rain.zip 50.62.202.136
2023-06-01 19:21:23 UTC 0 - 0 - 48 katelynkatz.com/ 23.229.174.6
2023-06-01 19:18:33 UTC 0 - 4 - 3 lazermedia.com 72.167.127.73


Last 1 reports on domain: thatgoesinthebook.com
Date UQ / IDS / BL URL IP
2022-11-28 16:55:46 UTC 0 - 0 - 7 thatgoesinthebook.com/grandpa-died-grandma-di (...) 23.229.220.229


No other reports with similar screenshot

JavaScript

Executed Scripts (10)

Executed Evals (0)

Executed Writes (1)
#1 JavaScript::Write (size: 63) - SHA256: 844850766461f8738f13961548e67a1bb6b11351cace861e69dadbd9bfec3990
< style undefined > .nemonn {
    position: absolute;top: -9999 px
} < /style>


HTTP Transactions (57)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7774
Expires: Mon, 28 Nov 2022 19:05:06 GMT
Date: Mon, 28 Nov 2022 16:55:32 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4533
Cache-Control: max-age=154282
Date: Mon, 28 Nov 2022 16:55:32 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:46:54 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Alert, Backoff, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 16:19:32 GMT
cache-control: public,max-age=3600
age: 2160
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4d7e4eed097b9c4e5d509419f1cfc85a
Sha1:   290bb3d428a7c6330e2e3d73a952b16f820896c8
Sha256: 0dc9ca0f57af15adcd416035e92794711434e3d53a1feff21d8481d6d500986c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9905
Expires: Mon, 28 Nov 2022 19:40:37 GMT
Date: Mon, 28 Nov 2022 16:55:32 GMT
Connection: keep-alive

                                        
                                            GET /grandpa-died-grandma-died-who-really-died HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             23.229.220.229
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 16:55:32 GMT
Server: Apache
X-Pingback: http://thatgoesinthebook.com/wordpress/xmlrpc.php
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/
Vary: Accept-Encoding
Content-Length: 0
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - fortinet: Malware
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: +Ibv618H1K300mITWSDNIv8imUZ9FWAqYKaNEpfdSwfJpfaDKBXWCivuYqdXurDj48SOjUSF1/4=
x-amz-request-id: SYMM9PP8ND86BSC1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 16:45:06 GMT
age: 626
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 16:55:32 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /grandpa-died-grandma-died-who-really-died/ HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Date: Mon, 28 Nov 2022 16:55:32 GMT
Server: Apache
X-Pingback: http://thatgoesinthebook.com/wordpress/xmlrpc.php
Link: <http://wp.me/p2hhYV-P>; rel=shortlink
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5637
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3232), with CRLF, LF line terminators
Size:   5637
Md5:    c50fc0d9aea310affca33e4f25aae0c3
Sha1:   e7767f5d41bb284a791512eb101391ef1c19e843
Sha256: 691cec0b7e95bc0d87d1b5cd74719621358b8cd71b4ba331e666725d6577218a

Blocklists:
  - fortinet: Malware
                                        
                                            GET /js/gprofiles.js?aa&ver=3.3.1 HTTP/1.1 
Host: s.gravatar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             192.0.73.2
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 15 Sep 2022 11:48:47 GMT
ETag: W/"6323111f-5deb"
Content-Encoding: gzip
Expires: Mon, 05 Dec 2022 16:55:33 GMT
Cache-Control: max-age=604800


--- Additional Info ---
Magic:  ASCII text, with very long lines (24043), with no line terminators
Size:   7389
Md5:    b94596ffc2746c0e33c2039215531592
Sha1:   6a6fde47cda13c98489c70905c18b815910d1c4d
Sha256: 4e98be196118a9cd8e66c910fae42a8a45d6781f360996eadc691263d6193462
                                        
                                            GET /e-202248.js HTTP/1.1 
Host: stats.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             192.0.78.26
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Content-Length: 162
Connection: keep-alive
Location: https://stats.wordpress.com/e-202248.js
X-ac: 3.arn _dca BYPASS


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Alert, Content-Type, ETag, Retry-After, Last-Modified, Content-Length, Cache-Control, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 16:11:12 GMT
cache-control: public,max-age=3600
age: 2661
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /wordpress/wp-includes/js/comment-reply.js?ver=20090102 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:08 GMT
ETag: "c00035d-312-5bfe4685e1c00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 412
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (786), with no line terminators
Size:   412
Md5:    87818ceb3510914586339269c23ece39
Sha1:   b8a843b89bc5f4b45b47b1f04a2cdcd5d8ced9d6
Sha256: 4e8eaf3cbd3c394a0200c47660f6d2f8bebee1fdd025024e5ef2590203d7c9ba

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c0002f8-7d88-5bfe4683f9780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7174
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (501), with CRLF line terminators
Size:   7174
Md5:    1f8c9f9b70daafbc5044f28c71ad05de
Sha1:   93e5d6d41128af1c54c3491a3a7586a1592dcc07
Sha256: 89c8110ff2e57efcdc115759d93c76840207c5b1f22493898fdd206265bad4ae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 5611
Cache-Control: max-age=150293
Date: Mon, 28 Nov 2022 16:55:33 GMT
Etag: "63847a2f-1d7"
Expires: Wed, 30 Nov 2022 10:40:26 GMT
Last-Modified: Mon, 28 Nov 2022 09:06:55 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wordpress/wp-content/plugins/jetpack/modules/wpgroho.js?ver=3.3.1 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Apr 2021 01:10:00 GMT
ETag: "c000648-3a2-5bfe467e40a00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 445
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  ASCII text
Size:   445
Md5:    0a7cd236d1029d69fb43ccce748c15fc
Sha1:   61b536b847d0e90d9e55603937eae40105076ab5
Sha256: 6eb1807cd95750ef9944332dbb8fcb3431ff7e9af86fd44d383e72edf5ca5b09
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/aj.js?ver=3.3.1 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c000249-1a4-5bfe4683f9780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 288
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  ASCII text, with very long lines (418), with CRLF line terminators
Size:   288
Md5:    62dc51b3f30b8759f108fd9ef3f93bbe
Sha1:   194cce0d4bc834c135a3be3f522b9db4563a47d5
Sha256: 45a1cad60ae075b2e14d119a5fed96136132851dc44212b7d47a99595eb35657

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/bh.js?ver=3.3.1 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c000267-fc5-5bfe4683f9780-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1173
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  ASCII text, with very long lines (525), with CRLF line terminators
Size:   1173
Md5:    5248c5d76c7f4b79f9a12e199b2c7cdf
Sha1:   479a3a1ece992744c8be6c1a825d56a860c251ae
Sha256: 8866bd96539922bb89b9de7d97190d18758a0eaafa3d9f47be6635025c3521fa

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wordpress/wp-includes/js/jquery/jquery.js?ver=1.7.1 HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 14 Apr 2021 01:10:08 GMT
ETag: "c0004b1-16ec1-5bfe4685e1c00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 33146
Keep-Alive: timeout=5


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Size:   33146
Md5:    5961013ad876a8d90211f3a034742eda
Sha1:   ffb398c39ec5d540dc333efbf4a025d67682e7b3
Sha256: aadd9c0a9045ea3c93530f13b6ff5237adc9449b51180a565c73fcc02b7acf95

Blocklists:
  - fortinet: Malware
                                        
                                            GET /g.gif?v=ext&j=1%3A1.2.2&blog=33673373&post=51&host=thatgoesinthebook.com&ref=&fcp=0&rand=0.39735119401805286 HTTP/1.1 
Host: pixel.wp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             192.0.76.3
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Content-Length: 50
Connection: keep-alive
Cache-Control: no-cache
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  GIF image data, version 89a, 6 x 5\012- data
Size:   50
Md5:    e4d673a55c5656f19ef81563fb10884c
Sha1:   1f2d8ed221d39329251ad3a6ff1edb20b7219443
Sha256: f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: A1NCCFEjK52levZIei9G4Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.42.148.177
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KPAzVG0FVsFWMqJPag3Id9XOeJo=

                                        
                                            GET /images/browsers/ie.png HTTP/1.1 
Host: s.wordpress.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             198.143.164.252
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Content-Length: 162
Connection: keep-alive
Location: https://s.wordpress.org/images/browsers/ie.png


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /dist/css/hovercard.min.css?aa&ver=3.3.1 HTTP/1.1 
Host: s.gravatar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             192.0.73.2
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 11 Nov 2020 15:57:10 GMT
ETag: W/"5fac09d6-1e86"
Content-Encoding: gzip
Expires: Mon, 05 Dec 2022 16:55:33 GMT
Cache-Control: max-age=604800


--- Additional Info ---
Magic:  ASCII text, with very long lines (7814), with no line terminators
Size:   1850
Md5:    470b8ddc23a0c25aa16b4dbcfba44029
Sha1:   641ce5d5ae39b79a22a7cfb0eeabd8c84db8cd52
Sha256: 49da541116528df4cce37427903bdcd9e5e0152990bfb701e2dd7e321a090c2b
                                        
                                            GET /dist/css/services.min.css?aa&ver=3.3.1 HTTP/1.1 
Host: s.gravatar.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/

                                        
                                             192.0.73.2
HTTP/1.1 200 OK
Content-Type: text/css
                                            
Server: nginx
Date: Mon, 28 Nov 2022 16:55:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 22 Mar 2018 09:46:04 GMT
ETag: W/"5ab37b5c-a54"
Content-Encoding: gzip
Expires: Mon, 05 Dec 2022 16:55:33 GMT
Cache-Control: max-age=604800


--- Additional Info ---
Magic:  ASCII text, with very long lines (2644), with no line terminators
Size:   523
Md5:    a3575bbd9f0b716b24cddc34740779c9
Sha1:   c24399935d3cf538c22b3f1f61bf87da9ff2003f
Sha256: 4456c2e292e2447ced27f8b7b84476bfcfcfd8e2b5a5141d991550c69a53c232
                                        
                                            GET /wordpress/wp-content/uploads/2012/03/Old-People.jpg HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:09:57 GMT
ETag: "c0001b1-22cc-5bfe467b64340"
Accept-Ranges: bytes
Content-Length: 8908
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 213x215, components 3\012- data
Size:   8908
Md5:    36da1d30e3ab018cb4b87fc0216a8508
Sha1:   6fdad11b02aab4db01ee0603e187b8925ed908df
Sha256: 0605b4233d01c9b4afd7dbe0e806d72941cbc4f3dab6a8cd1440329b86c21aa2
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-background-shading.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c0003ee-133-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 307
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 2200 x 1, 8-bit/color RGBA, non-interlaced\012- data
Size:   307
Md5:    d1a0370717c13ac123a7486290fdc630
Sha1:   f7272f39f490242ae0a6f3797a5a7a2842e70e61
Sha256: 697b36337a4df0890a893f6f4693377bfbe63ab5359edbbc6562e3d51e62e7f6
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-navigation-main-sprite.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000400-daa-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 3498
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 11 x 420, 8-bit/color RGBA, non-interlaced\012- data
Size:   3498
Md5:    4cbb85f1799d62495cd148267ef5b978
Sha1:   7533e133beac45e1f95e77cdb98c0119d5f2475b
Sha256: 818d676caa37375d2ca58f5b543a528cac2e2172dfd69485206e66b5b460f688
                                        
                                            GET /wordpress/wp-content/uploads/2012/03/cropped-IMG_0243.jpg HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:09:57 GMT
ETag: "c0001cd-d240-5bfe467b64340"
Accept-Ranges: bytes
Content-Length: 53824
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 920x360, components 3\012- data
Size:   53824
Md5:    193e2976ce1d16eef3a0c2f6b958a095
Sha1:   0b889a878ba005902b92c3a58d89d5192fa902cf
Sha256: 756ada71bb1e9c41ae021d8ad3a6c4c9f0ca4a215bb2ba9766649a3fbd99a607
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/fonts/Vollkorn-Regular-webfont.woff HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: font/woff
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000372-68bc-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 26812
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 26812, version 1.0\012- data
Size:   26812
Md5:    8c261aa13eef39f7c39119aef7275955
Sha1:   a6796f0270c3dea960e6bd5695e17cf5f90d7fef
Sha256: f51da2bc86bf4c4079031a42a08d8917b9d50a95546738eceda70e642da59b90

Blocklists:
  - fortinet: Malware
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-background-tile.jpg HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c0003f5-1264f-5bfe4683f9780"
Accept-Ranges: bytes
Content-Length: 75343
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1280x460, components 3\012- data
Size:   75343
Md5:    8f4e96a9f051085c4fc72c88590ceeb7
Sha1:   451804d5fa4d7f4c53c0faabe226a984718e3802
Sha256: e4f63666e70cd2390fc706fc15792923d1a0bb10ced0974b91d0a82a57e4c75d
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-right.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c00049b-580-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 1408
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 12 x 68, 8-bit/color RGB, non-interlaced\012- data
Size:   1408
Md5:    1b6c9b0e7efe01b1da54662dd52e9eb4
Sha1:   54521ab1401f49f5d0a05401ee9eb0acb545c647
Sha256: a92765079566051dc5911ead793e0a480fae3db81c0120181b7317280a37ec65
                                        
                                            GET /images/browsers/ie.png HTTP/1.1 
Host: s.wordpress.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatgoesinthebook.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             198.143.164.252
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 16:55:34 GMT
content-length: 9951
last-modified: Wed, 06 Nov 2019 15:21:56 GMT
x-frame-options: SAMEORIGIN
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-nc: HIT ord 1
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced\012- data
Size:   9951
Md5:    4ef504af288d592a4ccca3b342230e37
Sha1:   f953c0652f0b72605dcde5a7ec52c2259ad60ba4
Sha256: b9892c05f93adaba38cd19fb15ad631291a68e28c6e14659b7716a195fadd79b
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-left.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c000485-4fd-5bfe4683f9780"
Accept-Ranges: bytes
Content-Length: 1277
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 12 x 68, 8-bit/color RGB, non-interlaced\012- data
Size:   1277
Md5:    bb447b9d59b17f967337f04d39b7c192
Sha1:   d849e5c9b9fd122fb95bcc1803b094181ae737c1
Sha256: 15918dd80b972f5f93a4565471a01cbcdbba68208399f5afafe08328abbb53a5
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-sprite-master.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c00042a-1062c-5bfe4683f9780"
Accept-Ranges: bytes
Content-Length: 67116
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 839 x 350, 8-bit/color RGBA, non-interlaced\012- data
Size:   67116
Md5:    c45964481815640149eb2a7aa156b376
Sha1:   eaec6a93eef733ee7fac3a1a02d8a6cc7cfdcf04
Sha256: def70861fa8f3dcaf6607a2dfa13c8c2fafd5af58420bf882c6bab04277baf30
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-bottom.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000476-5e9-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 1513
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 52 x 63, 8-bit/color RGB, non-interlaced\012- data
Size:   1513
Md5:    d68c4cfb26f418e28fee3dceebcd0a31
Sha1:   e71a0d756c241ee7a447aee66fa720c903ddf9f9
Sha256: 1e6baa162491251f06b73c1f57544c01a28797d7761a55c2bf4fbd6667766175
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-bottom-left.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000460-b16-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 2838
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 75 x 63, 8-bit/color RGB, non-interlaced\012- data
Size:   2838
Md5:    60ae5a03dd2fba78f6392d9f25dc51ea
Sha1:   ccc627a56c1317e8988543c323ee24f805dd07b4
Sha256: defb82f53277a7e96f0a1cde977e5cb223128e4a02621051452ab1a2c418700f
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-bottom-right.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000467-b49-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 2889
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 82 x 63, 8-bit/color RGB, non-interlaced\012- data
Size:   2889
Md5:    fd509580cd630b37420ffc683725e6ce
Sha1:   692bfd901ccff7f458bc17d625b325fd5d3b6a07
Sha256: b43d1993a472fc4bea57de65c13f2aa670bdf79665234400bd85e9b0c03c0fa5
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-top.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c0004ba-484-5bfe4683f9780"
Accept-Ranges: bytes
Content-Length: 1156
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 52 x 30, 8-bit/color RGB, non-interlaced\012- data
Size:   1156
Md5:    8680bcae03c636511e4d430e01f4de1c
Sha1:   2bdd51ef442d371e2a9a6a21900a82c6144ed07e
Sha256: 5ccfd93cf276c5b50d006c05de5fa212562d5d274e2672dce17e7ba1a0d8dee0
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-top-left.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c0004a3-5ee-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 1518
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 75 x 30, 8-bit/color RGB, non-interlaced\012- data
Size:   1518
Md5:    05f3814ee131b1310df51c8503c4d6d6
Sha1:   003f49b67dc903b8ed1292b651c133b310fb2999
Sha256: bbf2cd31579c5576b1f68d327af78c981087d2abfc1fb7738182c89a740acf2c
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/sidebar-bg-top-right.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c0004ab-655-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 1621
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 82 x 30, 8-bit/color RGB, non-interlaced\012- data
Size:   1621
Md5:    d6b3e7fd7bb4c823f2111c46c6e0eaa6
Sha1:   a8344994a9fa845efc6ef1df671014e6b2a5725c
Sha256: b8c8c09c06e3cf9c10d981e61d9eee4d86adab897e47f33669f2b8e24063a5fd
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/colophon-ctx.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000386-4360-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 17248
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 258 x 44, 8-bit/color RGBA, non-interlaced\012- data
Size:   17248
Md5:    c3e72137b0df660fb83806abe52d6f6c
Sha1:   3c6dfc152a09827e916b4b0e4e6f7439c89322a1
Sha256: a8961c67e0776f2bc9892e65049e8da01b35acda561ba4088956c22329e9238f
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/colophon-wp.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c00038f-2702-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 9986
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 218 x 37, 8-bit/color RGBA, non-interlaced\012- data
Size:   9986
Md5:    ca0a9156d46e524b07220382ab7ffe9b
Sha1:   062bd706f7f215babb827a8cdb06fa0abe8a622c
Sha256: 61de9d37c3c5261a8cc7e9a469751ab023c2c94ffee58716e3e00c6874f5212a
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-sprite-header-bg2.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c00041f-1d8f4-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 121076
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 3993 x 55, 8-bit/color RGBA, non-interlaced\012- data
Size:   121076
Md5:    e9e6b1bf27334fada161c24c228985fc
Sha1:   3dd96fe148a1a73ac787e64f2e5555819f298164
Sha256: 107e04ddabac62d1b5fb07f2b7fcc8d6cb24b8590d8378f9738b625785c62f80
                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-sprite-content-bg.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:33 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:05 GMT
ETag: "c000408-1cbfa-5bfe468305540"
Accept-Ranges: bytes
Content-Length: 117754
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 975 x 331, 8-bit/color RGBA, non-interlaced\012- data
Size:   117754
Md5:    d1a3860574885fbedce47c4ccec9acd3
Sha1:   2de6bd07952c805b586cbb2ab0f95c35f8252674
Sha256: e43eaacb754200bdb4677fee34ed7d226f092c8a6ca7610c3e210c4b8d0aab25
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/grandpa-died-grandma-died-who-really-died/

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:09:51 GMT
ETag: "c00009b-0-5bfe4675ab5c0"
Accept-Ranges: bytes
Content-Length: 0
Vary: Accept-Encoding
Keep-Alive: timeout=5
Connection: Keep-Alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5914
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:55:34 GMT
Connection: keep-alive

                                        
                                            GET /wordpress/wp-content/themes/adventure-journal/images/mp-sprite-header-bg.png HTTP/1.1 
Host: thatgoesinthebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://thatgoesinthebook.com/wordpress/wp-content/themes/adventure-journal/style.css?ver=3.3.1

                                        
                                             23.229.220.229
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Date: Mon, 28 Nov 2022 16:55:34 GMT
Server: Apache
Last-Modified: Wed, 14 Apr 2021 01:10:06 GMT
ETag: "c000415-18a9c-5bfe4683f9780"
Accept-Ranges: bytes
Content-Length: 101020
Keep-Alive: timeout=5
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 1960 x 409, 8-bit/color RGBA, non-interlaced\012- data
Size:   101020
Md5:    59c224085d7a9eb6ef0ca55a00929b9f
Sha1:   cf9a7251ade71fe9aecb7a717d4f3fa6467a7ff8
Sha256: 1f7da694578ea025f2998c706ee22dd12f6c803bb6a5b1733185e61fa6510b53
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5913
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:55:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5913
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:55:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5913
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:55:35 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5913
Expires: Mon, 28 Nov 2022 18:34:08 GMT
Date: Mon, 28 Nov 2022 16:55:35 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:26 GMT
age: 68049
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6376
Md5:    78b1389f425425d0450c94d900404dc4
Sha1:   53b12a8702f7c5b7cc697e2a24da824d9434be65
Sha256: 0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa78e81d9-dbc4-4911-9711-219f64026531.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10944
x-amzn-requestid: 8f48c27c-bbec-46f5-9c08-1cc804b9aff7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIbJ_FyvIAMFhrQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63800bd9-2ffa8521241a5e5b0afc0935;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 00:27:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4YiBUU3kS0VrcVOwKXUHgIRygLLeXGp1TjBYDi6WwWWm6WMKktzfHg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:36:32 GMT
age: 65943
etag: "a23fd98701ac35cd8740d1f7a832118c770e20c8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10944
Md5:    5e586c141835f4ac8819c55dcb811b4d
Sha1:   a23fd98701ac35cd8740d1f7a832118c770e20c8
Sha256: 4296f391f755a649897a2211f9072c69a0510e43a313674908bb0a771b12650e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfaef414-0c01-4bb9-800d-29da0ef5607d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8387
x-amzn-requestid: e4ce369f-7654-4c1a-94c2-70c913eb1a01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cFL0tEcqIAMFXHw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637ec01d-37bd969f4cdfe220096b8c1f;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 00:51:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: __2hrJIdzCKzhuJ_YfbSSfz-WwyIqnPugk7P6SuYSjn6b2wwm0otCw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 20:58:19 GMT
age: 71836
etag: "c32a57038d3cdbc514c9081c9938eca6a04fb481"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8387
Md5:    4e97baa4851785eac92c719abf481c64
Sha1:   c32a57038d3cdbc514c9081c9938eca6a04fb481
Sha256: adb59e982648082e5421f58899a5331b2747e9d45be33c495fbe3ab8cc872b22
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba57ea10-c30b-4188-bb72-b589f3564094.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8817
x-amzn-requestid: 31bd21c7-1d75-4159-af51-52035da16da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b-krGE6AIAMF2Kg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637c1b13-32a7b9c6642592c70783a0cf;Sampled=0
x-amzn-remapped-date: Tue, 22 Nov 2022 00:42:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZJu4cMNnQTavxqB1MnRFluzfZC59BcUnIHgXh9h6LJWYgsFL83rHoQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 16:15:25 GMT
age: 2410
etag: "308c08784ce4a0757cbd112807555b83e17a1d56"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8817
Md5:    741ddfb19764ac9a77509e7e87cfbfb2
Sha1:   308c08784ce4a0757cbd112807555b83e17a1d56
Sha256: e9271a76da94d8b655860c3b00d111396c5d3a227fd2f19e0ef400fd5e84d87e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 68059
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdee4f5d4-5a5e-4a39-9681-50795cecc0f4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10199
x-amzn-requestid: baee3bbe-7ded-425a-ae39-fccfc8169217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cOo4iF1VIAMF09g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63828836-5522727b2f09b27e63b23270;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 21:42:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: CXOqm7bjsSV0aJBTkTI7LsMovjgPeISPt3sZotEc7CjZnUL_y4_OoQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:43 GMT
age: 68632
etag: "ae8aa4ce6ddaccba771fe65446926b60fc5628da"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10199
Md5:    2cd887044e91d7ed0f1a8d7119ff7dd0
Sha1:   ae8aa4ce6ddaccba771fe65446926b60fc5628da
Sha256: bad283c15531000b7a8c126d442154b64a880cc26196a46cbd2e6266a526db67
                                        
                                            GET /e-202248.js HTTP/1.1 
Host: stats.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://thatgoesinthebook.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.0.78.26
HTTP/2 200 OK
content-type: application/javascript
                                            
server: nginx
date: Mon, 28 Nov 2022 16:55:33 GMT
vary: Accept-Encoding
etag: W/"6197c5cf-3508"
expires: Tue, 28 Nov 2023 16:55:33 GMT
cache-control: max-age=31536000
content-encoding: br
x-ac: 3.arn _dca BYPASS
strict-transport-security: max-age=15552000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: