Report - www.nikhilsalvi.com/

Report Overview

Submitted URL
www.nikhilsalvi.com/
IP
75.98.175.81
ASN
#55293 A2HOSTING
Submitted
2023-02-28 23:18:33
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.0 kB	8.0 kB	23.36.77.32
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.9 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
www.googletagmanager.com	75	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.0 kB	72 kB	142.250.74.168
www.google-analytics.com	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	375 B	21 kB	142.250.74.110
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.42.219.176
region1.google-analytics.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	719 B	449 B	216.239.32.36
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
www.nikhilsalvi.com	767719	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.3 kB	336 kB	75.98.175.81
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	686 B	1.4 kB	142.250.74.131
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.8 kB	64 kB	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-28	medium	www.nikhilsalvi.com/	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-content/themes/twentyeleven/style.css?ver=20221101	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-includes/css/classic-themes.min.css?ver=1	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-content/themes/twentyeleven/colors/dark.css?ver=20190404	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-content/themes/twentyeleven/blocks.css?ver=20220927	Malware
2023-02-28	medium	www.nikhilsalvi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2	195 kB	2023-03-14	2023-03-14
Pretty URL www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2 IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 14:45:40 Last Seen2023-03-14 14:45:40 Times Seen1 Hash 614b57ce5388bc87d835ea32ef38e6f3 6eb1afe110fd0e31ad114f4b6c5e5838b8e158e6 ad0e15def5efe6ea14f00c814254b695d3c2f51b30570c34fdf0742e3d7ed68a Loading...

	www.nikhilsalvi.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1	31 kB	2023-03-07	2024-04-16
Pretty URL www.nikhilsalvi.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1 IP 75.98.175.81 ASN #55293 A2HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:04:52 Last Seen2024-04-16 22:29:53 Times Seen882 Hash 3aec8aee9c0b7fb595ba301506f09002 f58b5d6b072ebed281356afa607efef1eb3fad8f 357201dedf46672163a0b8694cb297c5351c6d25402c76b625b3c9ae7305b0e0 Loading...

	www.nikhilsalvi.com/	278 B	2023-03-14	2023-04-05
Pretty URL www.nikhilsalvi.com/ IP 75.98.175.81 ASN #55293 A2HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 14:45:40 Last Seen2023-04-05 01:49:51 Times Seen3 Hash b8609af0c2be5595bb95d986f360d56a 75decc6c5dca05a746ac203af9580442dbbb022e 1bc997f2dc16024c21fe99f55a9d5e776e09ce4df3cd578677933db90ffacf7e Loading...

	www.nikhilsalvi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1	19 kB	2023-03-07	2024-04-19
Pretty URL www.nikhilsalvi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP 75.98.175.81 ASN #55293 A2HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-04-19 12:23:33 Times Seen37994 Hash 32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782 Loading...

	www.googletagmanager.com/gtag/js?id=UA-36605954-1&l=dataLayer&cx=c	114 kB	2023-03-14	2023-03-14
Pretty URL www.googletagmanager.com/gtag/js?id=UA-36605954-1&l=dataLayer&cx=c IP 142.250.74.168 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 14:45:40 Last Seen2023-03-14 14:45:40 Times Seen1 Hash ef132cc28e01d9bd403a194139c01270 5e6cda70ad7f6fa0d3a335791718386d0934754b 9dd8123aa63708c12c31bc15b2a6ac8e77ee4d4394d2e9c7ba874bc7ef50a4cc Loading...

	www.google-analytics.com/analytics.js	50 kB	2023-03-12	2024-04-15
Pretty URL www.google-analytics.com/analytics.js IP 142.250.74.110 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 21:46:21 Last Seen2024-04-15 18:54:35 Times Seen35101 Hash 54e51056211dda674100cc5b323a58ad 26dc5034cb6c7f3bbe061edd37c7fc6006cb835b 5971b095cff574a66d35ada016d4c077c86e2dea62e9c0f14cf7c94b258619de Loading...

	www.nikhilsalvi.com/	6.2 kB	2023-03-14	2023-03-25
Pretty URL www.nikhilsalvi.com/ IP 75.98.175.81 ASN #55293 A2HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 14:45:40 Last Seen2023-03-25 22:21:47 Times Seen2 Hash dda55751ebf0fab7c16519e1791846bf b482d873f07e57649d43abba24b098fe97a1dc67 f24c31b27fc310d035b4b4e802db18c79b72c8cd9749c5a00ec824626883ba92 Loading...

	www.nikhilsalvi.com/	2.2 kB	2023-03-14	2023-03-25
Pretty URL www.nikhilsalvi.com/ IP 75.98.175.81 ASN #55293 A2HOSTING Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-14 14:45:40 Last Seen2023-03-25 22:21:47 Times Seen2 Hash 34a19cacc862bd3252df56a730e57598 d47778b5215615a4c8ef5d7af403f016253894ff 3f700b983f74fc6d21177fb135711e464a669c038aaf02ca4d50c8158e559551 Loading...

HTTP Transactions (44)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
fa03c1ea82feaa081cf4094641ce1152
5c62e5281662a4010eb4cb45f3bd4bacae1c9153
7b72ac559134398cedcb17bbca3ea3e5467a05a7da769ee2f83f4f762af62918

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7B72AC559134398CEDCB17BBCA3EA3E5467A05A7DA769EE2F83F4F762AF62918"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3490
Expires: Wed, 01 Mar 2023 00:16:32 GMT
Date: Tue, 28 Feb 2023 23:18:22 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
b44b6d7bebf34d0393567b22a63a93fa
a1a85b268bc8073d8e4622ceb78b78a1b39af96a
4b69973af6e9c5a78d94e8661b08d9349176a515e7bfb3386b10ace4c6f1ae21

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B69973AF6E9C5A78D94E8661B08D9349176A515E7BFB3386B10ACE4C6F1AE21"
Last-Modified: Tue, 28 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5237
Expires: Wed, 01 Mar 2023 00:45:39 GMT
Date: Tue, 28 Feb 2023 23:18:22 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 28 Feb 2023 23:08:06 GMT
content-type: application/json
age: 616
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d533446f79adb9523ba9ed92587833da
442454b9811f80ef90768d154036ebd349b8770d
f329f0e623ed8981e9ce3eddb63add02a524ce0d95367ec106730a3dc105973c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F329F0E623ED8981E9CE3EDDB63ADD02A524CE0D95367EC106730A3DC105973C"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2983
Expires: Wed, 01 Mar 2023 00:08:05 GMT
Date: Tue, 28 Feb 2023 23:18:22 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 0M3W91u+BkttzkBVmFZLf3zsIUSrNrFtb7/bBs6MlOH/xr+pzpijl8MsB5ZKfU16rUWYQEDgbgY=
x-amz-request-id: 07D7Z063T8FA9K08
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 28 Feb 2023 23:14:46 GMT
age: 216
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 28 Feb 2023 23:18:22 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

www.nikhilsalvi.com/

75.98.175.81

200 OK

22 kB

URL HTTP/1.1
www.nikhilsalvi.com/
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (14642)
Size
22 kB (22153 bytes)
Hash
4eb1a11cc7797f296c43dc224661fd24
93f4bec0b5a309d9319c5b5e3ac091fb7b59ad30
41108d2c811b9019fc7114eb6d75d93f447efe925b46f724efa9cf776c485c16

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET / HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Link: <https://www.nikhilsalvi.com/wp-json/>; rel="https://api.w.org/"
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Expires: Wed, 01 Mar 2023 00:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 22153
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2

142.250.74.168

302 Found

253 B

URL HTTP/1.1
www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
253 B (253 bytes)
Hash
f894bc81d383c9e084485542e64798d8
4d26f7509d2ba5099d5ccb262162f96e9e2c934a
533a274436baf0f6e8237f493a8bec9b684afe81b6a9861b248a9d721a648bc6

HTTP Headers

GET /gtag/js?id=G-70P3XPP3E2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 28 Feb 2023 23:18:22 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 253
X-XSS-Protection: 0

www.nikhilsalvi.com/wp-content/themes/twentyeleven/style.css?ver=20221101

75.98.175.81

200 OK

12 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/themes/twentyeleven/style.css?ver=20221101
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text, with very long lines (812)
Size
12 kB (12131 bytes)
Hash
a255a7a29eade5b9f406bee4673abf84
ab291cda26d939b7c99605f6d96083b438ce3dc4
fa3f167c88d72e17bec89660f454e604274006b43e7254aa131c92646dcb14f4

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/themes/twentyeleven/style.css?ver=20221101 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 22 Feb 2023 07:22:11 GMT
ETag: "e2e1-5f544c137811a-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 12131
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
bfbcef54be3178de9154d50361328ad1
8f53b45b4165055a9c13892e7e944eabd5b563da
a9b359d670b21fdb03ff7e9ecbf63ac76925fe11af53e6128014971b585c7af5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 28 Feb 2023 23:18:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2

142.250.74.168

200 OK

71 kB

URL HTTP/2
www.googletagmanager.com/gtag/js?id=G-70P3XPP3E2
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (10336)
Size
71 kB (70633 bytes)
Hash
fead841aab755c1b16efc27f007aba6a
c91a19c37287c2a3b7a5563001b41da62ba5738d
48607a7fc9ba701498e8a8a6d0f71dfc5f5f3156c337809ef42033180676d18d

HTTP Headers

GET /gtag/js?id=G-70P3XPP3E2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nikhilsalvi.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 28 Feb 2023 23:18:22 GMT
expires: Tue, 28 Feb 2023 23:18:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70633
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.nikhilsalvi.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1

75.98.175.81

200 OK

6.3 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
C source, ASCII text
Size
6.3 kB (6259 bytes)
Hash
552d0dbd2326d901637a9aba1ce90676
e5b3e2dac4e6791a9b1c8dddd328cb8f5c8fde3d
9e2f9cfff1d473484ee628fcd0ab70a94e2a727350ac12730f21b87ae6016f20

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.js?ver=8.12.1 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Thu, 12 Jan 2023 22:08:55 GMT
ETag: "78a3-5f2185ce2d04f-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 6259
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: application/x-javascript

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
bfbcef54be3178de9154d50361328ad1
8f53b45b4165055a9c13892e7e944eabd5b563da
a9b359d670b21fdb03ff7e9ecbf63ac76925fe11af53e6128014971b585c7af5

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 28 Feb 2023 23:18:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.nikhilsalvi.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1

75.98.175.81

200 OK

12 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text, with very long lines (47826)
Size
12 kB (12518 bytes)
Hash
8fa87dd23394a22621248ec378d2af59
9305bc637a89b1700d7f56a19a80bd32b0feb2f7
c162f7de24fa2d4e93e0da254ef287ff72f4a3e03f42443265097968351388dc

HTTP Headers

GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 28 Dec 2022 22:08:46 GMT
ETag: "172a9-5f0ea9cc6d6f3-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 12518
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/css

www.nikhilsalvi.com/wp-includes/css/classic-themes.min.css?ver=1

75.98.175.81

200 OK

189 B

URL HTTP/1.1
www.nikhilsalvi.com/wp-includes/css/classic-themes.min.css?ver=1
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text
Size
189 B (189 bytes)
Hash
5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 28 Dec 2022 22:08:47 GMT
ETag: "d9-5f0ea9cd26011-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 189
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/css

www.nikhilsalvi.com/wp-content/themes/twentyeleven/colors/dark.css?ver=20190404

75.98.175.81

200 OK

2.8 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/themes/twentyeleven/colors/dark.css?ver=20190404
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text
Size
2.8 kB (2766 bytes)
Hash
17e960146527810fe7ae433b28e626c5
14690260dcb4b1862e2c567053ec5ded48a0168e
f9474479e362b40d865c278a529db3a5fddd2a3e87369693d7be813a4638435a

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/themes/twentyeleven/colors/dark.css?ver=20190404 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 22 Feb 2023 07:22:11 GMT
ETag: "33c6-5f544c131eb6b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 2766
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/css

www.nikhilsalvi.com/wp-content/themes/twentyeleven/blocks.css?ver=20220927

75.98.175.81

200 OK

1.8 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/themes/twentyeleven/blocks.css?ver=20220927
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text
Size
1.8 kB (1767 bytes)
Hash
1ee94a28adbe57768522dda5bc6219f6
9a94e4dea256b13053651f3490144d19b4c82e48
7647ef7d6d15e542669f6cc80423fd1ca2cec8f0df9f6183f9f1f77c94852f90

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-content/themes/twentyeleven/blocks.css?ver=20220927 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 22 Feb 2023 07:22:11 GMT
ETag: "1e11-5f544c131eb6b-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 1767
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: text/css

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Last-Modified, Backoff, Alert, Cache-Control, ETag, Expires, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 28 Feb 2023 23:03:35 GMT
age: 887
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

www.nikhilsalvi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1

75.98.175.81

200 OK

5.0 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
ASCII text, with very long lines (15660)
Size
5.0 kB (5009 bytes)
Hash
e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Tue, 12 Apr 2022 17:26:24 GMT
ETag: "48b9-5dc785c2a1000-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Pragma: public
Content-Length: 5009
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: application/x-javascript

www.googletagmanager.com/gtag/js?id=UA-36605954-1&l=dataLayer&cx=c

142.250.74.168

302 Found

279 B

URL HTTP/1.1
www.googletagmanager.com/gtag/js?id=UA-36605954-1&l=dataLayer&cx=c
IP
142.250.74.168:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size
279 B (279 bytes)
Hash
9a1a1a43ffc7ff1faa52f1593922fe14
96bf503f53bd4d8c15110841adf3c8ce79e63a9f
973a2fdf8b9b1dc5e2b4989fb11a62bcf84ea5639f7d61915c3a743ed1802fbc

HTTP Headers

GET /gtag/js?id=UA-36605954-1&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 302 Found
Location: https://www.googletagmanager.com/gtag/js?id=UA-36605954-1&l=dataLayer&cx=c
Cross-Origin-Resource-Policy: cross-origin
Date: Tue, 28 Feb 2023 23:18:22 GMT
Content-Type: text/html; charset=UTF-8
Server: Google Tag Manager
Content-Length: 279
X-XSS-Protection: 0

www.nikhilsalvi.com/wp-content/themes/twentyeleven/images/comment-bubble-dark.png

75.98.175.81

200 OK

872 B

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/themes/twentyeleven/images/comment-bubble-dark.png
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
PNG image data, 43 x 36, 8-bit colormap, non-interlaced\012- data
Size
872 B (872 bytes)
Hash
82284abf5a3c8c004f41b606d6adae2c
c062194b8b156aa558c93afbc9574fbc087a24f6
08085bc74d29b0fac7d2d4b8aef2dabd6d94290a1c367deda816425f2e5c4eaf

HTTP Headers

GET /wp-content/themes/twentyeleven/images/comment-bubble-dark.png HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/wp-content/themes/twentyeleven/colors/dark.css?ver=20190404
Cookie: _ga_70P3XPP3E2=GS1.1.1677626302.1.0.1677626302.0.0.0; _ga=GA1.1.290898163.1677626302

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 22 Feb 2023 07:22:11 GMT
ETag: "368-5f544c132cdfb"
Accept-Ranges: bytes
Content-Length: 872
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Pragma: public
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: image/png

www.nikhilsalvi.com/wp-content/themes/twentyeleven/images/search.png

75.98.175.81

200 OK

440 B

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/themes/twentyeleven/images/search.png
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
PNG image data, 20 x 20, 8-bit colormap, non-interlaced\012- data
Size
440 B (440 bytes)
Hash
34cb7ea0e3fe637a33e31e8b74a0850e
29176b9abba5df1189c1a6e6a695f3152dd48d32
c99de94cb887e8c3236dd934c1a675ebd453fc8872a7291639d81d07e331fe48

HTTP Headers

GET /wp-content/themes/twentyeleven/images/search.png HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/wp-content/themes/twentyeleven/style.css?ver=20221101
Cookie: _ga_70P3XPP3E2=GS1.1.1677626302.1.0.1677626302.0.0.0; _ga=GA1.1.290898163.1677626302

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Wed, 22 Feb 2023 07:22:11 GMT
ETag: "1b8-5f544c13421d3"
Accept-Ranges: bytes
Content-Length: 440
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Pragma: public
Keep-Alive: timeout=3, max=498
Connection: Keep-Alive
Content-Type: image/png

www.nikhilsalvi.com/wp-content/uploads/2020/04/cropped-realisticdrawings.jpg

75.98.175.81

200 OK

41 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2020/04/cropped-realisticdrawings.jpg
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1000x288, components 3\012- data
Size
41 kB (40931 bytes)
Hash
8ce0269a6bb8188af0a12da900f1fa38
e5f3c2adacf86088aa18496be490a7ca6324ccdb
619cde101f410dabaff4d30406e50380e09f535cc5b231bbf54b0d5e36fe300b

HTTP Headers

GET /wp-content/uploads/2020/04/cropped-realisticdrawings.jpg HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Fri, 10 Apr 2020 11:18:36 GMT
ETag: "9fe3-5a2ede4f89b00"
Accept-Ranges: bytes
Content-Length: 40931
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Pragma: public
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: image/jpeg

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a518b418b3b845c6c4f61b595d07d29e
fa6b54344b3e4dfb5c6f16090825264152907bd6
b797e9b583b27d9c7288b67ecd1c8fc0da8a0ff8ac6d335f3d6e0bed653f2aed

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B797E9B583B27D9C7288B67ECD1C8FC0DA8A0FF8AC6D335F3D6E0BED653F2AED"
Last-Modified: Mon, 27 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11031
Expires: Wed, 01 Mar 2023 02:22:13 GMT
Date: Tue, 28 Feb 2023 23:18:22 GMT
Connection: keep-alive

www.nikhilsalvi.com/wp-content/uploads/2012/10/cardboard_flat.png

75.98.175.81

200 OK

33 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2012/10/cardboard_flat.png
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
PNG image data, 256 x 256, 8-bit grayscale, non-interlaced\012- data
Size
33 kB (32880 bytes)
Hash
eb1e349e91607c19c3de6839da3ae117
dede78220b0673f9299a2d948d3a2b1717b0401c
027790ad42819e63c09dc445aa796700dc790541dd8f923945b3870f9564f2b6

HTTP Headers

GET /wp-content/uploads/2012/10/cardboard_flat.png HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/
Cookie: _ga_70P3XPP3E2=GS1.1.1677626302.1.0.1677626302.0.0.0; _ga=GA1.1.290898163.1677626302

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Sun, 14 Oct 2012 08:06:28 GMT
ETag: "8070-4cc0065dea900"
Accept-Ranges: bytes
Content-Length: 32880
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Pragma: public
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: image/png

www.nikhilsalvi.com/wp-content/uploads/2020/06/b01-791x1024.jpg

75.98.175.81

200 OK

60 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2020/06/b01-791x1024.jpg
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 791x1024, components 3\012- data
Size
60 kB (59786 bytes)
Hash
965d51e824c5a72d0897377c5db41606
8ac74a1364055ab9cf9a2a0c91dfa034ec6c0b24
127537964f12298aabdc37640ebd274eaa37f22818f7a487e348e35ac39f1f37

HTTP Headers

GET /wp-content/uploads/2020/06/b01-791x1024.jpg HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:22 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Mon, 01 Jun 2020 12:13:59 GMT
ETag: "e98a-5a704bac90fc0"
Accept-Ranges: bytes
Content-Length: 59786
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:22 GMT
Pragma: public
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: image/jpeg

www.google-analytics.com/analytics.js

142.250.74.110

200 OK

20 kB

URL HTTP/2
www.google-analytics.com/analytics.js
IP
142.250.74.110:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1490)
Size
20 kB (20085 bytes)
Hash
ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db

HTTP Headers

GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Tue, 28 Feb 2023 21:53:25 GMT
expires: Tue, 28 Feb 2023 23:53:25 GMT
cache-control: public, max-age=7200
age: 5098
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.42.219.176

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.42.219.176:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mhqChshM4/Mg8R2CEgAUZA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 7e689QpuBSmHpbd0/7r3FxBWX20=

www.nikhilsalvi.com/wp-content/uploads/2012/10/nikhil-salvi5.png

75.98.175.81

200 OK

13 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2012/10/nikhil-salvi5.png
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size
13 kB (13070 bytes)
Hash
7f4d1f9908c5cdf0a699d7aa273beaf9
72a635ccd9cad36d9520f5371c5c6a25802cd731
2a1dc7567a17049465c9679a67d762a87ddfbc3955ee89726475ca7a2dc57be8

HTTP Headers

GET /wp-content/uploads/2012/10/nikhil-salvi5.png HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nikhilsalvi.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:23 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Sat, 13 Oct 2012 13:55:17 GMT
ETag: "330e-4cbf1277e7b40"
Accept-Ranges: bytes
Content-Length: 13070
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:23 GMT
Pragma: public
Keep-Alive: timeout=3, max=499
Connection: Keep-Alive
Content-Type: image/png

region1.google-analytics.com/g/collect?v=2&tid=G-70P3XPP3E2&gtm=45je32r0&_p=1915022353&gdid=dZGIzZG&cid=290898163.1677626302&ul=en-us&sr=1280x1024&_s=1&sid=1677626302&sct=1&seg=0&dl=http%3A%2F%2Fwww.nikhilsalvi.com%2F&dt=Nikhil%20Salvi%20%7C%20thoughts%20sublime%E2%80%A6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true

216.239.32.36

204 No Content

0 B

URL HTTP/2
region1.google-analytics.com/g/collect?v=2&tid=G-70P3XPP3E2&gtm=45je32r0&_p=1915022353&gdid=dZGIzZG&cid=290898163.1677626302&ul=en-us&sr=1280x1024&_s=1&sid=1677626302&sct=1&seg=0&dl=http%3A%2F%2Fwww.nikhilsalvi.com%2F&dt=Nikhil%20Salvi%20%7C%20thoughts%20sublime%E2%80%A6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true
IP
216.239.32.36:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /g/collect?v=2&tid=G-70P3XPP3E2&gtm=45je32r0&_p=1915022353&gdid=dZGIzZG&cid=290898163.1677626302&ul=en-us&sr=1280x1024&_s=1&sid=1677626302&sct=1&seg=0&dl=http%3A%2F%2Fwww.nikhilsalvi.com%2F&dt=Nikhil%20Salvi%20%7C%20thoughts%20sublime%E2%80%A6&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.forceSSL=true HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.nikhilsalvi.com
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 204 No Content
access-control-allow-origin: http://www.nikhilsalvi.com
date: Tue, 28 Feb 2023 23:18:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.nikhilsalvi.com/wp-content/uploads/2022/03/logo_FB_square.jpg

75.98.175.81

200 OK

104 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2022/03/logo_FB_square.jpg
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=2151, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=3035], baseline, precision 8, 516x516, components 3\012- data
Size
104 kB (104134 bytes)
Hash
6490bdd8dafcc9bc8b897bbd0a2fcc06
31dd52d24ef7b92e807b48d6f9395dc35cfcc941
5690b3eac9038a40db3a4898ee139a43f1f7d5eb11f50929d5abf81405b436d3

HTTP Headers

GET /wp-content/uploads/2022/03/logo_FB_square.jpg HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.nikhilsalvi.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:23 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Tue, 01 Mar 2022 10:24:03 GMT
ETag: "196c6-5d925906356c0"
Accept-Ranges: bytes
Content-Length: 104134
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:23 GMT
Pragma: public
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: image/jpeg

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3832f6a88f40012d5b398e620abae7a7
1adf92bafe271660fc4582228137562c9f0da2db
d546818cbd4ba1b7ae00d0a759556e330e2aa4fef0bca65ac98453a19cb7e09a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D546818CBD4BA1B7AE00D0A759556E330E2AA4FEF0BCA65AC98453A19CB7E09A"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20396
Expires: Wed, 01 Mar 2023 04:58:19 GMT
Date: Tue, 28 Feb 2023 23:18:23 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3832f6a88f40012d5b398e620abae7a7
1adf92bafe271660fc4582228137562c9f0da2db
d546818cbd4ba1b7ae00d0a759556e330e2aa4fef0bca65ac98453a19cb7e09a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D546818CBD4BA1B7AE00D0A759556E330E2AA4FEF0BCA65AC98453A19CB7E09A"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20396
Expires: Wed, 01 Mar 2023 04:58:19 GMT
Date: Tue, 28 Feb 2023 23:18:23 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3832f6a88f40012d5b398e620abae7a7
1adf92bafe271660fc4582228137562c9f0da2db
d546818cbd4ba1b7ae00d0a759556e330e2aa4fef0bca65ac98453a19cb7e09a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D546818CBD4BA1B7AE00D0A759556E330E2AA4FEF0BCA65AC98453A19CB7E09A"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20396
Expires: Wed, 01 Mar 2023 04:58:19 GMT
Date: Tue, 28 Feb 2023 23:18:23 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3832f6a88f40012d5b398e620abae7a7
1adf92bafe271660fc4582228137562c9f0da2db
d546818cbd4ba1b7ae00d0a759556e330e2aa4fef0bca65ac98453a19cb7e09a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D546818CBD4BA1B7AE00D0A759556E330E2AA4FEF0BCA65AC98453A19CB7E09A"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20396
Expires: Wed, 01 Mar 2023 04:58:19 GMT
Date: Tue, 28 Feb 2023 23:18:23 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
3832f6a88f40012d5b398e620abae7a7
1adf92bafe271660fc4582228137562c9f0da2db
d546818cbd4ba1b7ae00d0a759556e330e2aa4fef0bca65ac98453a19cb7e09a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D546818CBD4BA1B7AE00D0A759556E330E2AA4FEF0BCA65AC98453A19CB7E09A"
Last-Modified: Mon, 27 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20396
Expires: Wed, 01 Mar 2023 04:58:19 GMT
Date: Tue, 28 Feb 2023 23:18:23 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3522243-5d97-4af8-b226-ab57b3bee6ce.jpeg

34.120.237.76

200 OK

5.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3522243-5d97-4af8-b226-ab57b3bee6ce.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.7 kB (5676 bytes)
Hash
9c31845a0e9bfa6eefa096b10b1748e6
3ac78dbfb5e00eced4d80ead89637db5d5569b59
89da1434d398527a658be5746929afdc17064ea30d05b094b860557d101a2043

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3522243-5d97-4af8-b226-ab57b3bee6ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5676
x-amzn-requestid: c688d38f-fe89-4583-a61f-bd21fdc64325
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BBJiUGmboAMFWTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fd22db-17d51fe00701a6f13222bc9e;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 21:38:35 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Uw1JDVO1DW2UJvgtZqomatu3tAAs5Nn9QDTl6pD1Q_ayVfF25YqpRw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 28fdf6e146f70e7372911f118404fb20.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 22:13:39 GMT
age: 3884
etag: "3ac78dbfb5e00eced4d80ead89637db5d5569b59"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.5 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87437be5-1eb4-4c8c-a302-2b61ae9d4ff3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.5 kB (5471 bytes)
Hash
192715fdb86c2f3fd4b4e69d94e1b42e
a7c44b9b30dc2323bd9b3ace785f9d3615111413
38f3b9ea9d31a4c8d08bdf1842715ca061eea348488d8f0f3461ad8cff446c1d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F87437be5-1eb4-4c8c-a302-2b61ae9d4ff3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5471
x-amzn-requestid: 712d66d0-ef01-4d8a-8ca6-e09947b33259
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AxufTFRzIAMFv4Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f6f794-1a4b12250069b836045411b1;Sampled=0
x-amzn-remapped-date: Thu, 23 Feb 2023 05:20:20 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: cT0AxyEiEQ1YuiyM1bCT1Pd5jNYdinx1T-4AdmGEwDU7--1I-C77Lg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 219e8f088c8c2a564bdacafe44be620a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 04:21:47 GMT
age: 68196
etag: "a7c44b9b30dc2323bd9b3ace785f9d3615111413"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F943cd1ab-078a-409b-94fb-1e32ef8daeb0.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10535 bytes)
Hash
e3f40fd7a925dc0758db32f425c08e0b
3cc4b689063ab059f4784b1bc56d590084129bf9
97d534360a435cf0db269af846a30702c77d85d5616bd51354ac02c469ed5cbc

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F943cd1ab-078a-409b-94fb-1e32ef8daeb0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10535
x-amzn-requestid: 01ea907a-01d3-4c21-ba7a-391cfd828fd8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A-_y-EivoAMFtpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fc4679-3017527d3fbd3bee40b2bc08;Sampled=0
x-amzn-remapped-date: Mon, 27 Feb 2023 05:58:17 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: sbm-VS2A5gbxCovzOG1nMFhpo73kRi4U3rnGtM9yKKCHPD6E4bVPFg==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 b618c0f73dc30c968057784ed0185d7a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 13:12:36 GMT
age: 36347
etag: "3cc4b689063ab059f4784b1bc56d590084129bf9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F11b4bf4e-f145-4c9e-abad-1756e89c765f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
4.9 kB (4866 bytes)
Hash
2eedbee19ad8b7fe24b5c3cda8d92825
1eaffe902658900d684f44e4c68234075f65cb87
e0c5964a97e0c292958c7ae074d6384bac147d13fb8daf900d2097b46092205c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F11b4bf4e-f145-4c9e-abad-1756e89c765f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 4866
x-amzn-requestid: 31a47ad4-8fad-4775-b4d6-bdebe4b2cad1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BCPNsGvKoAMF9tw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fd9257-57f9393a4cfbedbb3cc3ac3e;Sampled=0
x-amzn-remapped-date: Tue, 28 Feb 2023 05:34:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: vOn3KLLGRgUecNwC9a0jr_-Z4WnjZgbGLLZESE-2cCu0PMRFCBbOxA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 15:46:10 GMT
age: 27133
etag: "1eaffe902658900d684f44e4c68234075f65cb87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2b77c22-c3f8-4f19-bbf5-186e210147ab.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (12013 bytes)
Hash
52235b5f0cc478b1fd5cec46d9432b46
5c5b1814329c7fc3ac74d4dae119db7719fc26ec
1d373ebad0ad64bfd58793f491d4719d43a0770312652a700a9760804b27f13f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd2b77c22-c3f8-4f19-bbf5-186e210147ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12013
x-amzn-requestid: b18966f1-be7a-40bb-a11a-f2e34ca640b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BEbrpGhVoAMFREw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fe7317-2781ca621d9e678f21aa066c;Sampled=0
x-amzn-remapped-date: Tue, 28 Feb 2023 21:33:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: E68nRyTscBJM6oa1B7b15UzMai_XODiWrUycez1lqj7H-0rzyibz6g==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 3236f234d59c0fda99b416088c283260.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 21:36:21 GMT
age: 6122
etag: "5c5b1814329c7fc3ac74d4dae119db7719fc26ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33adbdf5-8582-4c0e-ac8c-334da8925b4c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11512 bytes)
Hash
005d3fd580be1e8f8d16119b2eb49a54
461b0a4ab177c02a4890941361e0039114348197
ebcbf1b04babf578b73d592bf6dd064de5d0f08489b8c4b99cadbe545504ccec

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33adbdf5-8582-4c0e-ac8c-334da8925b4c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11512
x-amzn-requestid: 376bbbcf-89b7-490e-b204-cfd7f47133c1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: A4joiG4zIAMFWYw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f9b303-1d742abb3fc8f2a14c622eab;Sampled=0
x-amzn-remapped-date: Sat, 25 Feb 2023 07:04:35 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Bj_pJvGtq5y_sN0MLyFxkfQ7sXVCofodwyTtaz138uHh4ZKJxjkVDw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 f268a165a18929fd0a24a3189fbd16b2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 15:13:48 GMT
age: 29075
etag: "461b0a4ab177c02a4890941361e0039114348197"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

www.nikhilsalvi.com/wp-content/uploads/2012/10/nikhil-salvi4.png

75.98.175.81

200 OK

13 kB

URL HTTP/1.1
www.nikhilsalvi.com/wp-content/uploads/2012/10/nikhil-salvi4.png
IP
75.98.175.81:0
ASN
#55293 A2HOSTING

File type
PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced\012- data
Size
13 kB (13070 bytes)
Hash
7f4d1f9908c5cdf0a699d7aa273beaf9
72a635ccd9cad36d9520f5371c5c6a25802cd731
2a1dc7567a17049465c9679a67d762a87ddfbc3955ee89726475ca7a2dc57be8

HTTP Headers

GET /wp-content/uploads/2012/10/nikhil-salvi4.png HTTP/1.1
Host: www.nikhilsalvi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.nikhilsalvi.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Tue, 28 Feb 2023 23:18:23 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Last-Modified: Sat, 13 Oct 2012 13:55:17 GMT
ETag: "330e-4cbf1277e7b40"
Accept-Ranges: bytes
Content-Length: 13070
Cache-Control: max-age=604800, public, public
Expires: Wed, 28 Feb 2024 23:18:23 GMT
Pragma: public
Keep-Alive: timeout=3, max=500
Connection: Keep-Alive
Content-Type: image/png

34.120.237.76

200 OK

6.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69be1cfe-fd30-4b20-84bb-abf0dad9ccb7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.3 kB (6274 bytes)
Hash
d9f49c976b44afb35c5824ff9444f182
55c28d08c8b8473dfde047bed2b2c4b1c35c373a
0586cd1d7b8a483c78684b92fddf6d2665fa12e7a9b1c634c0584dab542e84d8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F69be1cfe-fd30-4b20-84bb-abf0dad9ccb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
server: nginx
content-length: 6274
x-amzn-requestid: c2cf1f8e-33c4-43c5-ad02-643193863c0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BEbspFb5IAMFXQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63fe731d-1a06ead86af3f07f0f6cb7f2;Sampled=0
x-amzn-remapped-date: Tue, 28 Feb 2023 21:33:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: zWKmaZYronNi3VR9N2YFfUyYWGpd7Nb7ZJEsiph2t-Qjg_X6s9klCQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 58b8655e3ea662bad02cac6b9d4c88ba.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Feb 2023 21:36:29 GMT
age: 6121
etag: "55c28d08c8b8473dfde047bed2b2c4b1c35c373a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML